Your Gumroad license check probably lets refunded buyers in (and how to fix it)

If you sell software on Gumroad and gate it with license keys, there's a good chance your check looks like this: const res = await fetch("https://api.gumroad.com/v2/licenses/verify", { method: "POST