sindoring/moonwell-web
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

vmangos

Browse Source
This commit is contained in:
sindoring
2026-10-03 14:33:08 +04:00
parent 6a73d760c4
commit 93a9442e1c
67 changed files with 941 additions and 698 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/Http/Controllers/Api/LauncherGameTicketController.php
+20 -34
View File
@@ -16,55 +16,41 @@ class LauncherGameTicketController extends Controller
#[OA\Post(
path: '/api/launcher/game-ticket',
summary: 'Issue a single-use game login ticket',
description: 'Creates short-lived SRP credentials for authserver. A new ticket atomically revokes the previous generation. The plaintext ticket is never stored.',
summary: 'Выдать одноразовый билет для входа в vMaNGOS',
description: 'Создаёт короткоживущий SRP-билет. Новый билет отзывает предыдущий.',
security: [['bearerAuth' => []]],
tags: ['Launcher Auth'],
requestBody: new OA\RequestBody(
required: true,
content: new OA\JsonContent(
required: ['client_build'],
properties: [
new OA\Property(property: 'client_build', type: 'integer', example: 12340),
],
),
),
requestBody: new OA\RequestBody(required: true, content: new OA\JsonContent(
required: ['client_build'],
properties: [new OA\Property(property: 'client_build', type: 'integer', example: 5875)],
)),
responses: [
new OA\Response(
response: 200,
description: 'Ticket issued',
content: new OA\JsonContent(
required: ['account', 'ticket', 'expires_at'],
properties: [
new OA\Property(property: 'account', type: 'string', example: 'PLAYERONE'),
new OA\Property(property: 'ticket', type: 'string', pattern: '^[A-Z0-9]{16}$', example: '7W6D4M2Q9K8R3X5Z'),
new OA\Property(property: 'expires_at', type: 'string', format: 'date-time'),
],
),
),
new OA\Response(response: 200, description: 'Билет выдан', content: new OA\JsonContent(
required: ['account', 'ticket', 'expires_at'],
properties: [
new OA\Property(property: 'account', type: 'string', example: 'PLAYERONE'),
new OA\Property(property: 'ticket', type: 'string', pattern: '^[A-Z0-9]{16}$'),
new OA\Property(property: 'expires_at', type: 'string', format: 'date-time'),
],
)),
new OA\Response(response: 401, description: 'Launcher authentication required'),
new OA\Response(response: 422, description: 'Client build is not allowed'),
new OA\Response(response: 422, description: 'Unsupported client build'),
new OA\Response(response: 429, description: 'Too many requests'),
],
)]
public function store(Request $request): JsonResponse
{
$clientBuild = (int) $request->validate([
'client_build' => [
'required',
'integer',
Rule::in([(int) config('moonwell.launcher.client_build', 12340)]),
],
$build = (int) $request->validate([
'client_build' => ['required', 'integer', Rule::in([(int) config('moonwell.launcher.client_build')])],
])['client_build'];
/** @var GameAccount $account */
$account = $request->user();
$launcherSessionToken = $request->bearerToken();
abort_if($launcherSessionToken === null, 401);
$bearer = $request->bearerToken();
abort_if($bearer === null, 401);
return response()
->json($this->tickets->issue($account, $launcherSessionToken, $clientBuild))
->json($this->tickets->issue($account, $bearer, $build))
->header('Cache-Control', 'no-store');
}
}