Remove application license gate

2026-07-02 12:58:44 +08:00
parent 9c5cbc4637
commit 2da2121829
29 changed files with 51 additions and 1923 deletions
@@ -0,0 +1,32 @@
+# Application License Removal Audit
+
+Date: 2026-07-02
+
+## Decision
+
+The application-level offline license gate has been removed. The system now relies on login sessions, role checks, audit logging, deployment network controls, and operation-level guards. LandSAR vendor license configuration is not part of this removal and remains required for LandSAR production runtimes.
+
+## Removed Scope
+
+- Global FastAPI license dependency and `/api/license/*` routes.
+- Backend LIC2 verification service and bundled license issuer tools.
+- Frontend license status store fields, license overlay, login-page license warning, and header license chip.
+- Deployment example variable `LICENSE_PATH`.
+- Audit-log display labels for removed license upload/refresh actions.
+
+## Preserved Scope
+
+- User authentication and session cookie flow.
+- Admin versus read-only write protection.
+- High-risk write audit logging.
+- LandSAR runtime license settings such as `LANDSAR_LICENSE_MODE`, `LANDSAR_LICENSE_HOST`, and `LANDSAR_LICENSE_PORT`.
+
+## Operational Result
+
+Startup and API availability no longer depend on a local `.lic` file or issuer-generated public/private key material. Removing the gate also removes a misleading security boundary: application access control must be handled by account roles, network exposure, and deployment policy rather than a local offline license file.
+
+## Follow-up Checks
+
+- Keep `.env` and initial admin credentials out of deployable artifacts.
+- Keep LandSAR license server settings documented as vendor runtime requirements, not application authorization.
+- Continue using the operations maintenance panel for failed task cleanup and audit review.