bbassieandClaude Opus 5.5 e6554e09c7 Add HostManager for host records and host tokens ...

controller.hosts is now a HostManager wrapping the hosts datastore, the
same way controller.users wraps the users datastore. It owns creating
hosts (moved from HostPairingManager), revoking them (moved from
ControlConnection) and signing and verifying host tokens (moved from
Controller, generateHostToken is renamed signHostToken to match
signUserToken).

UserManager gains verifyUserToken, replacing the copies of the user
token check in WsServer and routes. The WsServer copy accepted a token
without iat when the user had no tokenValidAfter; the shared check
always requires iat, which jsonwebtoken adds by default.

Follows Cooldude2606's comment on #1161.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-11-04 00:37:37 +00:00

..

global_chat

Merge pull request #1150 from bbassie/fix/node-engine-range

2026-10-30 20:41:37 +00:00

player_auth

Add HostManager for host records and host tokens

2026-11-04 00:37:37 +00:00

player_sync

Let a syncing spectator look around

2026-11-03 07:36:20 +00:00

research_sync

Rename safeOutputFile to atomicOverwriteFile (#1167)

2026-11-01 23:14:31 +00:00

statistics_exporter

Merge pull request #1150 from bbassie/fix/node-engine-range

2026-10-30 20:41:37 +00:00

subspace_storage

Rename safeOutputFile to atomicOverwriteFile (#1167)

2026-11-01 23:14:31 +00:00