Wireframe for Server-Side License Activation
Server-side app license code validation, as I imagine it, in a nutshell: If the token expires and there’s no server connection, you have to figure out how punishing you want to be. I suggest you do not punish by default and assume people have good intentions. Possible escalations: Remote or server-side deactivation of licenses can be useful to prevent continued use after refunds.