3.6 KiB
3.6 KiB
okf_version
| okf_version |
|---|
| 0.1 |
Minecraft Account Manager User Stories
This OKF bundle is the product record for implemented and proposed behavior. Story status and acceptance criteria are maintained alongside code changes.
Player Experience
- US-001 — Enter through Discord - Direct portal visitors are guided to the configured Discord server.
- US-002 — Authenticate with a Discord magic link - Discord users receive secure, private, single-use portal links.
- US-003 — Complete first-time onboarding - New users provide a name, connect a Java account, and confirm Discord identity.
- US-004 — Validate Minecraft accounts - Java usernames resolve through Mojang with explicit unverified overrides.
- US-005 — Manage linked accounts - Users manage names, accounts, primaries, and security history.
- US-006 — Keep Discord nicknames synchronized - Names and primary accounts determine the guild nickname.
Network and Game Access
- US-007 — Enrich login IPs - Portal and game login events include cached ProxyCheck location and network data.
- US-008 — Block anonymized account additions - VPN, proxy, Tor, and unknown networks cannot add accounts.
- US-009 — Enforce registration at Velocity - The proxy admits positively identified registered Java accounts only.
Administration and Governance
- US-010 — Preserve an audit trail - Security and account activity is stored as CloudEvents-style events.
- US-011 — Authenticate administrators with SSO - Keycloak and a required role protect the operator console.
- US-012 — Operate settings and audit views - Administrators configure denial messaging and inspect events.
- US-013 — Manage users as an administrator - Administrators search users and manage names and Minecraft accounts.
- US-014 — Receive standardized API errors - Application APIs return RFC 9457 Problem Details.
- US-015 — Deploy and operate securely - Operators have reproducible builds, migrations, credentials, and security controls.
- US-016 — Build and publish versioned releases - Gitea Actions publish the Velocity JAR and web and migration images.
- US-017 — Control admission with groups - Each user has one effective group that explicitly controls Minecraft access.
- US-018 — Monitor community account activity - Administrators review daily users, confirmed connections, locations, denials, and risky networks.
- US-019 — Manage groups efficiently - Administrators manage group identity, policies, membership, and creation through focused confirmed workflows.
- US-020 — Schedule group access in UTC - Enabled groups may be restricted to recurring weekly UTC windows with static denial-message templates.
- US-021 — Manage RCON server connections - Administrators manage encrypted internal Minecraft RCON endpoints.
- US-022 — Operate servers through an RCON console - Administrators execute bounded commands through the server-side portal proxy.
Tracking
See the design update log for high-level changes. New work starts by creating or updating a story and its acceptance criteria.