хлифи
fbc8f9d45a
APIs for login and register ( #136 )
...
* APIs for login and register
* return 403 instead of 423 if account is locked
* add login API route to ratelimiter
* APILogin remove browser token gen & return, give API token instead
* generalize login logic
* remove transient user handling
* remove APIRegisterChallenge due to unnecessary
* remove honeypot from APIRegister
* APIRegister remove browser token gen & return, give API token instead
* add register API route to ratelimiter
* add missing API godoc
* Clean up app.Login error handling
* Fix rate-limit errors for API routes
* Deduplicate APICreateUser and APIRegister
* Rate-limit all non-admin unsafe API requests
* APILogin test
* Make SetIsLocked write to the tx
* Add CORSAllowOrigins option
* Assert SetIsLocked without err variable
* Fix and test API rate limiting
---------
Co-authored-by: Evan Goode <mail@evangoo.de>
2025-02-15 21:43:02 -05:00
хлифи
c16361c6bc
Add disabling frontend ( #137 )
...
* Add disabling frontend
* fixes requested in review
* Document EnableWebFrontEnd in configuration.md
2025-02-02 22:16:32 -05:00
Evan Goode
0865865cd3
Player API routes, API tests/fixes
2024-12-28 21:07:32 -05:00
Evan Goode
faec464a4e
Most Front tests passing
2024-12-28 21:07:32 -05:00
Evan Goode
1a8d312797
Tests passing except Front
2024-12-28 21:07:32 -05:00
Evan Goode
738d80538f
Make multiple profiles usable from web front end
2024-12-28 21:07:32 -05:00
Evan Goode
f58ce99eae
Initial changes to support multiple players per user
2024-12-28 21:07:32 -05:00
Evan Goode
12b9618168
Fix extraneous 'Additional error while handling an error'
2024-08-29 18:38:48 -04:00
Evan Goode
d833185b2b
Implement joinserver.jsp and checkserver.jsp
2024-08-29 18:38:48 -04:00
Evan Goode
f02e4370a5
Rework error handling
2024-08-15 12:33:59 -04:00
Evan Goode
140ec8bd2e
Don't host swag docs
2024-08-15 12:33:59 -04:00
Evan Goode
db14f9340d
APIGetChallengeSkin, cleanup
2024-08-15 12:33:59 -04:00
Evan Goode
65a5c5aff8
API Delete user
2024-08-15 12:33:59 -04:00
Evan Goode
8f1a87aa1a
More API routes and refactoring
2024-08-15 12:33:59 -04:00
Evan Goode
7d8aef7737
APICreateUser
2024-08-15 12:33:59 -04:00
Evan Goode
f7ad78d8e9
refactor: CreateUser
2024-08-15 12:33:59 -04:00
Evan Goode
c70e266d57
Start implementing Drasl API
2024-08-15 12:33:59 -04:00
cat
3441839905
Add ApplicationName, use generic URLs in web UI
2024-08-15 12:33:59 -04:00
Evan Goode
d516e568c7
Copy /privileges route to /services/privileges
2024-07-28 23:05:53 -04:00
Daniel Burzmiński
9fbcdc5958
Add legacy endpoint for 1.16.5 and its derivates.
2024-07-28 23:05:53 -04:00
Evan Goode
d017879daa
Add ValidPlayerNameRegex option
...
By default, Drasl should check to make sure player names don't contain
special characters.
For https://github.com/unmojang/drasl/issues/73
2024-05-23 16:57:38 -04:00
Evan Goode
72d3b1cd32
Add minecraft/profile/lookup/bulk/byname alias
...
As of 23w42a, the "Usernames to UUIDs" endpoint, previously at POST
https://api.mojang.com/profiles/minecraft , has been moved to POST
https://api.minecraftservices.com/minecraft/profile/lookup/bulk/byname .
This patch adds an alias for the new endpoint. The old endpoint will
still work.
Related: https://github.com/yushijinhun/authlib-injector/issues/232
2024-03-21 11:12:03 -04:00
Evan Goode
276f36c0e2
Default skins and capes, usage.md
...
Resolves https://github.com/unmojang/drasl/issues/27
2023-11-22 21:30:02 -05:00
Evan Goode
e8537ea54c
OfflineSkins, also fix several skin issues
2023-11-10 20:19:07 -05:00
Evan Goode
a7679dce16
Log responses from fallback API servers
2023-09-18 20:29:43 -04:00
Evan Goode
f68e2308c0
Icon
2023-09-17 00:21:05 -04:00
Evan Goode
32242f1002
Make fallback API cache configurable
...
Closes https://github.com/unmojang/drasl/issues/19
2023-09-16 14:00:30 -04:00
Evan Goode
5908508fdd
Fix 404s for web ui
2023-09-06 23:07:30 -04:00
Evan Goode
15559209ca
Create config, state directories if they don't exist
...
We might want to gate this behind a flag in build_config.go, the Docker
build will want this but maybe not other distributions.
2023-09-03 17:51:20 -04:00
Evan Goode
d750dacdbb
Config validation/cleaning, cleanup
2023-08-29 00:26:21 -04:00
Evan Goode
e1f0c3e7fe
misc cleanup
2023-08-22 17:04:11 -04:00
Evan Goode
c5af033ca4
Fix AnonymousLogin, rename to TransientUsers
2023-08-20 02:15:04 +00:00
Evan Goode
3456e33085
Switch from 32-character hex accessTokens to JWTs
2023-08-20 02:15:04 +00:00
Evan Goode
fecd6e5daf
Mostly cleanup, error handling, authlib-injector fixes
2023-07-28 16:33:45 -04:00
Evan Goode
7d5bab6e88
some services tests
2023-07-26 23:49:37 -04:00
Evan Goode
1171d4024f
Session server tests
2023-07-23 15:31:39 -04:00
Evan Goode
6405e36db7
Tests for authserver
2023-07-22 18:51:20 -04:00
Evan Goode
fad4a8498c
Print initial invite link if necessary
2023-07-09 01:01:26 -04:00
Evan Goode
7665b2129d
Add configurable body size limit
...
Closes #13
2023-07-08 23:30:30 -04:00
Evan Goode
acbd22a011
DefaultAdmins, interface fixes
2023-07-07 20:39:19 -04:00
Evan Goode
9427ab922c
Add 'alpha' message to README
2023-07-07 17:24:35 -04:00
Evan Goode
63fe0a2be3
update-users, delete-user tests, cleanup
2023-07-06 02:38:03 +00:00
Evan Goode
aca64b5acc
invite existing player, mutex for setskin/setcape
2023-07-06 02:38:03 +00:00
Evan Goode
22d5f3525d
initial work on invites, admin page
2023-07-06 02:38:03 +00:00
Evan Goode
ee701eac6e
Cache certain responses from fallback API servers
2023-06-26 23:58:14 -04:00
Evan Goode
6839a95bbb
Fix rate limiting
2023-06-25 15:32:24 -04:00
Evan Goode
bbffae71f7
configuration.md
2023-06-25 15:32:24 -04:00
Evan Goode
7de5d70a9a
rate limiting: enable by default
2023-06-17 23:39:25 -04:00
Evan Goode
cd70c83be0
/publickeys for 1.20
2023-06-16 18:02:26 -04:00
Evan Goode
8ffa4e501c
precompile templates
2023-06-14 00:10:56 -04:00
