Block a user
bug(server): sync push always rejected — user_id nil placeholder fails mismatch check
Fix (commit
Fix (commit 7eb1181)
The server's push handler now accepts Uuid::nil() as a valid placeholder and replaces it with the authenticated user's real UUID before the mismatch check:
/…
bug(server): sync push always rejected — user_id nil placeholder fails mismatch check
bug(server): replay upload uses client-supplied recorded_at for leaderboard — allows timestamp spoofing
Fix (commit
Fix (commit 7eb1181)
The leaderboard recorded_at update in replays.rs now uses the server-computed received_at timestamp instead of the client-supplied header.recorded_at:
//…
bug(server): replay upload uses client-supplied recorded_at for leaderboard — allows timestamp spoofing
bug(server): replay upload uses client-supplied recorded_at for leaderboard — allows timestamp spoofing
bug(server): sync push always rejected — user_id nil placeholder fails mismatch check
bug(engine): auto-complete does not block player drag/tap input
bug(challenge): silent no-op when all challenges are completed
bug(engine): auto-complete does not block player drag/tap input
Fix (commit
Fix (commit f444378)
Added an AutoCompleteState early-return guard to three input entry points so no player-initiated move can race with the auto-complete sequence:
start_drag…
bug(challenge): silent no-op when all challenges are completed
Fix (commit
Fix (commit f444378)
Replaced the silent warn! + return with an InfoToastEvent so the player receives clear feedback when all challenges have been completed:
// Before
let…
bug(challenge): silent no-op when all challenges are completed
bug(engine): auto-complete does not block player drag/tap input
Add selectable touch input mode (one-tap auto-move vs. tap-to-select)
bug(achievements): XP granted before persistence confirmed — reward lost on crash
bug(daily-challenge): stale date cache when app runs past midnight