Colby Whitlock 250cb1e2d3 Merge branch 'main' into feat/password-reset

2026-07-19 09:04:43 +00:00

..

_helper.js

Harden admin login: RBAC-safe controls, 2FA, bot-scoring, rate limits (#9)

2026-07-02 23:22:35 -05:00

adminUserShard.test.js

feat(admin): view a user's shard footprint at /admin/users/:id

2026-07-12 09:36:43 -05:00

announceJobs.test.js

News post → town crier + Discord announcement pipeline

2026-07-11 16:25:25 -05:00

appeals.pure.test.js

feat(moderation): appeals (6c) + Discord reversal on approve (6d)

2026-07-18 22:01:06 -05:00

appeals.test.js

feat(moderation): appeals (6c) + Discord reversal on approve (6d)

2026-07-18 22:01:06 -05:00

botInternalKey.test.js

Isolate internal bot-config route from the public listener (#33)

2026-07-04 17:35:07 -05:00

botScore.test.js

Add Bot Activity admin panel: banned-IP view + recent events + emergency unban

2026-07-03 02:31:25 -05:00

emailConfig.model.test.js

Modernize email: Gmail OAuth2 sending, configured under Settings

2026-07-07 22:29:27 -05:00

honeypot.test.js

Harden admin login: RBAC-safe controls, 2FA, bot-scoring, rate limits (#9)

2026-07-02 23:22:35 -05:00

invites.test.js

feat(provisioning): game-account signup, admin email invites, unlink (2.0)

2026-07-17 15:50:49 -05:00

loginProtection.test.js

Harden admin login: RBAC-safe controls, 2FA, bot-scoring, rate limits (#9)

2026-07-02 23:22:35 -05:00

mailer.test.js

Modernize email: Gmail OAuth2 sending, configured under Settings

2026-07-07 22:29:27 -05:00

mobileSession.test.js

Add session abstraction, mobile bearer auth, and pluggable SSO

2026-07-03 10:31:29 -05:00

moderation.test.js

Capture member/filter/spam events for the dashboard (Phase 6b)

2026-07-05 10:36:09 -05:00

newsGump.test.js

feat(news): auto-push published news to the in-game Town Cryer News gump (2.1)

2026-07-17 15:40:47 -05:00

passwordResets.test.js

feat(auth): self-service password reset (backend + web)

2026-07-19 03:57:13 -05:00

playerAccounts.test.js

Fix player getAccount has_password: read the raw row, not sanitized req.user

2026-07-06 05:11:36 -05:00

providers.test.js

Add session abstraction, mobile bearer auth, and pluggable SSO

2026-07-03 10:31:29 -05:00

publicShardOnline.test.js

fix(shard): restrict staff in-game location to admins/moderators

2026-07-18 21:18:52 -05:00

registry.test.js

Add session abstraction, mobile bearer auth, and pluggable SSO

2026-07-03 10:31:29 -05:00

requireInternalKey.test.js

Isolate internal bot-config route from the public listener (#33)

2026-07-04 17:35:07 -05:00

secretBox.test.js

Add session abstraction, mobile bearer auth, and pluggable SSO

2026-07-03 10:31:29 -05:00

session.test.js

Fix SSO flow-token / session type confusion (#32)

2026-07-04 21:54:58 -05:00

shardIngest.champsPages.test.js

feat(shard): admin write plane, help-page queue, and public champion board

2026-07-14 13:16:10 -05:00

shardIngest.protocol2.test.js

feat(provisioning): game-account signup, admin email invites, unlink (2.0)

2026-07-17 15:50:49 -05:00

shardState.governorTerms.test.js

feat(shard): ingest Protocol 2.0 boards — guilds, governors, presence, houses

2026-07-17 12:28:54 -05:00

ssoCallback.test.js

Player accounts backend: schema, registration, self-service, SSO provision

2026-07-06 01:36:51 -05:00

ssoState.test.js

Enforce TOTP second factor on SSO login (#31)

2026-07-04 22:17:35 -05:00

totp.test.js

Harden admin login: RBAC-safe controls, 2FA, bot-scoring, rate limits (#9)

2026-07-02 23:22:35 -05:00

trustProxy.test.js

Harden admin login: RBAC-safe controls, 2FA, bot-scoring, rate limits (#9)

2026-07-02 23:22:35 -05:00

usernamePolicy.test.js

Player accounts backend: schema, registration, self-service, SSO provision

2026-07-06 01:36:51 -05:00