Multiplayer: session guard on all game routes (step 3/12) #107

Closed
opened 2026-09-22 10:31:22 +02:00 by kamilkrzywda · 0 comments
Owner

Part of the #101 multiplayer plan.

AUTH PIVOT (user, 2026-09-23, per #106): no Gitea OIDC — simple local account creation in the DB instead; keep it minimal.

Add a session helper (getSessionPlayer()) and wrap every /api/* route (state, sim, planes, packages, market) to return 401 without a session. When unauthenticated, show a sign-in/account-creation screen instead of the dashboard.

UI PLACEMENT DECISION (user, 2026-09-23): additional panels — login/account, leaderboards, etc. — are opened from an "additional panels" button in the top-right of the map area's top bar.

Part of the #101 multiplayer plan. AUTH PIVOT (user, 2026-09-23, per #106): no Gitea OIDC — simple local account creation in the DB instead; keep it minimal. Add a session helper (getSessionPlayer()) and wrap every /api/* route (state, sim, planes, packages, market) to return 401 without a session. When unauthenticated, show a sign-in/account-creation screen instead of the dashboard. UI PLACEMENT DECISION (user, 2026-09-23): additional panels — login/account, leaderboards, etc. — are opened from an "additional panels" button in the top-right of the map area's top bar.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: OpenCode/Flight-Ops#107