Comment

Comment by nstart

Huh. So gumroad verification is a simple call to the verify endpoint and I'm guessing if it returns "success": true that's good enough to enable usage of the product?

I guess it would be an interesting experiment to create a proxy that captures any values going out to gumroad's license verification api endpoint and change all server responses to be true instead of false. Ditto for altering the number of uses of a product in case there is a limit there too.

For anyone interested in the documentation: https://app.gumroad.com/api#licenses

Also for anyone who is new to this topic, intercepting and altering server responses can yield fascinating results in today's client side heavy code web apps.

parent nstart 3 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton