Arcturus-Morningstar-Extended

mirror of https://github.com/duckietm/Arcturus-Morningstar-Extended.git synced 2026-06-19 15:06:19 +00:00

Files

T

medievalshell e334a3e0ac feat(auth): backward-compatible TTL check on SSO auth_ticket

Pairs with the CMS-side change introducing auth_ticket_expires_at (60s
expiry written on every ticket issuance). Without an emulator-side
verification the column was advisory only — this commit gates every
SELECT that resolves a user by auth_ticket on

    auth_ticket = ?
    AND (auth_ticket_expires_at IS NULL OR auth_ticket_expires_at >= NOW())

The NULL branch preserves backward-compatibility: CMS deployments that
do not yet populate the column keep working exactly like before
(every ticket passes the WHERE clause as soon as auth_ticket matches),
and the TTL takes effect automatically the moment a CMS starts writing
the expiry value.

Five SELECTs touched:
- SessionEndpoints.java (cms-issued SSO + remember-token flow)
- HabboManager.loadHabbo (game client login by ticket)
- SecureLoginEvent (legacy handshake path)

DB schema delivered both ways:
- Database Updates/Own_Database_RunFirst/020_auth_ticket_ttl.sql:
  idempotent ALTER, skips if column already present (information_schema
  guard so re-running the bundle is safe).
- Default Database/FullDatabase.sql: column added to the `users` table
  definition for fresh installs.

Bumps the emulator version to 4.2.7.

2026-05-19 00:46:58 +02:00

FullDatabase.sql

feat(auth): backward-compatible TTL check on SSO auth_ticket

2026-05-19 00:46:58 +02:00

README.md

Update Default Database/README.md

2026-03-06 15:26:53 +00:00

README.md

📢 Disclaimer

Please note that the files is provided as an educational resource for learning purposes only. The creators and contributors to those files are not responsible for any misuse or unintended consequences arising from the use of the files. By using those files, you agree to take full responsibility for your actions and any consequences resulting from your use of the files. It is your responsibility to ensure that you are using the files in compliance with all applicable laws and regulations.

This repository contains all the assets needed for your hotel to operate. More specifically it contains:

The default swf pack from krews
MyBoBBa catalogue assets
xlRaiko clothing pack
Converted assets for the nitro client

The MyBoBBa catalogue is created by https://devbest.com/members/puffin.80070/