golfgame/client
adlee-was-taken 6461a7f0c7 Add metered open signups, per-IP limits, and auth security hardening
Enables public beta signup metering: DAILY_OPEN_SIGNUPS env var controls
how many users can register without an invite code per day (0=disabled,
-1=unlimited, N=daily cap). Invite codes always bypass the limit.

Also adds per-IP signup throttling (DAILY_SIGNUPS_PER_IP, default 3/day)
and fail-closed rate limiting on auth endpoints when Redis is down.

Client dynamically fetches /api/auth/signup-info to show invite field
as optional with remaining slots when open signups are enabled.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-24 14:28:28 -05:00
..
admin.css Huge v2 uplift, now deployable with real user management and tooling! 2026-01-27 11:32:15 -05:00
admin.html Huge v2 uplift, now deployable with real user management and tooling! 2026-01-27 11:32:15 -05:00
admin.js Fix CSP blocking admin panel buttons by removing inline onclick handlers 2026-02-21 23:56:45 -05:00
animation-queue.js Timing and animation changes for a more natural feeling game with CPU opps. 2026-01-31 12:22:54 -05:00
ANIMATIONS.md v3.0.0: V3 features, server refactoring, and documentation overhaul 2026-02-14 10:03:45 -05:00
anime.min.js Migrate animation system to unified anime.js framework 2026-02-01 22:57:53 -05:00
app.js Add metered open signups, per-IP limits, and auth security hardening 2026-02-24 14:28:28 -05:00
card-animations.js Fix draw-swap animation race and smarter CPU go-out decisions 2026-02-23 20:57:59 -05:00
card-manager.js Fix mobile portrait layout: lobby overlap, deal animation, card font sizes 2026-02-21 22:52:44 -05:00
golfball-logo.svg Tighten landscape logo-golfer gap, alternate suit colors on ball logo 2026-02-24 01:52:25 -05:00
index.html Add metered open signups, per-IP limits, and auth security hardening 2026-02-24 14:28:28 -05:00
leaderboard.js v3.1.0: Invite-gated auth, Glicko-2 ratings, matchmaking queue 2026-02-21 20:02:10 -05:00
replay.js Huge v2 uplift, now deployable with real user management and tooling! 2026-01-27 11:32:15 -05:00
state-differ.js v3.0.0: V3 features, server refactoring, and documentation overhaul 2026-02-14 10:03:45 -05:00
style.css Add metered open signups, per-IP limits, and auth security hardening 2026-02-24 14:28:28 -05:00
timing-config.js Tune round-end pause and reduce deck shake frequency 2026-02-23 21:06:17 -05:00