jhalitaksoy/mancala
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
16026fb6cb
mancala/apps/backend
History
Halit Aksoy f5dcf930fa feat(frontend): log in with Keycloak, as a guest or with an account 
- First visit logs in as a new guest through Keycloak without a form;
  the session, including an offline refresh token, is kept in local storage
- Account menu on the home page: guests can log in or sign up, users can
  log out (which starts a new guest session)
- The WebSocket client in core authenticates with the access token after
  connecting, reports "connected" once the server accepts it, and re-sends
  renewed tokens on the open connection
- Game page shows player names; guests appear as "Guest 4F2A"
- Auth channels, AuthUser and player names in UserConnectionInfo move to
  core and the backend uses them from there
- Mobile keeps using userKey login for now
2026-10-14 02:22:13 +03:00
..
.vscode (refactor) change folder structure 2024-06-18 01:11:26 +03:00
src feat(frontend): log in with Keycloak, as a guest or with an account 2026-10-14 02:22:13 +03:00
tests feat(frontend): log in with Keycloak, as a guest or with an account 2026-10-14 02:22:13 +03:00
.gitignore (refactor) change folder structure 2024-06-18 01:11:26 +03:00
build_and_deploy.sh (refactor) change folder structure 2024-06-18 01:11:26 +03:00
Dockerfile build: use local mancala.js and @mancala/core packages 2026-10-14 02:09:05 +03:00
jest.config.js (refactor) change folder structure 2024-06-18 01:11:26 +03:00
package.json build: use local mancala.js and @mancala/core packages 2026-10-14 02:09:05 +03:00
README.md build: use local mancala.js and @mancala/core packages 2026-10-14 02:09:05 +03:00
tsconfig.json feat(backend): authenticate WebSocket clients with Keycloak tokens 2026-10-14 01:52:07 +03:00
yarn.lock build: use local mancala.js and @mancala/core packages 2026-10-14 02:09:05 +03:00

README.md

Mancala Backend

This is the backend code for the Mancala project, written in Express.js.

Getting Started

Install Packages

yarn install

Start in Development Mode

yarn dev

Start in Release Mode

yarn build
yarn start

Development Dependencies

This package links the local packages @mancala/core and mancala.js. Build them first with yarn build:packages in the repo root.

Authentication

Clients log in with Keycloak (see apps/keycloak), either as a guest or with an account, and send the access token over the WebSocket right after connecting:

{ "channel": "auth", "message": { "token": "<Keycloak access token>" } }

The server answers on on_auth with the user ({ id, name, isGuest }) or on on_auth_error and closes the socket with code 4001. Other messages are ignored until the socket is authenticated, and connections that do not authenticate within 5 seconds are closed. Send auth again with the new token after refreshing it. User ids of Keycloak users are the token subject prefixed with kc:.

Variable Default Purpose
KEYCLOAK_ISSUER http://localhost:8080/realms/mancala Token issuer; must match the iss claim exactly
KEYCLOAK_JWKS_URL issuer + /protocol/openid-connect/certs Where to fetch signing keys, if the backend reaches Keycloak at a different address
KEYCLOAK_CLIENT_IDS mancala-web Comma-separated clients whose tokens are accepted
LEGACY_USERKEY_AUTH true Also accept old clients that connect with ?userKey=<uuid> and the /register endpoint. Turn off once no released client uses it, because a userKey is not a secret the server can check