Add platform authentication adapters without making Rendezvous an identity provider #30

Open
opened 2026-07-16 22:17:19 +02:00 by Kyuubi · 0 comments
Owner

Parent: #1
Identified by: #23

Classification

Post-v1. Rendezvous v1 authenticates provisioned publishers and signed connection capabilities; each game remains authoritative for player identity and admission.

Outcome

Define optional adapters for platform-issued identity/admission assertions while preserving tenant isolation and keeping accounts, bans, entitlements, and canonical player identity in the game/platform boundary.

Acceptance criteria

  • Supported platforms, issuer trust, key rotation, replay, expiry, and revocation are explicit.
  • Raw platform credentials and stable player identifiers are not exposed in listings or retained in aggregate telemetry.
  • Games can reject admission independently after direct connectivity.
  • Cross-game/environment/platform confusion tests fail closed.
  • Integration and incident runbooks cover platform outage and key compromise.
Parent: #1 Identified by: #23 ## Classification Post-v1. Rendezvous v1 authenticates provisioned publishers and signed connection capabilities; each game remains authoritative for player identity and admission. ## Outcome Define optional adapters for platform-issued identity/admission assertions while preserving tenant isolation and keeping accounts, bans, entitlements, and canonical player identity in the game/platform boundary. ## Acceptance criteria - Supported platforms, issuer trust, key rotation, replay, expiry, and revocation are explicit. - Raw platform credentials and stable player identifiers are not exposed in listings or retained in aggregate telemetry. - Games can reject admission independently after direct connectivity. - Cross-game/environment/platform confusion tests fail closed. - Integration and incident runbooks cover platform outage and key compromise.
Sign in to join this conversation.
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: HeiKyu/Rendezvous#30