Source Protection & Licensing for Node.js Apps

[thex]

Hello Experts,

Good day.

I am working with a node.js application and we need to protect the application from unauthorized usage, prevent source code stealing and piracy. We are fine about the client side Javascript left open to the client browser, but need the server side app sources to be protected. Is there any application (Free or Commercial) doing this job including:

1. IP, Domain locking
2. Source Encryption
3. License Date management

I have used Source Guardian for our PHP code protection and love its ability to setup license expiry features. Looking for similar protection for node.js codes.

Any help and your experiences will be much appreciated.

Thanking a lot.

[mawburn]

@thex

server side app sources to be protected

Don’t give the user the server side code.

Done.

No need for all the things you listed. The user doesn’t see the serverside code. For all they know, the server is written in COBOL.

[thex]

Yes, this is to protect the sources and distribute our app. We have to deploy the app in our client’s Intranet and hence the source needs to be protected. Hope am making sense.

Thanking.

[mawburn]

Yes, that makes sense. Have you tried nexe?

[thex]

Thanks mawburn. Nexe seems good, but it doesn’t have IP, domain locking features it seems.

I came across JScrambler (www.jscrambler.com) which has this feature, but their pricing is not affordable for our small app. Also, JScrambler looks like, our app need to communicate to their servers (JScrambler User Licenses and Service Requests per month) - which may not be possible as our client local network will not have consistent access to Internet. So looking for a standalone protection here.

Rgds.

[mawburn]

@thex

it doesn’t have IP, domain locking

What does this mean?

AFAIK, this is limiting an app to a certain domain or range of IPs. Wouldn’t this be done with code itself?

[thex]

Yes, in other way, IP, Domain locking can be done within our app code.

But the IP, Domain Locking here means for locking the encrypted source from decryption over a different IP or Domain. Source code protectors have this feature so the encrypted code will need to be in the allowed IP or Domain in order to get decrypted and then execute the app code. It is like a lock to pass before the decrypt happens - protection at the first level.

Am trying with JScrambler - but not sure if that will work for us. Looking for some other Node.Js protectors.

Thanks.