Forum QuickConnect Way to force all connections to be authenticated?

Discussion and help relating to PlayerIO's QuickConnect feature, including Facebook Connect and Kongregate Connect.

Way to force all connections to be authenticated?

Postby UnknownGuardian » October 23rd, 2010, 6:46 pm

Someone decompiled my game and grabbed my game code and made their own game client. Is there anyway to force authentication, when connecting them? E.g. normally I have have quickConnectKongregate, but on their client, it just simply creates a user that is not authenticated.
UnknownGuardian
 
Posts: 94
Joined: May 25th, 2010, 5:11 am

Re: Way to force all connections to be authenticated?

Postby default0 » October 23rd, 2010, 8:54 pm

UnknownGuardian wrote:Someone decompiled my game and grabbed my game code and made their own game client. Is there anyway to force authentication, when connecting them? E.g. normally I have have quickConnectKongregate, but on their client, it just simply creates a user that is not authenticated.


Just force authentication for ALL your connection types.
This way thay have to authenticate if they try to use PlayerIO.connect(), and if they use quickconnect they have to require passkeys.

This way youre secure.

Best regards
Try to play my Game: -->BlackGalaxy<--
User avatar
default0
 
Posts: 115
Joined: February 2nd, 2010, 6:46 pm
Location: Germany

Re: Way to force all connections to be authenticated?

Postby UnknownGuardian » October 23rd, 2010, 8:58 pm

How do I force it though? I don't see some option that allows me to disable connection without authentication.

The user created their own client, and just called connect() rather than quickKongregateConnect...
UnknownGuardian
 
Posts: 94
Joined: May 25th, 2010, 5:11 am

Re: Way to force all connections to be authenticated?

Postby default0 » October 23rd, 2010, 9:36 pm

UnknownGuardian wrote:How do I force it though? I don't see some option that allows me to disable connection without authentication.

The user created their own client, and just called connect() rather than quickKongregateConnect...


Yes.
Go to the admin panel, there go to your game. There go to settings. There you see your connection types.
Click public. And the key there (Shared Secret or so), that is your auth code.
Just put in some random shit like "jwefjlkjsdfj23³___$$$"§4" or sth like that.

Best regards
Try to play my Game: -->BlackGalaxy<--
User avatar
default0
 
Posts: 115
Joined: February 2nd, 2010, 6:46 pm
Location: Germany

Re: Way to force all connections to be authenticated?

Postby UnknownGuardian » October 23rd, 2010, 9:58 pm

Would limiting the rights on the connection do the same thing? Or is that not advisable?
UnknownGuardian
 
Posts: 94
Joined: May 25th, 2010, 5:11 am

Re: Way to force all connections to be authenticated?

Postby default0 » October 23rd, 2010, 11:35 pm

UnknownGuardian wrote:Would limiting the rights on the connection do the same thing? Or is that not advisable?


Give public connection only the rights to load from tables.

Best regards
Try to play my Game: -->BlackGalaxy<--
User avatar
default0
 
Posts: 115
Joined: February 2nd, 2010, 6:46 pm
Location: Germany

Re: Way to force all connections to be authenticated?

Postby Benjaminsen » October 24th, 2010, 1:09 pm

As default0 suggests.

Simply require authentication for all connections, this way user connections cannot be spoofed.
You can handle guests by creating a new connection with limited access and let guests connect with that.

/Chris
Benjaminsen
.IO
 
Posts: 1444
Joined: January 12th, 2010, 11:54 am
Location: Denmark

Re: Way to force all connections to be authenticated?

Postby UnknownGuardian » October 24th, 2010, 3:24 pm

Yeh, guests aren't my problem at all right now. I've required them to sign in or sign up with Kongregate.
UnknownGuardian
 
Posts: 94
Joined: May 25th, 2010, 5:11 am


Return to QuickConnect



cron