授权接口说明

时间戳允许偏差 ±300 秒；nonce 长度 16-64，仅含字母数字与下划线、短横线； 同一 nonce 在同一机器码上只能使用一次。

POST https://auth.example.com/api/v1/license/verify
Content-Type: application/json

{
  "machine_code": "A1B2-C3D4-E5F6-7890",
  "domain": "example.com",
  "nonce": "9f2c1a7b4e8d6305",
  "ts": 1762156800,
  "version": "1.0.0"
}

payload 是 base64url 编码的原始 JSON 字节；sig 是对这些原始字节的签名。 客户端必须：验签 → 校验 ts 窗口 → 校验 nonce 与请求一致 → 再读取 code。

{
  "alg": "RS256",
  "payload": "eyJjb2RlIjowLCJtc2ciOiLm..", 
  "sig": "Base64(签名)"
}

// payload 解码后
{
  "code": 0,
  "msg": "授权有效",
  "ts": 1762156801,
  "nonce": "9f2c1a7b4e8d6305",
  "data": {
    "license_no": "8F3A1C09D2B7E645",
    "status": "active",
    "domain": "example.com",
    "machine": "A1B2****7890",
    "email": "z***@example.com",
    "expires_at": 1793692800,
    "expires_text": "2026-11-03 15:50:00",
    "days_left": 365,
    "max_rebind": 3,
    "rebind_used": 1,
    "rebind_left": 2,
    "check_interval": 1800,
    "offline_grace_hours": 72,
    "server_time": 1762156801
  }
}