docs(website): Steam sign-in's questions answered (D392–D396) #363

wtclaude · 2026-10-19T18:29:14Z

wtclaude commented

2026-10-19 18:29:14 +00:00

What & why

The org lead answered website/STEAM_SIGNIN.md's Q1–Q4 on 2026-10-19 and ruled on the conflict they raise together. Steam sign-in is built on the website's edge and ships in the cutover in progress. Refs website#214.

#	Decision
D392 (Q1)	A Steam account linked on the site is a linked Rust player, beside the in-game `/link` code
D393 (Q2)	Unlinking Steam removes only the sign-in identity. The Rust link stays until it is removed on the Rust page
D394 (Q3)	Steam needs a Steam Web API key to be enabled. Persona name and avatar are always shown, and a failed lookup never stops a sign-in
D395 (Q4)	Steam never signs anybody up, whatever `player_registration` says
D396	A Steam link whose id is already another account's Rust link is refused. Nothing changes, and staff resolve real claims

What the answers change in the build (§4), all settled in this plan and open to change:

user_identities gains nullable display_name / avatar_url, written at link and refreshed at each Steam sign-in.
MODULE_API 1.17.0 adds three things: a read of a user's verified identities, a pre-link check a module may use to refuse a link (it can only refuse and never touches sessions; this is what D396 needs), and a linked hook. There is no unlink hook, because D393 leaves nothing to undo.
The live walk needs a real Steam account and a key, so it joins the end walk's in-game rows and does not hold the build.

PLAN_REDESIGNS.md tables D392, D393 and D396 (the ones Module-Rust builds to) and updates §15, whose stale "1.16.0" now reads 1.17.0.

How it was tested

Docs only. I checked that no anchor points at the renamed §15 heading.

Checklist

I have read CONTRIBUTING.md.
The change builds and existing tests/checks pass locally.
I have added or updated tests/docs where it makes sense.
My commits are reasonably scoped with clear messages.

AI-assisted contributions (required)

No AI tools were used to produce this contribution.
AI tools were used. Tool(s): Claude Code (Claude Opus 5.5). I have reviewed and understand
every change, and take responsibility for it. AI-authored commits are
marked with a Co-Authored-By / Assisted-By trailer.

License

I agree that my contribution is licensed under this project's license
(GNU GPL v3.0 or later), and I have the right to contribute it.

🤖 Generated with Claude Code

https://claude.ai/code/session_01E14m6SuuY6i1vASFeGDBeY

## What & why The org lead answered `website/STEAM_SIGNIN.md`'s Q1–Q4 on 2026-10-19 and ruled on the conflict they raise together. Steam sign-in is built on the website's `edge` and ships in the cutover in progress. Refs website#214. | # | Decision | |---|---| | **D392** (Q1) | A Steam account linked on the site **is** a linked Rust player, beside the in-game `/link` code | | **D393** (Q2) | Unlinking Steam removes **only the sign-in identity**. The Rust link stays until it is removed on the Rust page | | **D394** (Q3) | Steam **needs a Steam Web API key** to be enabled. Persona name and avatar are always shown, and a failed lookup never stops a sign-in | | **D395** (Q4) | Steam **never signs anybody up**, whatever `player_registration` says | | **D396** | A Steam link whose id is **already another account's Rust link is refused**. Nothing changes, and staff resolve real claims | What the answers change in the build (§4), all settled in this plan and open to change: - `user_identities` gains nullable `display_name` / `avatar_url`, written at link and refreshed at each Steam sign-in. - **MODULE_API 1.17.0** adds three things: a read of a user's verified identities, a **pre-link check** a module may use to refuse a link (it can only refuse and never touches sessions; this is what D396 needs), and a **linked hook**. There is **no unlink hook**, because D393 leaves nothing to undo. - The live walk needs a real Steam account and a key, so it joins the end walk's in-game rows and does not hold the build. `PLAN_REDESIGNS.md` tables D392, D393 and D396 (the ones Module-Rust builds to) and updates §15, whose stale "1.16.0" now reads 1.17.0. ## How it was tested Docs only. I checked that no anchor points at the renamed §15 heading. ## Checklist - [x] I have read [CONTRIBUTING.md](CONTRIBUTING.md). - [x] The change builds and existing tests/checks pass locally. - [x] I have added or updated tests/docs where it makes sense. - [x] My commits are reasonably scoped with clear messages. ## AI-assisted contributions (required) - [ ] No AI tools were used to produce this contribution. - [x] AI tools were used. Tool(s): `Claude Code (Claude Opus 5.5)`. I have reviewed and understand every change, and take responsibility for it. AI-authored commits are marked with a `Co-Authored-By` / `Assisted-By` trailer. ## License - [x] I agree that my contribution is licensed under this project's license (**GNU GPL v3.0 or later**), and I have the right to contribute it. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01E14m6SuuY6i1vASFeGDBeY

wtclaude added 1 commit 2026-10-19 18:29:17 +00:00

docs(website): Steam sign-in's questions answered (D392-D396) 1d0a492b5b

The org lead answered STEAM_SIGNIN.md's Q1-Q4 on 2026-10-19 and ruled on
the conflict they raise together:

- D392 a Steam account linked on the site is a linked Rust player (Q1)
- D393 unlinking Steam removes only the sign-in identity (Q2)
- D394 Steam needs a Steam Web API key to be enabled (Q3)
- D395 Steam never signs anybody up (Q4)
- D396 a Steam link whose id is another account's Rust link is refused

The build section follows: the key is required, the identity row keeps the
persona name and avatar, and MODULE_API 1.17.0 adds a pre-link check (which
can only refuse) and a linked hook, with no unlink hook. PLAN_REDESIGNS
tables the three decisions Module-Rust builds to and points §15 at them.
The build goes on the website's edge and ships in the cutover in progress.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01E14m6SuuY6i1vASFeGDBeY

whitlocktech merged commit c748a54e9a into main

2026-10-19 18:30:22 +00:00

whitlocktech referenced this issue from a commit

2026-10-19 18:30:23 +00:00

Merge pull request 'docs(website): Steam sign-in's questions answered (D392–D396)' (#363) from docs/steam-signin-decisions into main

whitlocktech deleted branch docs/steam-signin-decisions

2026-10-19 18:30:24 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: RunicGateway/docs#363