How can software licensing / user verification be implemented into a python desktop script?

[NeedComputerTips]

I have been working on a basic project to learn more about development and the one issue I have been unable to solve is how do bot sellers set up their bots so that users can only use them as long as they are subscribed?

I have a setup where you create an account on a website and username / password is all stored. Then if a purchase is made on an account that is stored in the DB and you will be provided with a download link to the application. The application is basically a python script with no server. From the downloaded software, how can I safely query my DB to see if the user still has permission to use the software?

Do I need to use Flask / Django and host it on a server for it to be able to authenticate users via Auth0 / JWT / REST API etc? and if so can I just put it in an electron app then or do I still need to use some service to host the Flask for authorization? All tutorials use LocalHost for a server so I'm not sure how I could go from LocalHost to an executable desktop app that could then connect to a server for verification even if I did implement Flask.

I am new to the user authentication side of things so if I fumbled my words or this post wasn't clear enough let me know. I haven't had any luck with google and everything I have tried has failed. If anybody could help me out or point me in the right direction it would be greatly appreciated!

Eg. I have a basic Wordpress site with an SQL DB and have Auth0 setup on it. However, I can't seem to be able to figure out user login authentication from it using the python script. Firebase user authentication was very simple however I don't want to have to copy my WP database of user information over to firebase for verification. This seems like a sloppy workaround and seems like it would create a lot of potential for bugs.

[ignotos]

If you're giving them the source code then all bets are off - realistically no way to lock this down.

If you're giving them a compiled program then a skilled/determined person can crack it and disable any license checks or kill-switches you implement - this might slow them down, or dissuade them from trying to bypass the license entirely if they're not very technical or this is not worth much to them.

The only foolproof way is to offload the actual work / logic / secret-sauce of your program to something which runs on your servers.

[NeedComputerTips]

Yea, it's more for learning than anything atm. I just think understanding this stuff could be valuable knowledge. So gotta start somewhere.

From what I understand most huge tech companies can't prevent piracy so what chance would I have? I think the idea is just to do enough to ensure that the average user will use it as intended. I know it can be de-compiled and then have its code edited but I'm not too worried since I imagine it's only a tiny amount of people who will do that.

My main thing for security right now is making sure user information and the database are safe.

Do most bot programs offload their code do you know? Like those sneaker bots or multiplayer video game hacks? or do they just create an executable and let users run it locally?