mancala

Go to file

Halit Aksoy 30ad51c493 feat(backend): authenticate WebSocket clients with Keycloak tokens - New auth module verifies Keycloak access tokens offline against the realm's signing keys (issuer, RS256, typ=Bearer, allowed azp); guests are recognised by the guest realm role - Clients send an auth message after connecting and get on_auth or on_auth_error; unauthenticated sockets are closed after 5 seconds and their messages ignored; a socket can refresh its token but not switch user - A user can be connected from several sockets; a late close of an old socket no longer drops the new one - Malformed messages are ignored instead of throwing - Games store player names and guest flags and send them with the connection info - Legacy ?userKey= clients and /register stay available behind LEGACY_USERKEY_AUTH; legacy keys must be UUIDs so they cannot take a Keycloak user's kc: id - TypeScript target raised to es2020 for async/await		2026-10-14 01:52:07 +03:00
apps	feat(backend): authenticate WebSocket clients with Keycloak tokens	2026-10-14 01:52:07 +03:00
config	feat(keycloak): add Keycloak with guest login extension	2026-10-14 01:46:48 +03:00
packages	feat(mobile): implement "Rejoin Game" functionality and fix storage bugs	2026-07-16 02:00:25 +03:00
README.md	Create README.md	2024-03-24 03:00:46 +03:00

Mancala is an open source application for playing mancala game online.