Add Fabric/Forge version builds and Paper integration, preserve permanent player identities across renames, harden session authorization, and surface privacy-conscious launcher/server activity in the panel.
Game servers (Paper plugin, Fabric/Forge mods) authenticate with a
per-server token and report to /api/server/v1:
- hello: records software/version, returns the auth server URL
- login: allow/deny with a message (account status + reason, access
all/members/groups, optional "must join through the launcher" check
matching the player's recent launch IP)
- sync: online players, TPS, stat deltas and events; answers with
players to kick when their account was disabled meanwhile
Admins create servers (token shown once, stored hashed), regenerate
tokens, and read leaderboards, events and per-player activity. The
dashboard stats include who's online right now.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_011ARcGWxLx21FwXJ3yfGriS
SCOPEDD