mirror of
https://github.com/clusterio/clusterio.git
synced 2026-11-12 07:04:52 +09:00
Hornwitser
72d0994ca6
Add authentication plugin that does a simple challenge response protocol to verify that the player trying to log in is who they claim to be. The process goes as follows: 1. A player code is generated for a player that wants to log in and is displayed in-game. 2. The player code is input into the web interface and the master generates a verification code as a challenge back along with a token. 3. The player inputs the verification code in-game and is logged in to the web interface in doing so. To do the actual login the web interface polls a verify endpoint every 2 seconds until the code has either been verified or expired. The challenge comes from being unable to control the verification code and having to input it as a player logging into one of the servers in order to login. Some additional steps are taken in order to increase the difficulty for an attacker to subvert the challenge: - The login process must be started from in-game. - Generated codes are only valid for a limited timespan which is configurable and 2 minutes by default. - The verification code comes with a token that only works with one player code and verification code combo and must be provided to pass validation.
38 lines
1006 B
JavaScript
38 lines
1006 B
JavaScript
"use strict";
|
|
const path = require("path");
|
|
const webpack = require("webpack");
|
|
const { merge } = require("webpack-merge");
|
|
|
|
const common = require("@clusterio/web_ui/webpack.common");
|
|
|
|
module.exports = (env = {}) => merge(common(env), {
|
|
context: __dirname,
|
|
entry: "./web/index.jsx",
|
|
output: {
|
|
publicPath: "auto",
|
|
filename: "bundle.js",
|
|
path: path.resolve(__dirname, "dist", "web"),
|
|
},
|
|
plugins: [
|
|
new webpack.container.ModuleFederationPlugin({
|
|
name: "player_auth",
|
|
library: { type: "var", name: "plugin_player_auth" },
|
|
filename: "remoteEntry.js",
|
|
exposes: {
|
|
"./info": "./info.js",
|
|
"./package.json": "./package.json",
|
|
"./web": "./web/index.jsx",
|
|
},
|
|
shared: {
|
|
"@clusterio/lib/config": { import: false },
|
|
"@clusterio/lib/link": { import: false },
|
|
"@clusterio/lib/plugin": { import: false },
|
|
"@clusterio/web_ui": { import: false },
|
|
"antd": { import: false },
|
|
"react": { import: false },
|
|
"react-dom": { import: false },
|
|
},
|
|
}),
|
|
],
|
|
});
|