Wireframe / Auth

Secure entry for every account flow.

Keep login minimal, fast, and explicit. The web layer proxies credentials to the Java gatekeeper and keeps session handling off the client.

  • Login posts to Spring Boot, never directly to PostgreSQL.
  • HTTP-only cookies are issued in the web layer after a successful auth response.
  • Recovery, rate limits, and future MFA can evolve without changing game-schema ownership.

Account login

Connected to the current Java auth contract for email and password sign-in.

Your credentials are sent server-side to the Java auth API and verified against a stored password hash.

Login uses secure HTTP-only essential cookies for the web session. No optional analytics or marketing cookies are required for sign-in.