Add platform authentication adapters without making Rendezvous an identity provider #30

New Issue

2026-07-16T22:17:19+02:00

Kyuubi commented

2026-07-16 22:17:19 +02:00

Parent: #1
Identified by: #23

Classification

Post-v1. Rendezvous v1 authenticates provisioned publishers and signed connection capabilities; each game remains authoritative for player identity and admission.

Outcome

Define optional adapters for platform-issued identity/admission assertions while preserving tenant isolation and keeping accounts, bans, entitlements, and canonical player identity in the game/platform boundary.

Acceptance criteria

Supported platforms, issuer trust, key rotation, replay, expiry, and revocation are explicit.
Raw platform credentials and stable player identifiers are not exposed in listings or retained in aggregate telemetry.
Games can reject admission independently after direct connectivity.
Cross-game/environment/platform confusion tests fail closed.
Integration and incident runbooks cover platform outage and key compromise.

Parent: #1 Identified by: #23 ## Classification Post-v1. Rendezvous v1 authenticates provisioned publishers and signed connection capabilities; each game remains authoritative for player identity and admission. ## Outcome Define optional adapters for platform-issued identity/admission assertions while preserving tenant isolation and keeping accounts, bans, entitlements, and canonical player identity in the game/platform boundary. ## Acceptance criteria - Supported platforms, issuer trust, key rotation, replay, expiry, and revocation are explicit. - Raw platform credentials and stable player identifiers are not exposed in listings or retained in aggregate telemetry. - Games can reject admission independently after direct connectivity. - Cross-game/environment/platform confusion tests fail closed. - Integration and incident runbooks cover platform outage and key compromise.

Kyuubi referenced this issue

2026-07-16 22:40:30 +02:00

Run the real-network canary and declare Rendezvous v1 production-ready #23

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: HeiKyu/Rendezvous#30