A DRM & software-licensing platform — sell digital products protected by hardware-bound license keys, with a full marketplace, seller tooling, payments, and an administrative control plane.
🔗 Live Demo · hosted free-tier — the API may take ~30s to wake on first load
Proprietary & source-available. This repository is published for demonstration and evaluation only. It is not open source — see LICENSE. Please do not copy, reuse, or redistribute.
SecureVault lets creators distribute software and digital assets under license. Every product is issued as an encrypted artifact unlocked by a hardware-bound license key with enforced usage limits.
It ships with a buyer marketplace, a seller dashboard, a payments pipeline, fraud monitoring, and a full admin console. Developed as a collaborative project, it emphasizes security, auditability, and seller control.
- Clone the repo:
git clone https://github.com/theoria-lab/SecureVault/ - Environment: Create a
.envfile using.env.examplefrom backend. - Backend: Navigate to
/backend, install requirements, and runuvicorn main:app --reload. - Frontend: Navigate to
/frontend, install packages withnpm install, and runnpm run dev. - Database: Ensure Docker is running for the PostgreSQL container.
- Browse, search, filter, and sort licensed products.
- Purchase licenses through a secure Razorpay checkout.
- Personal library of owned keys with remaining-use tracking.
- Register products with metadata, integrity hashes, and a real file upload.
- Prepaid key-credit packs in tiered bundles — Starter (5 keys) and Value (12 keys, 2 free).
- Live sales, credit balance, and listing management.
- User management with suspend / reactivate.
- Live-editable commission brackets and a per-transaction commission ledger for auditing platform revenue.
- License dispute lookup with a complete, time-ordered audit trail.
- Full oversight of every listing and issued key, with seller attribution.
- [Tushar Aggarwal] — Backend Infrastructure & Encryption Logic Architect
- [Devyanshu Rathore] — Frontend Architecture & UI/UX Development
- [Tushar Sharma] — Backend API Development & Database Integration
- Hardware-bound license keys with per-key decrypt limits.
- JWT access/refresh authentication (refresh tokens as httpOnly cookies).
- Admin 2FA (TOTP), shorter admin sessions, and stricter admin rate limiting.
- Login rate limiting and a shared, typed error contract.
- Razorpay order creation plus HMAC-verified webhooks with idempotent, row-locked fulfillment.
- Anomaly detection on license-verification behavior (IsolationForest) with a threshold fallback.
This is a collaborative project. Please follow these guidelines:
- Branching: Use
feature/orfix/prefixes for all new work. - Pull Requests: All PRs require review from at least one other team member before merging.
- Commits: Follow semantic commit messages (e.g.,
feat: add TOTP 2FAorfix: resolve payment webhook bug).
| Layer | Technologies |
|---|---|
| Backend | Python, FastAPI, SQLAlchemy, Alembic, Pydantic |
| Database | PostgreSQL |
| Frontend | Next.js, React |
| Auth | JWT, TOTP (2FA), bcrypt |
| Payments | Razorpay |
| ML | scikit-learn |
| Infra & Deploy | Docker · Render (API) · Neon (Postgres) · Vercel (web) |
A FastAPI service exposes a typed, versioned API (auth, seller, buyer, licensing, payments, admin) backed by PostgreSQL with Alembic-managed migrations. A Next.js frontend delivers the buyer, seller, and admin experiences. Payments run through Razorpay with webhook-driven fulfillment, and a storage abstraction keeps the encrypted artifacts behind a clean seam. It runs locally with a single Docker Compose command and is deployed on a free-tier cloud stack (Render + Neon + Vercel).
Live in production. The web platform — marketplace, seller and admin consoles, payments, license issuance + verification, and fraud monitoring — is deployed and functional.
- Production-grade AES-GCM encryption.
- Desktop decryptor client for license unlocking.
- Advanced analytics for seller dashboards.
© 2026 Theoria Labs — All rights reserved.