Arch Linux User Repository

Looks like you don't need two keys anymore. For the current version 2.0.3 you can just use the "precursorkey" as downloadKey.

pkgver=2.0.3
...
key=$(curl -s https://www.pureref.com/download.php | awk '/setupPaymentSystem/,/);/' | grep -zoP '\s+"\K[A-z0-9%]+?",' | sed 's/...$//')
source=("${pkgname}-${pkgver}.deb::https://www.pureref.com/files/build.php?build=LINUX64.deb&version=${pkgver}&downloadKey=$key")
sha512sums=('3629b0a0d6ba1a86d316dca3585008e2c486cd8ff280040c2016dba8ef16bd60cd040b175907ccccc8daf5edae9ffafd26b2e745523a704bc1334bf5a0abce43'

I tested Ebucario's solution, and surprisingly, it worked. Thanks.

2.0.0 appears to install perfectly well with just these changes to the PKGBUILD:

pkgver=2.0.0
...
sha512sums=('667b5e01644a87268ec64916983edf1255387b82a6d5cc82c9a37e9557d78d2faa8310d900388dc100247f76651389ace66d45f63afc881658ece0ea78fb0f58')

@LibertyGM

That's fine they don't want to provide a direct link to their program, but it doesn't mean that we don't need to make a script for automatic download. They can complicate it all they want, and may indeed be against "automatic download," however their license for PureRef 1.11.1 says nothing about this.

Their EULA is explicit one cannot distribute copies of the software publicly, however this notably does not. Every usage of this script registers with their licensing service on the website directly and appropriately, such that their website provides a completely valid, independent download link to a copy of the software distributed by them, generated for that user. This script is just a download assistant.

Friends, you do not need to make any script for automatic download! I wrote to them in support and asked for a direct link to their program. I said what I need for AUR. They said they wouldn't give anything and were against their program downloading in auto mode! Because they earn money from it and some buy, so they didn't give a direct link.

If they find out that there is an automatically downloading method, they will certainly complicate the algorithm or disable the ability to download for free altogether!

Fixed the package to use the new key generation as the download page does it.

Until this is fixed. Download the .deb from the website, convert it with debtap and install it with pacman.

Thanks @dingensundso, I wanted to fix this, but I just couldn't get the time to do it. I will add this fix and you to contributors list.

Fix for key extraction from download site:

key=$(curl https://www.pureref.com/download.php | awk 'f{print $1; f=0} /"1.11.1",/{f=1}' | cut -d\" -f2)