Repository navigation
Add String ID host auth and guided game creation - #68
Merged
Merged
Conversation
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Hosts currently depend on Google tokens stored in the browser, and first-game creation can lose prompts or send the host straight into guest play. This replaces host auth with server-validated String ID sessions and adds setup → challenges → review → persistent sharing, while guests continue playing without signing in.
Preserves existing user/game IDs through an additive stable-owner migration, audited Google-subject linking and an explicit dry-run ownership mapping tool. Adds shared PostgreSQL request limits (including atomic concurrency and HTTP 429 coverage). Fixes API Prisma startup, host-results HTML injection, private-game writes, 3×3 handling, draft/retry recovery, mobile/keyboard access and photo isolation. Adds Spec Kit 1.2.3 with the maintained spec, plan, tasks and acceptance evidence, plus CI for real HTTP/database journeys. Automatic legacy static Pages deployment becomes manual-only; authenticated hosting stays on Vercel.
Validation on Node 22.23.4: frontend build, backend typecheck and API cold-start pass; 8 backend tests and 38 desktop/mobile browser checks pass. Fresh Prisma migration deployment and a seeded legacy-data/old-release compatibility fixture pass. Visual desktop/mobile review completed.
Release prerequisites: deploy String ID #75 and Google feature #77 first; apply the reviewed Prisma migrations before new readers; configure the shared HTTPS cookie and exact Bingo Origin; review unmatched legacy owners and pilot a real MOE account. No production migration, merge or deployment performed.