fix(multiplayer): validate allocated config ids

This commit is contained in:
Josh Creek
2026-09-01 22:44:12 +01:00
parent 75f9026ea1
commit 56e8e2554c
3 changed files with 20 additions and 0 deletions
+2
View File
@@ -1595,6 +1595,8 @@ The WebSocket contract and Go event hub now enforce opaque match and server IDs
Assignment projection now rejects fractional `slot` and `protocol_version` values instead of truncating them, matching the OpenAPI integer contract.
Allocated `ServerConfig` startup now enforces the opaque match/server ID contract, rejecting short or unsafe allocation flags before process launch.
Signed MatchNet claims now also require exact JSON string/integer types for every identity, protocol, expiry, slot, team, and generation field; string-number coercion is rejected before canonical signature verification.
Presentation progress: a shared `Game/themes/cosmic_clash_theme.tres` now gives the menu, lobby, matchmaking, and settings surfaces consistent button, input, option, and label styling. The custom-font portion of `TODO.md` remains open until a distributable font asset is selected.