2.8 KiB
2.8 KiB
okf_version
| okf_version |
|---|
| 0.1 |
Minecraft Account Manager User Stories
This OKF bundle is the product record for implemented and proposed behavior. Story status and acceptance criteria are maintained alongside code changes.
Player Experience
- US-001 — Enter through Discord - Direct portal visitors are guided to the configured Discord server.
- US-002 — Authenticate with a Discord magic link - Discord users receive secure, private, single-use portal links.
- US-003 — Complete first-time onboarding - New users provide a name, connect a Java account, and confirm Discord identity.
- US-004 — Validate Minecraft accounts - Java usernames resolve through Mojang with explicit unverified overrides.
- US-005 — Manage linked accounts - Users manage names, accounts, primaries, and security history.
- US-006 — Keep Discord nicknames synchronized - Names and primary accounts determine the guild nickname.
Network and Game Access
- US-007 — Enrich login IPs - Portal and game login events include cached ProxyCheck location and network data.
- US-008 — Block anonymized account additions - VPN, proxy, Tor, and unknown networks cannot add accounts.
- US-009 — Enforce registration at Velocity - The proxy admits positively identified registered Java accounts only.
Administration and Governance
- US-010 — Preserve an audit trail - Security and account activity is stored as CloudEvents-style events.
- US-011 — Authenticate administrators with SSO - Keycloak and a required role protect the operator console.
- US-012 — Operate settings and audit views - Administrators configure denial messaging and inspect events.
- US-013 — Manage users as an administrator - Administrators search users and manage names and Minecraft accounts.
- US-014 — Receive standardized API errors - Application APIs return RFC 9457 Problem Details.
- US-015 — Deploy and operate securely - Operators have reproducible builds, migrations, credentials, and security controls.
- US-016 — Build and publish versioned releases - Gitea Actions publish the Velocity JAR and web and migration images.
- US-017 — Control admission with groups - Administrators assign users to groups that explicitly grant Minecraft access.
Tracking
See the design update log for high-level changes. New work starts by creating or updating a story and its acceptance criteria.