Getting "checksum scope is not valid" on license activation

[HanShijia999]

Hello,

Today I'm testing with my code with license activation, I suddenly have this "checksum scope is not valid" error.
e.g.
"valid": false, "detail": "checksum scope is not valid (does not match any accessible artifacts)", "code": "CHECKSUM_SCOPE_MISMATCH",

In the response, the "product" section under "relationships" links to the right product, and from the artifact list I obtained using
https://api.keygen.sh/v1/accounts/<accounts>/artifacts?product=<UUID>
I can see multiple artifacts with the checksum I provided linked to that product.

Any suggestions?

[ezekg]

Are the releases published and are the artifacts uploaded?

[HanShijia999]

Hi, thank you for your help.

I have created releases in Dev and Stable, with that product.
I also have created artifacts but with an image placeholder, but manually filled the checksum section with my desired value.

I got response below when trying to validate the license
https://api.keygen.sh/v1/accounts/<my accounts>/licenses/actions/validate-key

{
    "data": {
        "id": <ID>,
        "type": "licenses",
        "attributes": {
            "name": null,
            "key": <license key>
            "expiry": "2023-12-23T09:11:56.909Z",
            "status": "EXPIRING",
            "uses": 0,
            "suspended": false,
            "scheme": null,
            "encrypted": false,
            "strict": true,
            "floating": false,
            "protected": true,
            "version": null,
            "maxMachines": 1,
            "maxProcesses": null,
            "maxCores": null,
            "maxUses": null,
            "requireHeartbeat": false,
            "requireCheckIn": false,
            "lastValidated": "2023-12-22T02:49:53.839Z",
            "lastCheckIn": null,
            "nextCheckIn": null,
            "lastCheckOut": null,
            "metadata": {},
            "created": "2023-12-21T09:11:33.756Z",
            "updated": "2023-12-22T02:49:53.883Z"
        },
        "relationships": {
            "account": {
                "links": {
                    "related": "/v1/accounts/<accounts ID>"
                },
                "data": {
                    "type": "accounts",
                    "id": <accounts ID>
                }
            },
            "environment": {
                "links": {
                    "related": null
                },
                "data": null
            },
            "product": {
                "links": {
                    "related": "/v1/accounts/<accounts ID>/licenses/<product ID>/product"
                },
                "data": {
                    "type": "products",
                    "id": "<product ID>"
                }
            },
            ...
    },
    "meta": {
        "ts": "2023-12-22T02:49:53.886Z",
        "valid": false,
        "detail": "checksum scope is not valid (does not match any accessible artifacts)",
        "code": "CHECKSUM_SCOPE_MISMATCH",
        "scope": {
            "fingerprint": <my fingerprint>,
            "checksum": <my checksum>
        }
    }
}

From this response I can see the license links to the product correctly. The ID of the product matches.

When I run
https://api.keygen.sh/v1/accounts/<my account>/artifacts?product=<product ID>
With my admin token, I got

{
    "data": [
        {
            "id": "<some ID>",
            "type": "artifacts",
            "attributes": {
                "filename": "Stable Release",
                "filetype": null,
                "filesize": null,
                "platform": null,
                "arch": null,
                "signature": null,
                "checksum": <my checksum>
                "status": "UPLOADED",
                "metadata": {},
                "created": "2023-12-22T02:44:36.500Z",
                "updated": "2023-12-22T02:45:06.967Z"
            },
            "relationships": {
                "account": {
                    "links": {
                        "related": "/v1/accounts/<some ID>"
                    },
                    "data": {
                        "type": "accounts",
                        "id": "<some ID>"
                    }
                },
                "environment": {
                    "links": {
                        "related": null
                    },
                    "data": null
                },
                "release": {
                    "links": {
                        "related": "/v1/accounts/<some ID>/releases/<some ID>"
                    },
                    "data": {
                        "type": "releases",
                        "id": "<some ID>"
                    }
                }
            },
            "links": {
                "related": "/v1/accounts/<some ID>/artifacts/<some ID>/Stable%20Release",
                "self": "/v1/accounts/<some ID>/artifacts/<some ID>"
            }
        },
      ...
    ]
}

The checksum of the shown artifacts matches the one I used for the key validation

However, When I run
https://api.keygen.sh/v1/accounts/<my account>/artifacts?product=<product ID>
with
"Authorization": "License<License Key>"
I got

{
    "data": []
}

When I run
https://api.keygen.sh/v1/accounts/<my account>/releases/<release ID>
with
"Authorization": "License<License Key>"
I got

{
    "meta": {
        "id": "ad7aac82-9b35-4a63-b909-f2ac9e16970b"
    },
    "errors": [
        {
            "title": "Not found",
            "detail": "The requested release 'eb3bfc55-4b85-463d-8dda-23c24f1fae50' was not found",
            "code": "NOT_FOUND"
        }
    ]
}

So it seems the license can not access the release.

Hope that clarifies.

[ezekg]

Is the release published? Licenses cannot access unpublished releases.

[HanShijia999]

Now I see that publish button at the top right corner.

Thank you for the help!