feat: sign reconnect authorisations

This commit is contained in:
Josh Creek
2026-08-31 21:44:27 +01:00
parent 4b5e40bff7
commit 7b6e22292a
4 changed files with 82 additions and 2 deletions
+3 -1
View File
@@ -48,7 +48,9 @@ product policy are in [`docs/MATCHMAKING.md`](docs/MATCHMAKING.md).
- [ ] **IN PROGRESS:** Validate Steam Web API tickets only in the secure backend;
issue revocable sessions and reconnect-safe match/identity/slot authorisations
with server-owned connection-generation fencing. Pure Go ticket/session and
reconnect policies exist; production Steam/backend adapters remain.
reconnect policies exist, including canonical signed join-authorisation
issuance/verification; production Steam/backend adapters and persistent
lease fencing remain.
- [ ] **IN PROGRESS:** Authenticate results with pod/GameServer-bound workload
identity; make identical duplicates idempotent and conflicting results
inert/alerting. Pure Go credential-claim validation, binding, hashing,