v0.4: licensing — server validation, DPAPI cache, Ed25519 signed responses

UX bonus: clicking "Reprendre" on an interrupted download skips the release-notes confirmation dialog (the user already approved when they first clicked Installer). Server side ----------- - migrations/001_init.sql: licenses, license_machines, rate_limit, audit_log on InnoDB/utf8mb4. Foreign keys, unique on license_key, slot uniqueness per (license_id, machine_id). - api/lib/Db.php: thin PDO singleton (exception mode, prepared, no emul). - api/lib/Crypto.php: Ed25519 sign/verify via libsodium (sodium_crypto_*), HMAC-SHA-256 helper for v0.6, canonicalJson() that strips `signature` before serializing — must match exactly the encoding done client-side before verify. - api/routes/ValidateLicense.php: POST /license/validate. Looks up the key, walks the machine slot logic (insert or update last_seen), enforces max_machines, returns a payload signed Ed25519 + status of valid/expired/revoked/machine_limit_exceeded/invalid. Audit logs every outcome. Rate-limit 10/min/IP via the rate_limit table. - tools/generate-keypair.php: prints a fresh sodium keypair so the operator drops the hex into config.php and the public_key_hex into the launcher resource. - tools/issue-license.php: PRSRV-XXXX-XXXX-XXXX-XXXX generator (32-char unambiguous alphabet), inserts the license, prints the key once. - tools/sign-manifest.php: now also signs the manifest itself with Ed25519 after computing the per-zip sha256s. - config.example.php: schema rewritten with sections db / hmac / ed25519 / jwt / rate-limit. config.php remains gitignored. Client side ----------- - Models/License.cs: LicenseValidationRequest + LicenseValidationResponse with CanDownload(VersionManifest) — entitlement_until vs version's minLicenseDate. The status valid|expired|revoked|machine_limit_exceeded flow is preserved end-to-end. - Core/Licensing/LicenseService.cs: * machineId = SHA-256 of HKLM/Software/Microsoft/Cryptography/MachineGuid + UserName (stable, no PII leak) * online ValidateAsync calls /license/validate with launcher version * embedded server-pubkey.txt drives Ed25519 verification of the response (skipped gracefully if pubkey not yet provisioned) * SaveCached / GetCached use DPAPI CurrentUser scope on the license key; the cleartext key never touches disk * GetCached has a 7-day offline grace window after the last successful validation, so going offline doesn't lock the user out - Core/Resources/server-pubkey.txt: EmbeddedResource. Default content is a comment, which the service treats as "no pubkey configured" and bypasses verification. Operator pastes the real hex post-deploy and rebuilds. - Core/PSLauncher.Core.csproj: Polly, NSec.Cryptography (Ed25519), System.Security.Cryptography.ProtectedData (DPAPI). - App/Views/OnboardingDialog.xaml(.cs): first-launch / "🔑 Activer" modal. Calls LicenseService, displays status messages with red foreground on errors and green-tinted secondary text otherwise. - ViewModels/VersionRowViewModel.cs: new LicenseAllowsDownload property. Install button label switches to "🔒 License insuffisante" when the user's entitlement_until precedes the version's minLicenseDate; CanInstall is false in that case so the click is a no-op too. - ViewModels/MainViewModel.cs: loads the cached license at startup (no network call), surfaces it as LicenseSummary in the top bar, exposes ActivateLicenseCommand to (re)open the onboarding dialog. RebuildList applies the per-version license filter so older installed versions remain launchable but newer-than-license ones can't be downloaded. - Views/MainWindow.xaml: top bar gains a "🔑 Activer / changer" button next to the license summary. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-01 10:12:37 +02:00
parent 9bdcdabb9e
commit 7a29dbb049
20 changed files with 977 additions and 34 deletions
--- a/src/PSLauncher.App/ViewModels/MainViewModel.cs
+++ b/src/PSLauncher.App/ViewModels/MainViewModel.cs
@@ -9,6 +9,7 @@ using PSLauncher.App.Views;
 using PSLauncher.Core.Configuration;
 using PSLauncher.Core.Downloads;
 using PSLauncher.Core.Installations;
+using PSLauncher.Core.Licensing;
 using PSLauncher.Core.Manifests;
 using PSLauncher.Core.Process;
 using PSLauncher.Core.Updates;
@@ -26,8 +27,11 @@ public sealed partial class MainViewModel : ObservableObject
    private readonly IUpdateChecker _updateChecker;
    private readonly IDownloadManager _downloadManager;
    private readonly IZipInstaller _zipInstaller;
+    private readonly ILicenseService _licenseService;
    private readonly ILogger<MainViewModel> _logger;

+    private LicenseValidationResponse? _license;
+
    private RemoteManifest? _lastManifest;
    private CancellationTokenSource? _activeDownloadCts;
    private VersionRowViewModel? _activeRow;
@@ -57,7 +61,18 @@ public sealed partial class MainViewModel : ObservableObject
    [ObservableProperty] private double _progressPercent;
    [ObservableProperty] private string? _progressDetail;

-    public string LicenseSummary => "License : non configurée (v0.4)";
+    public string LicenseSummary
+    {
+        get
+        {
+            if (_license is null) return "License : non configurée";
+            if (_license.Status == "valid")
+                return $"License : {_license.OwnerName} • exp. {_license.DownloadEntitlementUntil:dd/MM/yyyy}";
+            if (_license.Status == "expired")
+                return $"License expirée le {_license.DownloadEntitlementUntil:dd/MM/yyyy}";
+            return $"License : {_license.Status}";
+        }
+    }

    public string EmptyHint =>
        "Aucune version locale ni distante.\n" +
@@ -85,6 +100,7 @@ public sealed partial class MainViewModel : ObservableObject
        IUpdateChecker updateChecker,
        IDownloadManager downloadManager,
        IZipInstaller zipInstaller,
+        ILicenseService licenseService,
        ILogger<MainViewModel> logger)
    {
        _registry = registry;
@@ -95,7 +111,13 @@ public sealed partial class MainViewModel : ObservableObject
        _updateChecker = updateChecker;
        _downloadManager = downloadManager;
        _zipInstaller = zipInstaller;
+        _licenseService = licenseService;
        _logger = logger;
+
+        // Charge la license depuis le cache (pas d'appel réseau au démarrage,
+        // ça reste rapide ; un refresh proactif arrive dès qu'on clique « Vérifier les MAJ »)
+        _license = _licenseService.GetCached();
+
        RebuildList();
    }

@@ -131,10 +153,15 @@ public sealed partial class MainViewModel : ObservableObject
        }

        // Marque les rows distantes qui ont un DL en pause (partial + state.json présents)
+        // et applique le filtre license
        foreach (var r in rows.Where(r => r.IsRemoteOnly))
        {
            var st = _downloadManager.GetResumableState(r.Version);
            if (st is not null) r.ResumableBytes = st.DownloadedBytes;
+
+            // License : la version est-elle téléchargeable selon notre entitlement ?
+            r.LicenseAllowsDownload = r.Remote is not null
+                && _licenseService.CanDownloadVersion(_license, r.Remote);
        }

        // Featured : plus haute installée, sinon plus haute distante
@@ -199,6 +226,20 @@ public sealed partial class MainViewModel : ObservableObject
    }
    private bool CanCheckUpdates() => !IsBusy;

+    [RelayCommand]
+    private async Task ActivateLicenseAsync()
+    {
+        var dialog = new Views.OnboardingDialog(_licenseService) { Owner = Application.Current.MainWindow };
+        dialog.ShowDialog();
+        if (dialog.LicenseActivated)
+        {
+            _license = _licenseService.GetCached();
+            OnPropertyChanged(nameof(LicenseSummary));
+            RebuildList();
+        }
+        await Task.CompletedTask;
+    }
+
    [RelayCommand]
    private void OpenInstallRoot()
    {
@@ -245,21 +286,28 @@ public sealed partial class MainViewModel : ObservableObject

        try
        {
-            // 1) Récupère release notes (best effort)
-            string notes = "_Aucune release note fournie._";
-            if (!string.IsNullOrEmpty(row.Remote.ReleaseNotesUrl))
-            {
-                try
-                {
-                    notes = await _manifestService.FetchReleaseNotesAsync(row.Remote.ReleaseNotesUrl, ct);
-                }
-                catch (Exception ex) { _logger.LogWarning(ex, "Release notes fetch failed"); notes = "_Release notes indisponibles._"; }
-            }
+            // Si reprise d'un DL interrompu, on saute la popup de release notes :
+            // l'utilisateur a déjà confirmé sa décision la première fois.
+            var isResume = row.HasResumableDownload;

-            // 2) Dialog de confirmation avec release notes
-            var dialog = new UpdateAvailableDialog(row.Remote, notes) { Owner = Application.Current.MainWindow };
-            dialog.ShowDialog();
-            if (!dialog.DownloadRequested) return;
+            if (!isResume)
+            {
+                // 1) Récupère release notes (best effort)
+                string notes = "_Aucune release note fournie._";
+                if (!string.IsNullOrEmpty(row.Remote.ReleaseNotesUrl))
+                {
+                    try
+                    {
+                        notes = await _manifestService.FetchReleaseNotesAsync(row.Remote.ReleaseNotesUrl, ct);
+                    }
+                    catch (Exception ex) { _logger.LogWarning(ex, "Release notes fetch failed"); notes = "_Release notes indisponibles._"; }
+                }
+
+                // 2) Dialog de confirmation avec release notes
+                var dialog = new UpdateAvailableDialog(row.Remote, notes) { Owner = Application.Current.MainWindow };
+                dialog.ShowDialog();
+                if (!dialog.DownloadRequested) return;
+            }

            // 3) Download
            row.State = VersionRowState.Downloading;
--- a/src/PSLauncher.App/ViewModels/VersionRowViewModel.cs
+++ b/src/PSLauncher.App/ViewModels/VersionRowViewModel.cs
@@ -42,12 +42,20 @@ public sealed partial class VersionRowViewModel : ObservableObject
    [NotifyPropertyChangedFor(nameof(HasResumableDownload))]
    private long _resumableBytes;

+    [ObservableProperty]
+    [NotifyPropertyChangedFor(nameof(InstallButtonLabel))]
+    [NotifyPropertyChangedFor(nameof(LicenseAllowsInstall))]
+    [NotifyCanExecuteChangedFor(nameof(InstallCommand))]
+    private bool _licenseAllowsDownload = true;
+
    public bool HasResumableDownload => ResumableBytes > 0;
+    public bool LicenseAllowsInstall => LicenseAllowsDownload;

    public string InstallButtonLabel
    {
        get
        {
+            if (!LicenseAllowsDownload) return "🔒  License insuffisante";
            if (!HasResumableDownload) return "⬇  Installer";
            if (Remote is null || Remote.Download.SizeBytes <= 0) return "↻  Reprendre";
            var pct = (double)ResumableBytes / Remote.Download.SizeBytes * 100.0;
@@ -133,7 +141,7 @@ public sealed partial class VersionRowViewModel : ObservableObject

    [RelayCommand(CanExecute = nameof(CanInstall))]
    private void Install() => InstallHandler?.Invoke(this);
-    private bool CanInstall() => State == VersionRowState.AvailableIdle;
+    private bool CanInstall() => State == VersionRowState.AvailableIdle && LicenseAllowsDownload;

    [RelayCommand(CanExecute = nameof(CanUninstall))]
    private void Uninstall() => UninstallHandler?.Invoke(this);