Skull Labs Auth

Getting Started

Create a project, copy its project key, then choose whether your app signs in with username/password or license keys.

Initialize a Project Node from the Command Center.

Copy your API Key from the project dashboard.

Allocate users or generate keys depending on your architecture.

Import the SDK and drop the authentication code into your entry point.

Project Key

Every SDK initialization requires the project key shown at the top of the project page. This securely identifies your application to the identity servers.

.env

PROJECT_KEY="slk_prod_xxxxxxxxxxxx"

Username / Password Login

Traditional authentication flow. Use this when you manually provision users via the dashboard or automate signups via the Admin API.

Program.cs

using SkullLabs.Identity;

var auth = new AuthClient("slk_prod_xxxxxxxxxxxx");
var session = await auth.LoginAsync("alice", "hunter2");

if (!session.IsSuccess) {
    Console.WriteLine($"[ERR] {session.Error}");
    return;
}

Console.WriteLine($"Welcome, {session.User?.Username}");
Console.WriteLine(
    session.User?.ExpiresAtUtc is DateTime expiry
        ? $"Valid until: {expiry.ToLocalTime():dd MMM yyyy}"
        : "Valid until: Lifetime"
);

License-Only Authentication

Anonymous, key-based authentication. Ideal for software distribution where users purchase a key and immediately gain access without creating an account.

Program.cs

using SkullLabs.Identity;

var auth = new AuthClient("slk_prod_xxxxxxxxxxxx");
var session = await auth.LoginWithLicenseAsync("SKL-XXXX-XXXX");

if (!session.IsSuccess) {
    Console.WriteLine($"[ERR] {session.Error}");
    return;
}

Console.WriteLine(
    session.License?.ExpiresAt is long expiry
        ? $"License expires: {DateTimeOffset.FromUnixTimeMilliseconds(expiry).LocalDateTime}"
        : "License is Lifetime"
);

Hardware Locking (HWID)

When HWID locking is enabled for a user or a key, the SDK automatically collects a secure hash of the hardware environment during the first successful login. All subsequent logins must originate from the same hardware.

Note: HWID resets can be performed manually via the Command Center if a user upgrades their machine.

Status Controls

Identities can be marked as Active, Paused, or Banned. The SDK automatically validates status on every request and returns the corresponding error payload to your client.