C++ SDK overview
EonAuth’s C++ SDK is a static library for Windows apps with a single public header. Your app
includes eonauth.h, calls Init once, and then signs users in, checks their tiers and fetches
protected data from any .cpp file:
#include "eonauth.h"
eonauth::LoginAsync(user, pass, [](const eonauth::Result& r) { /* runs on your UI thread */ });if (eonauth::HasTier("Pro")) { /* instant, no network */ }Getting access
Section titled “Getting access”The SDK is invite only for now. These docs are public so you can see what it does before you ask. To get it, DM @snailyt on Telegram.
Platform support
Section titled “Platform support”| Operating system | Windows only (it uses WinHTTP, CNG, DPAPI and the Windows certificate store) |
| Compiler | Visual Studio 2022 or 2026, C++17 or newer |
| Architectures | x64 and Win32, Debug and Release |
| Runtime library | /MD and /MDd (the Visual Studio default) |
| Other platforms | Not available yet |
What’s in the package
Section titled “What’s in the package”| Path | What it is |
|---|---|
eonauth/ |
The SDK: EonAuth.vcxproj (static library), EonAuth.props, include/ and src/ |
eonauth/include/eonauth.h |
The only header your app includes |
GUI Demo/ |
A Win32 app: password, key and free sign-in, a plan screen, upgrade with a key, session resume |
main.cpp |
A console demo using the blocking API |
config.h |
Your app’s constants, generated by the panel. Never commit a real one |
demo_config.h |
Turns config.h into an eonauth::Config |
What it protects, and what it doesn’t
Section titled “What it protects, and what it doesn’t”The SDK secures the connection and the protocol. Requests are encrypted, signed, replay-protected and sent only over a pinned TLS connection. Every response must carry an Ed25519 signature from EonAuth’s server, so nobody can stand up a fake server for your app, even with the keys pulled out of your binary.
It does not secure your binary. Anyone who controls the PC can patch out calls, attach a debugger and read memory, or run a modified copy. “The SDK checks passed” never means “this can’t be bypassed.”
So:
- Let the server decide. Bans, expiry, PC locks and revocation are all checked on the server.
- Make valuable features depend on something only the server hands out:
tier-gated variables or files, not a
local
HasTiercheck alone. - Anti-debugging, obfuscation and anti-VM are out of scope for the SDK.
Read Security model for the details.
- Install it in your Visual Studio solution.
- Generate
config.hin the panel. - Follow the Quickstart.