fix(api): add timeout and validation to license handshake

- Add 5 second timeout to license fetch to prevent indefinite blocking
- Validate license response is not empty before setting
- Gracefully handles timeout and empty response errors

Author: orius123

descope/api/client.go

@@ -1822,6 +1822,9 @@ func (c *Client) FetchLicense(ctx context.Context) (string, error) {
 	if err != nil {
 		return "", err
 	}
+	if resp.LicenseType == "" {
+		return "", fmt.Errorf("empty license type returned from server")
+	}
 	return resp.LicenseType, nil
 }
 

descope/client/client.go

@@ -2,6 +2,7 @@ package client
 
 import (
 	"context"
+	"time"
 
 	"github.com/descope/go-sdk/descope"
 	"github.com/descope/go-sdk/descope/api"
@@ -90,7 +91,9 @@ func NewWithConfig(config *Config) (*DescopeClient, error) {
 	})
 
 	if config.ManagementKey != "" {
-		if license, err := mgmtClient.FetchLicense(context.Background()); err != nil {
+		ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
+		defer cancel()
+		if license, err := mgmtClient.FetchLicense(ctx); err != nil {
 			logger.LogInfo("License handshake failed, continuing without header: %v", err)
 		} else {
 			mgmtClient.SetLicenseType(license)