Aaron Kimbrell 26b188852f fix: session keys are 16 bytes sent as 32 hex characters ...

The key was a 32 bit number, sent to the client as the MD5 hash of its
decimal text. The client only stores the key and sends it back, so it
is now 16 bytes from the system entropy source written as 32 lowercase
hex characters, which fills the same 33 character field of the login
response.

The auth, master and world servers pass the key itself between them as
a 33 character string in place of the number: SET_SESSION_KEY,
SESSION_KEY_RESPONSE and NEW_SESSION_ALERT keep their IDs and carry the
string where the number was. The master server keeps one key for each
username, and a world server compares the key a client sends with the
one from the master server in constant time. A key stays valid until
the next login of its account replaces it, as before.

Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>

2026-11-10 16:28:34 -06:00

..

dClient

feat: read the bounding boxes of the client's bricks from its brickdb

2026-11-10 11:52:20 -06:00

dEnums

Merge origin/main into experimental: behaviors, raw terrain scene lookups, property model fixes, player count

2026-11-10 10:57:45 -06:00

AccountRules.h

feat(dashboard): permission grants count in every dashboard permission check

2026-09-29 01:16:38 -05:00

Amf3.h

fix: bound AMF3 decoding and stop hashing client keys

2026-09-28 22:30:44 -05:00

AMFDeserialize.cpp

fix: limit how deep AMF3 arrays nest and stop at the end of the data

2026-11-10 16:28:34 -06:00

AMFDeserialize.h

fix: limit how deep AMF3 arrays nest and stop at the end of the data

2026-11-10 16:28:34 -06:00

AmfSerialize.cpp

Convert AMFSerialize to use bitstream references (#1466)

2024-02-26 23:11:56 -06:00

AmfSerialize.h

fix: make include paths consistent (#1390)

2024-01-05 06:33:52 -06:00

ApiKeyScope.h

feat(permissions): API key scopes that narrow permission and rank checks

2026-09-28 22:31:02 -05:00

BinaryIO.cpp

use encoding

2024-12-24 14:32:08 -08:00

BinaryIO.h

use encoding

2024-12-24 14:32:08 -08:00

BinaryPathFinder.cpp

Allow servers to be run from directories other than build. Read/write files relative to binary instead of cwd (#834)

2022-11-27 03:59:59 -08:00

BinaryPathFinder.h

Allow servers to be run from directories other than build. Read/write files relative to binary instead of cwd (#834)

2022-11-27 03:59:59 -08:00

Brick.h

Breakout rest of the enums from dCommonVars and clean it up (#1061)

2023-05-02 17:39:21 -05:00

BrickByBrickFix.cpp

feat(ugc): icon light matched to the game, debounce, shared car icons, purge, icon editor

2026-09-28 22:31:09 -05:00

BrickByBrickFix.h

Add support for packed clients (#802)

2022-11-01 13:21:26 -05:00

BuildInfo.cpp.in

build: generate a BuildInfo translation unit with version, commit, branch, dirty flag and build kind

2026-09-29 16:29:46 -05:00

BuildInfo.h

feat: log the build identifier at startup and show it on the dashboard About page

2026-09-29 16:29:46 -05:00

CivilDate.h

feat: web dashboard and playground work

2026-09-28 22:30:43 -05:00

ClientSysInfo.cpp

feat(common): read the memory text the client sends at login

2026-09-29 19:09:13 -05:00

ClientSysInfo.h

feat(common): read the memory text the client sends at login

2026-09-29 19:09:13 -05:00

CMakeLists.txt

feat: read the bounding boxes of the client's bricks from its brickdb

2026-11-10 11:52:20 -06:00

dConfig.cpp

fix: ignore whitespace around config keys and values

2026-09-28 22:30:45 -05:00

dConfig.h

feat: web dashboard and playground work

2026-09-28 22:30:43 -05:00

Demangler.cpp

Diagnostics: Fix demangling (#1215)

2023-10-09 15:31:43 -05:00

Demangler.h

Diagnostics: Fix demangling (#1215)

2023-10-09 15:31:43 -05:00

Diagnostics.cpp

feat: web dashboard and playground work

2026-09-28 22:30:43 -05:00

Diagnostics.h

format codebase

2022-07-28 08:39:57 -05:00

DluAssert.h

fix: property behavior crashes (#1813)

2025-06-08 21:41:43 -05:00

dMath.h

feat: Add a bunch of behaviors (All rotations, DoDamage, OnTimer, OnStartup, MoveBackToStart) and make models move based on normals, not world axes (#2038)

2026-10-05 12:33:45 -05:00

EventParts.cpp

feat: web dashboard and playground work

2026-09-28 22:30:43 -05:00

EventParts.h

feat: web dashboard and playground work

2026-09-28 22:30:43 -05:00

FdbMappedFile.cpp

feat(dCommon): read cdclient.fdb in place through its hash buckets

2026-09-29 22:07:45 -05:00

FdbMappedFile.h

feat(dCommon): read cdclient.fdb in place through its hash buckets

2026-09-29 22:07:45 -05:00

FdbReader.cpp

feat(dCommon): read cdclient.fdb in place through its hash buckets

2026-09-29 22:07:45 -05:00

FdbReader.h

feat(dCommon): read cdclient.fdb in place through its hash buckets

2026-09-29 22:07:45 -05:00

FdbSnapshot.cpp

feat(cdclient): servers open master's fdb copy, never the client's file

2026-09-29 23:20:20 -05:00

FdbSnapshot.h

feat(cdclient): servers open master's fdb copy, never the client's file

2026-09-29 23:20:20 -05:00

FdbToSqlite.cpp

refactor(cdclient): FdbToSqlite can convert into a connection of its own

2026-09-29 23:20:20 -05:00

FdbToSqlite.h

refactor(cdclient): FdbToSqlite can convert into a connection of its own

2026-09-29 23:20:20 -05:00

Game.cpp

fix: signal handling (#1375)

2024-01-01 21:50:00 -06:00

Game.h

fix: signal handling (#1375)

2024-01-01 21:50:00 -06:00

GeneralUtils.cpp

fix: session keys are 16 bytes sent as 32 hex characters

2026-11-10 16:28:34 -06:00

GeneralUtils.h

fix: session keys are 16 bytes sent as 32 hex characters

2026-11-10 16:28:34 -06:00

GuildNameRules.h

feat(chat): GuildManager, the guild rules of the chat server

2026-09-29 06:48:40 -05:00

HotPropertySlots.h

fix(properties): top property slots show only their own world

2026-09-28 22:31:14 -05:00

Implementation.h

press the enter key once (#1648)

2024-11-17 19:03:09 -06:00

JSONUtils.cpp

feat: refactor web server to be generic and add websockets framework (#1786)

2025-05-14 22:38:38 -05:00

JSONUtils.h

feat: refactor web server to be generic and add websockets framework (#1786)

2025-05-14 22:38:38 -05:00

LDFFormat.cpp

chore: cleanup pointer management for LDF data (#1995)

2026-06-14 20:54:52 -07:00

LDFFormat.h

feat: web dashboard and playground work

2026-09-28 22:30:43 -05:00

LevelFile.cpp

fix: split and adjust scene object config as the client does

2026-11-10 11:51:49 -06:00

LevelFile.h

fix: split and adjust scene object config as the client does

2026-11-10 11:51:49 -06:00

LiveOpsRules.h

feat: web dashboard and playground work

2026-09-28 22:30:43 -05:00

Locale.cpp

feat(locale): load every locale in locale.xml on request

2026-09-29 22:07:46 -05:00

Locale.h

feat(locale): load every locale in locale.xml on request

2026-09-29 22:07:46 -05:00

Logger.cpp

feat: build a zone's 3D data on worker threads

2026-09-28 22:30:51 -05:00

Logger.h

feat: add logger feature to log on function entry and exit (#1924)

2025-10-25 14:53:49 -05:00

Lxfml.cpp

fix: place brick by brick models by the bottom middle of their bricks' box

2026-11-10 11:52:30 -06:00

Lxfml.h

fix: place brick by brick models by the bottom middle of their bricks' box

2026-11-10 11:52:30 -06:00

LxfmlBugged.cpp

fix: security vulnerabilities (#1980)

2026-06-07 20:59:11 -07:00

Metrics.cpp

chore: simplify metrics (#1987)

2026-06-08 21:42:32 -07:00

Metrics.h

chore: simplify metrics (#1987)

2026-06-08 21:42:32 -07:00

NiColor.h

feat: Raw reading on zone load and scene tools (#1910)

2026-10-27 09:22:28 -05:00

NifFile.cpp

fix(nif): leave out a root node's rotation and translation

2026-09-29 18:13:45 -05:00

NifFile.h

fix(nif): leave out a root node's rotation and translation

2026-09-29 18:13:45 -05:00

NiPoint3.cpp

refactor: allow usage of NiPoint3 and NiQuaternion in constexpr context (#1414)

2024-01-29 01:53:12 -06:00

NiPoint3.h

chore: cleanup pointer management for LDF data (#1995)

2026-06-14 20:54:52 -07:00

NiPoint3.inl

Replace Quaternion with glm math (#1868)

2025-09-06 19:18:03 -07:00

NiQuaternion.cpp

Replace Quaternion with glm math (#1868)

2025-09-06 19:18:03 -07:00

NiQuaternion.h

chore: cleanup pointer management for LDF data (#1995)

2026-06-14 20:54:52 -07:00

Observable.h

Proposal for observers and deferred implementations (#1599)

2024-11-17 18:46:08 -06:00

PermissionGrants.cpp

feat(dashboard): permission grants count in every dashboard permission check

2026-09-29 01:16:38 -05:00

PermissionGrants.h

feat(dashboard): permission grants count in every dashboard permission check

2026-09-29 01:16:38 -05:00

Permissions.cpp

feat(gm): /reloadworld with the world_reload permission (GM 9)

2026-09-30 02:51:21 -05:00

Permissions.h

feat(dashboard): permission grants count in every dashboard permission check

2026-09-29 01:16:38 -05:00

PositionUpdate.h

Replace Quaternion with glm math (#1868)

2025-09-06 19:18:03 -07:00

Process.cpp

feat: web dashboard and playground work

2026-09-28 22:30:43 -05:00

Process.h

feat: web dashboard and playground work

2026-09-28 22:30:43 -05:00

Profiler.cpp

feat(profiler): frame timing and scope trees of a server's main loop

2026-09-29 22:26:17 -05:00

Profiler.h

feat(profiler): frame timing and scope trees of a server's main loop

2026-09-29 22:26:17 -05:00

PropertyBehaviorActions.h

Merge origin/main into experimental: behaviors, raw terrain scene lookups, property model fixes, player count

2026-11-10 10:57:45 -06:00

PropertyRentRules.h

feat: optional property rent

2026-09-28 22:30:52 -05:00

PropertyReputationRules.h

feat: property reputation from visitors, resistant to farming

2026-09-28 22:30:52 -05:00

ScheduleRules.cpp

feat: web dashboard and playground work

2026-09-28 22:30:43 -05:00

ScheduleRules.h

feat: web dashboard and playground work

2026-09-28 22:30:43 -05:00

Sd0.cpp

fix: limit the chunks and the inflated size of an sd0 buffer

2026-11-10 16:28:34 -06:00

Sd0.h

fix: limit the chunks and the inflated size of an sd0 buffer

2026-11-10 16:28:34 -06:00

Singleton.h

CDClient cleanup and optimization (#1023)

2023-03-17 07:36:21 -07:00

SlashCommandLevels.h

feat: web dashboard and playground work

2026-09-28 22:30:43 -05:00

TinyXmlUtils.cpp

feat: normalize brick model positions (#1761)

2025-05-05 09:05:12 -05:00

TinyXmlUtils.h

feat: normalize brick model positions (#1761)

2025-05-05 09:05:12 -05:00

TrafficStats.cpp

feat(web): API key traffic is its own Network row, named after the key

2026-09-29 22:26:17 -05:00

TrafficStats.h

feat(web): API key traffic is its own Network row, named after the key

2026-09-29 22:26:17 -05:00

UgcKeys.h

feat(ugc): processor processing option (native, toolbox-blender)

2026-09-29 16:47:40 -05:00

VanityEvents.cpp

feat: web dashboard and playground work

2026-09-28 22:30:43 -05:00

VanityEvents.h

feat: web dashboard and playground work

2026-09-28 22:30:43 -05:00

VanityXml.cpp

feat: web dashboard and playground work

2026-09-28 22:30:43 -05:00

VanityXml.h

feat: web dashboard and playground work

2026-09-28 22:30:43 -05:00

ZCompression.cpp

feat(common): streaming raw deflate and CRC-32 in ZCompression

2026-09-28 22:31:07 -05:00

ZCompression.h

feat(common): streaming raw deflate and CRC-32 in ZCompression

2026-09-28 22:31:07 -05:00

Zip.cpp

feat: read the bounding boxes of the client's bricks from its brickdb

2026-11-10 11:52:20 -06:00

Zip.h

feat: read the bounding boxes of the client's bricks from its brickdb

2026-11-10 11:52:20 -06:00

ZoneFile.cpp

fix: read a zone's paths as the client does

2026-11-10 11:46:10 -06:00

ZoneFile.h

fix: a zone file's boundaries and scene colours are named and kept as main has them

2026-11-10 11:41:35 -06:00

ZoneFileLog.cpp

feat(world): record the zone files a world loads, with sizes and hashes

2026-09-30 02:51:21 -05:00

ZoneFileLog.h

feat(world): record the zone files a world loads, with sizes and hashes

2026-09-30 02:51:21 -05:00

ZoneScenes.cpp

fix(zone): a scene transition links the scenes of its first and last points

2026-09-29 08:36:35 -05:00

ZoneScenes.h

fix(ghosting): scene ghosting follows the client's scene streaming

2026-09-29 02:42:02 -05:00