Client Integration

Connect your application to LibreAuth — wire-authenticated SDK on API v1.3 or v1.4.

Setup in 3 steps

1. Credentials — use your App Name and Owner ID (10 characters)
2. Set API URL — Enterprise: https://libreauth.nutexe.dev/api/1.4/ · other plans: https://libreauth.nutexe.dev/api/1.3/
3. C++ clients: set Ed25519 public key from init response — C++ setup

PHP

require 'LibreAuth.php';

$LibreAuthPublicKey = 'YOUR_ED25519_PUBLIC_KEY_HEX';

$app = new LibreAuth('AppName', 'OWNER_ID', '1.0', 'https://libreauth.nutexe.dev/api/1.3/');
$app->Init();

$info = $app->Login('user', 'pass', 'HWID-HERE');
if ($info) {
    echo "OK: {$info['username']}
";
    foreach ($info['subscriptions'] as $s) {
        echo "  {$s['subscription']} -> {$s['expiry']}
";
    }
}

Copy LibreAuth.php from SDK source.

C++

std::string url = "https://libreauth.nutexe.dev/api/1.3/";

static std::string get_public_key_hex() {
    return "YOUR_ED25519_PUBLIC_KEY_HEX";
}

LibreAuth::Client app("AppName", "OWNER_ID", "1.0", url);
app.setPublicKey(get_public_key_hex());
app.init();
app.login("user", "pass", la_guard::Hwid());

C# / JS / Python / Go / Rust / Lua

var app = new LibreAuth("AppName", "OWNER_ID", "1.0", "https://libreauth.nutexe.dev/api/1.3/");
await app.InitAsync();
var info = await app.LoginAsync("user", "pass", "HWID-HERE");
Console.WriteLine(info.GetProperty("username"));

Per-language guides: Client SDKs

API reference

Full reference: All Endpoints · Response Signing · API v1.4 (Enterprise)

API v1.4 (Enterprise)

API v1.4 is live — requires Enterprise subscription. Point your client to https://libreauth.nutexe.dev/api/1.4/.

• Use opaque wire la_v=4
• Parse compact response keys (s, m, i, …)
• Send seq after init (1, 2, 3…)
• Send client_build if panel minimum is set

Go-live checklist

• Client ver matches the app version you were given
• init() succeeds on production build
• Ed25519 signature verify passes (C++ / signed responses)
• Hash check enabled → send exe MD5 on every init
• Use official SDK — wire token on every request (no legacy loaders)
• API URL in build matches your provider — no hardcoded third-party URLs
• Use enckey on init for encrypted wire responses