v1.1.0: session guard on all game routes + register + sign-in screen (ISS-107)

2026-09-26 14:40:56 +00:00
parent 21dd37f88c
commit b0f1bd8b67
54 changed files with 1002 additions and 91 deletions
@@ -1,7 +1,12 @@
+import { requireAuth } from '@/lib/auth';
 import { tickNow } from '@/lib/sim/engine';
 import { getStateSnapshot } from '@/lib/game/state';

-export async function GET() {
+// v1.1.0 (ISS-107): guarded — 401 without a live X-Flight-Session. The snapshot shape is
+// unchanged; per-player snapshots are a later step.
+export async function GET(req: Request) {
+  const auth = await requireAuth(req);
+  if (!auth.ok) return auth.response;
  try {
    // Tick-on-read (v0.7.0): advance the sim clock before snapshotting so every
    // read reflects current game time (expiry/finalize/spawn run inside the tick).