fix(multiplayer): reject websocket caps before upgrade

This commit is contained in:
Josh Creek
2026-09-01 19:35:34 +01:00
parent ad59c5f567
commit 52e3d73678
3 changed files with 35 additions and 8 deletions
+3 -1
View File
@@ -1461,7 +1461,9 @@ Observability redaction now adds content-aware protection on top of denylisted f
The authenticated control-plane WebSocket now caps each player at two
simultaneous connections, releasing capacity on disconnect; this complements
the bounded per-player event queue and prevents connection fan-out from
becoming an unbounded account-level resource cost.
becoming an unbounded account-level resource cost. Over-limit attempts fail
before upgrade with `429 websocket_connection_limited`, rather than becoming
ambiguous post-upgrade disconnects.
Proposal explicit-decline cooldowns are now durable: the declining player is
requeued for recovery, but a subsequent queue create is rejected until the