Evan Goode
3ade4ca277
Use ImportExistingPlayer,CreateNewPlayer in user.tmpl
2025-03-30 11:17:03 -04:00
Evan Goode
8fa4656735
Merge remote-tracking branch 'upstream/master' into next
2025-03-29 19:23:08 -04:00
Evan Goode
817bb432c2
Lint
2025-03-29 19:19:31 -04:00
Evan Goode
9901aa8776
Deterministic OIDC provider display order
...
Go map iteration order is (intentionally) random
2025-03-29 19:14:57 -04:00
Evan Goode
cec6d6828c
Dependency version bumps
2025-03-29 18:41:12 -04:00
Evan Goode
a5c06f8827
Add AllowCreatingDeletingPlayers
2025-03-29 18:29:56 -04:00
Evan Goode
d946c07ed8
Add major version tag to docker hub image
2025-03-29 17:41:33 -04:00
Evan Goode
a9b1531111
Fixups
2025-03-29 17:29:52 -04:00
Evan Goode
489e0fc587
Fix deprecation warning printing
2025-03-29 14:08:30 -04:00
Evan Goode
d7ffab2612
Update config examples and test them
2025-03-28 20:53:45 -04:00
Evan Goode
65328999a5
Test auhtlib-injector skin upload invalid skin model
2025-03-28 19:29:46 -04:00
Evan Goode
6fe35be090
Punycode IDNs while reading config file
...
It's safest to work with punycoded IDNs everywhere. Neither
authlib-injector nor Minecraft's `-Dminecraft.api.*.host` arguments play
nice with Unicode IDNs. Related:
https://github.com/yushijinhun/authlib-injector/issues/270
2025-03-24 17:21:09 -04:00
Evan Goode
258abe0df2
Update root.tmpl with new usage docs
2025-03-23 20:42:13 -04:00
Evan Goode
49ddfa6f7f
Add back missing authlib-injector account routes
2025-03-23 20:27:27 -04:00
Evan Goode
b201152c5c
Document support for all versions of Minecraft
2025-03-23 20:27:07 -04:00
Evan Goode
8333d501d8
Allow password Minecraft auth when RegistrationOIDC configured
2025-03-23 14:00:03 -04:00
Evan Goode
5252317a53
Lots of API cleanup, link to Swagger API docs
2025-03-22 23:05:38 -04:00
Evan Goode
32b8546276
Don't link to tinytengu/minecraft-authlib
2025-03-22 19:02:43 -04:00
Evan Goode
1f4b46b11a
Release notes for 3.0.0
2025-03-22 18:51:33 -04:00
Evan Goode
8ccb3babeb
Fix player faces on admin page
2025-03-22 17:43:56 -04:00
Evan Goode
5c1f6c1cfa
Implement SSO via OIDC ( #127 )
...
Resolves https://github.com/unmojang/drasl/issues/39
* Use __Host- cookie prefix instead of setting Domain
See https://stackoverflow.com/a/64735551
* Unlinking OIDC accounts
* AllowPasswordLogin, OIDC docs, cleanup
* YggdrasilError
* Migrate existing password users without login
* API query/create/delete user OIDC identities
* test APICreateOIDCIdentity
* test APIDeleteeOIDCIdentity
* API Create users with OIDC identities
* OIDC: PKCE
* Use YggdrasilError in authlib-injector routes
* OIDC: AllowChoosingPlayerName
* recipes.md: Update for OIDC and deprecated config options
* OIDC: fix APICreateUser without password, validate oidcIdentities
* OIDC: error at complete-registration if no preferred player name
* Proper error pages
* MC_ prefix for Minecraft Tokens
2025-03-22 16:40:26 -04:00
IkyMax
09c9192cca
Authlib-Injector Skin API Support ( #144 )
...
* Initial support for Authlib-Injector Upload API
- Support for HMCL
* Added Skin endpoint
* Support for capes
* Support for DELETE
* Explicitly route authlib-injector URLs, don't rewrite
* Test authlib-injector texture upload/delete
---------
Co-authored-by: Evan Goode <mail@evangoo.de>
2025-03-09 16:15:29 -04:00
Evan Goode
a01ce6b032
installation.md: recommend building not as root
2025-03-04 21:53:17 -05:00
Evan Goode
0460a72121
Use 'go run' for swag in Makefile if not on PATH
2025-03-04 21:53:17 -05:00
Evan Goode
7578349442
Add swag to builddeps in installation.md
2025-03-04 21:53:17 -05:00
Evan Goode
0b7264230c
Merge remote-tracking branch 'upstream/master' into next
2025-03-02 16:27:22 -05:00
Evan Goode
dc0d79d165
Test non-admin update-user
2025-02-27 19:53:23 -05:00
Evan Goode
faa2bf9f75
front: Don't pass maxPlayerCount to UpdateUser unless we're setting it
2025-02-27 19:53:23 -05:00
хлифи
fbc8f9d45a
APIs for login and register ( #136 )
...
* APIs for login and register
* return 403 instead of 423 if account is locked
* add login API route to ratelimiter
* APILogin remove browser token gen & return, give API token instead
* generalize login logic
* remove transient user handling
* remove APIRegisterChallenge due to unnecessary
* remove honeypot from APIRegister
* APIRegister remove browser token gen & return, give API token instead
* add register API route to ratelimiter
* add missing API godoc
* Clean up app.Login error handling
* Fix rate-limit errors for API routes
* Deduplicate APICreateUser and APIRegister
* Rate-limit all non-admin unsafe API requests
* APILogin test
* Make SetIsLocked write to the tx
* Add CORSAllowOrigins option
* Assert SetIsLocked without err variable
* Fix and test API rate limiting
---------
Co-authored-by: Evan Goode <mail@evangoo.de>
2025-02-15 21:43:02 -05:00
Evan Goode
71c5ebf4bd
api: test StatusNotFound APIError
2025-02-02 22:29:23 -05:00
Evan Goode
da3ef3cee5
api: fix IsDeprecatedAPIPath
2025-02-02 22:29:23 -05:00
Evan Goode
1f48320a2f
api: don't allow revoke admin status of DefaultAdmins
2025-02-02 22:29:23 -05:00
хлифи
c16361c6bc
Add disabling frontend ( #137 )
...
* Add disabling frontend
* fixes requested in review
* Document EnableWebFrontEnd in configuration.md
2025-02-02 22:16:32 -05:00
Evan Goode
b431fc0b2d
Merge pull request #135 from evan-goode/evan-goode/fix-gha
...
Use docker/setup-qemu-action on docker-publish workflow
v2.1.1
2025-01-22 21:54:20 -05:00
Evan Goode
2b656c8269
Use docker/setup-qemu-action on docker-publish workflow
2025-01-22 21:52:32 -05:00
Evan Goode
cda9c270f9
Merge pull request #134 from evan-goode/evan-goode/fix-unlimited-max-player-count
...
config: allow unlimited max player count (-1)
2025-01-19 23:00:00 -05:00
Evan Goode
25c0404514
config: allow unlimited max player count (-1)
2025-01-19 22:55:37 -05:00
Evan Goode
0282b27fc5
Merge pull request #133 from evan-goode/evan-goode/noscript-skin-view
...
noscript skin viewer fallback
2025-01-19 19:46:10 -05:00
Evan Goode
4b91ecd154
Always show tiny texture previews
...
So users can download their current skin/cape
2025-01-19 19:43:56 -05:00
Evan Goode
a558401784
noscript skin viewer fallback
...
Resolves https://github.com/unmojang/drasl/issues/30
2025-01-19 19:25:04 -05:00
dependabot[bot]
13ed66f735
Bump golang.org/x/net from 0.23.0 to 0.33.0 ( #129 )
...
* Bump golang.org/x/net from 0.23.0 to 0.33.0
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.23.0 to 0.33.0.
- [Commits](https://github.com/golang/net/compare/v0.23.0...v0.33.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
* Update vendorHash
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Evan Goode <mail@evangoo.de>
2025-01-16 01:42:42 +00:00
Evan Goode
c965be790f
Bump to 2.1.1
2025-01-15 20:18:14 -05:00
SMagic
4ebea52c60
Bug fix: cannot set prefered language when creating new user via API ( #128 )
2025-01-16 01:16:36 +00:00
Evan Goode
43d5dca4c5
Replace Minecraft texture with our own
...
We should use our own homemade texture for the end-portal-inspired
background rather than using the texture from Minecraft.
2025-01-02 18:05:13 -05:00
Evan Goode
141db389ea
Update wiki.vg links to minecraft.wiki
2024-12-28 23:23:20 -05:00
Evan Goode
32840a628e
Set default data, state, config paths via env vars
...
Resolves https://github.com/unmojang/drasl/issues/119 .
May be useful for some containerized deployments.
2024-12-28 23:23:13 -05:00
Evan Goode
f562e8b058
Update documentation for multiple players
2024-12-28 21:07:32 -05:00
Evan Goode
c37cfa39f9
db: Generate new user UUIDs for 3->4 migration
2024-12-28 21:07:32 -05:00
Evan Goode
39ea78a5eb
auth: respect requestUser even if no selectedProfile
2024-12-28 21:07:32 -05:00
Evan Goode
d8ec0bc56a
db: fix 3->4 migration of empty DB
2024-12-28 21:07:32 -05:00