java - How to protect jar from being used by someone else? -

we distributing java jar files key assets of our business customers. can obfuscation make harder revere-engineering don't want jar files being used outside of our application. there solutions?

we considering solution of passing access token (with short expiration) , signature @ run-time our application, , validating token within jar each time public interface being called. token , signature generated web server , encrypted private key while jars use hard-coded public key verify signature. work?

whatever amount of obfuscation add binary file, possible reverse engineering it. require more work.

with solution propose, see major issues : - legitimate users penalized if web service distributing tokens down - illegitimate users patch java class skip token verification. hence having better service legitimate users.

the main problem have added value in jar. if release it, can used anyone.

one solution, used on web, keep algorithm in premises side , propose on-line web service. client submit request, server in premises compute answer en serve client.

but different business model require highly available infrastructure. main cloud provider can that.