43 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
lobo	2941e3f905	feat(user): optional display name (player tag) ... users.display_name (V6), 3-24 letters, digits, space, _ . -, unique ignoring case. Set in settings (409 DISPLAY_NAME_ALREADY_IN_USE, also for the DB constraint race) and optionally at registration. Returned by /api/users/me.	2026-09-24 10:39:04 +02:00
lobo	4579b05d2c	fix(cors): expose Retry-After so the login page can show the block time	2026-09-24 10:29:57 +02:00
lobo	d28147b2ab	fix(security): hide health details and close Prometheus to the public ... /actuator/health showed database and disk details to anyone, and /actuator/prometheus was open. Only health stays public, as plain UP/DOWN for the Docker health check.	2026-09-24 10:26:53 +02:00
lobo	5512453774	fix(login): same error for every failed login, block disabled users, rate limit ... Unknown email, wrong password and disabled account now all return 401 INVALID_CREDENTIALS; unknown emails still run bcrypt against a dummy hash so timing does not leak them. After 5 failures per email or 20 per client IP, login returns 429 with Retry-After for 15 minutes. LoginRequest is now validated.	2026-09-24 10:22:30 +02:00
lobo	3d21bb667d	fix(db): remove the seeded test user from all environments ... V1 inserted test@example.com / password123 everywhere, including prod. V5 deletes that row only when email and seed hash both match.	2026-09-24 10:14:58 +02:00
lobo	fe691b0558	chore(deps): update Spring Boot to 4.1.1 and ArchUnit to 1.5.0	2026-09-24 08:56:45 +02:00
lobo	a3aeb666a8	fix(user): send Steam ID as string and refresh token on settings save ... JavaScript rounds 17-digit Steam IDs, so 76561198005679788 was stored as 76561198005679790. Steam IDs are now JSON strings (17 digits, numbers rejected), and null means "no Steam ID" instead of 0 (V4 migrates old rows). PUT /api/users/settings returns a new token, because Core reads the Steam ID from the token. A Steam ID owned by another user returns 409.	2026-09-24 08:51:01 +02:00
Andreas Dahm	39f08c9563	fix(user): null-safe steamId comparison in updateSettings	2026-05-12 10:09:33 +02:00
Andreas Dahm	73dfeb4e7d	Small fixed	2026-05-12 09:51:09 +02:00
lobo	3159736c16	Merge pull request 'Changed from JWT token to public/privat key' (#2) from feat/jwt-eddsa into main ... Reviewed-on: #2	2026-05-12 08:58:57 +02:00
Andreas Dahm	8505faa578	Changed from JWT token to public/privat key	2026-05-12 08:56:51 +02:00
Andreas DahmandClaude Opus 4.7	874f8dee58	Add Auth-owned product roadmap to README ... Captures the Auth slices of the cross-service product roadmap: username + public-profile opt-in, friends graph, email/notification preferences, invitation system enhancements, and GDPR delete/export. Cross-links to the umbrella roadmap in ToBePlayed-Deployment. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-11 14:51:24 +02:00
Andreas Dahm	f30e089739	Changed readme.md	2026-05-11 14:40:54 +02:00
Andreas Dahm	2beb9aaddf	Fixed problems with update of settings also added public area	2026-05-04 15:16:14 +02:00
Andreas Dahm	3fd12637d6	Extended pricipal to add steam id	2026-04-28 15:43:27 +02:00
Andreas Dahm	6b8aa4458c	Added registration endpoint to whitelist	2026-04-24 10:22:15 +02:00
lobo	c312d271ad	Support now null as not initialized for SteamId	2026-04-19 14:59:27 +02:00
lobo	dda7e50963	Support now null as not initialized for SteamId	2026-04-19 14:35:02 +02:00
lobo	7d32c7e04a	Added new db migration to set default SteamId to	2026-04-19 14:17:49 +02:00
lobo	fd390ac072	Refactor package structure: domain -> modules ... Move domain packages into a new modules.* hierarchy and rename controller packages to api.* across login, registration, and user modules. Update package declarations and imports (including shared.api DTOs and JwtService -> modules login TokenGenerator), adjust tests and persistence/mapper paths accordingly, and apply minor formatting fixes (missing EOF newlines). This reorganizes the project to better separate API surface and module boundaries.	2026-04-19 12:50:01 +02:00
lobo	815347325a	Merge pull request 'feature-cleanup' (#1) from feature-cleanup into main ... Reviewed-on: #1	2026-04-18 11:52:46 +02:00
lobo	fabab0ca45	Fixed tests	2026-04-18 11:49:09 +02:00
lobo	0cd4d7328a	Fixed tests	2026-04-18 11:47:58 +02:00
lobo	d63fbd4155	Added new tests fixed some problem	2026-04-18 11:28:06 +02:00
lobo	3f80777e37	Fixed tests	2026-04-11 12:32:32 +02:00
lobo	e21dea1e18	Added lots of new stuff ... - extended the jwt and put userid into it - completed update settings - added settings also in me call	2026-04-11 12:07:27 +02:00
lobo	d498ef8827	Added transactional	2026-04-06 09:57:39 +02:00
lobo	ed98d703c6	changed default profile to prod	2026-04-06 09:35:31 +02:00
lobo	8465524849	Finished registration Process and added tests	2026-04-06 09:12:45 +02:00
lobo	c224cbf679	Started with: ... - Registration logic for new players - Extended User table with more information	2026-04-04 17:11:13 +02:00
lobo	dbc76e6158	Added tests for all services and controller	2026-04-04 16:01:05 +02:00
lobo	f4b7ae75a9	Added arch unit tests	2026-04-04 11:22:26 +02:00
lobo	5aee23f00e	Fixed problem with token response	2026-04-04 10:55:39 +02:00
lobo	71e4f38357	Cleaned a little bit up	2026-04-04 10:43:18 +02:00
lobo	41ce5d93e9	Implemented user service	2026-04-04 09:58:09 +02:00
lobo	8af7170c46	Disabled test for now until db config is ready for testing	2026-04-03 12:32:40 +02:00
lobo	64b84b1dc0	Added jwt token validation and api endpoint versioning	2026-04-03 12:25:03 +02:00
lobo	2e8ff1b079	Cleaned up the architecture	2026-04-03 11:35:53 +02:00
lobo	be4d4df351	Updated pipeline	2026-03-31 19:54:02 +02:00
lobo	85e4b62f32	Updated pipeline	2026-03-31 19:52:09 +02:00
lobo	7e8a04d83c	Login should work now, tests are missing	2026-03-31 19:48:23 +02:00
lobo	8dd17f84f6	Setup of springboot	2026-03-31 18:57:06 +02:00
lobo	a7c9364c7a	First commit	2026-03-31 18:20:40 +02:00