Download machine.lic

[flopp999]

I found in the API docs how to be able to download a machine.lic file. But where do I get the Bearer TOKEN?

I tried to create a new API Token under Access but it doesn't work.

[flopp999]

OK I managed to download a machine file.
I created an API Token for the product but it says I should be careful to use this.
Is there any other way to be able to download machine file?

import shutil
import requests

res = requests.get(
  "https://api.keygen.sh/v1/accounts/xxxxxxxxxxxx/machines/yyyyyyyyyyyyyy/actions/check-out",stream=True,
  headers={
    "Accept": "application/vnd.api+json",
    "Authorization": "Bearer prod-zzzzzzzzzzzzzzzzzzzzzzzzz"
  }
)

with open('machine.lic', 'wb') as out_file:
  shutil.copyfileobj(res.raw, out_file)

[ezekg]

Use license authentication to download machine files client-side that belong to a specific license.

[flopp999]

Thanks it works.
is it possible to get relationships inside the machine.lic through API?
I tried with below curl and got "{"meta":{"id":"xxxx-7800-yyyy-aaaa-2ffffff"},"errors":[{"title":"Bad request","detail":"unpermitted parameter","source":{"pointer":"/data"}}]}"

curl -X POST https://api.keygen.sh/v1/accounts/xxxxxx/machines/yyyyy/actions/check-out   -H 'Content-Type: application/vnd.api+json'   -H 'Accept: application/vnd.api+json'   -H 'Authorization: License uuuuuuuu'   -d '{
        "data": {
          "type": "machines",
          "attributes": {
            "fingerprint": "kkkkk",
            "platform": "Linux",
            "name": "mitt namn"
          },
          "relationships": {
            "license": {
              "data": {
                "type": "licenses",
                "id": "lllllllll"
              }
            }
          }
        }
      }'

[ezekg]

You need to use the include query parameter for that.

curl 'https://api.keygen.sh/v1/accounts/<account>/machines/<machine>/actions/check-out?include=license' \
  -H 'Authorization: License <key>'

[flopp999]

Thanks

[qhuanguk]

I am doing a similar request to download manine.lic file and trying to authorize with license ("-H 'Authorization: License uuuuuuu'"). However, I got an "Access Denied" response as follows:

{"meta":{"id":"942803eb-f552-49b0-bbd1-509d6f12b416"},"errors":[{"title":"Access denied","detail":"You do not have permission to complete the request (license lacks permission to perform action)"}]}

Is this related to some of my settings within the policy (I already tried to set "Authentication Strategy" as "License Keys" and "Mixed" with no success) and/or license? Thanks

[ezekg]

@qhuanguk are you sure the machine you're checking out belongs to the license you're authenticating as?

[qhuanguk]

Thanks @ezekg. Honestly I don't know exactly what "belongs to" means and how such belonging is defined within kengen.

I am trialing keygen at the moment for a licensing solution which supports node lock as well as features/entitlements licensing, mainly for offline usage. I am manually creating license on keygen web GUI, and then machine. While creating machine, I select the created license from the drop down list in the relationships part (not sure if this defines the belonging needed). Obviously I could check out the machine file from the GUI, but I am also looking at means to "checkout" this file with the previous curl command over internet.

I have no problem to check out the file when authorizing with product or admin tokens with a command like

curl 'https://api.keygen.sh/v1/accounts/{account}/machines/{machine}/actions/check-out?include=license,license.entitlements,license.product&encrypt=1' \  
   -H 'Accept: application/vnd.api+json' \
   -H 'Authorization: Bearer prod-***********'

However, I don't want to exposure product/admin tokens for the checkout and hence looking for the license key authorization, and that is where I have issues.

Any advise would be greatly appreciated.