Secure Portal Auth: Social OAuth and Turnstile Integration

Hardening Authentication Pathways

Securing user authentication is paramount for maintaining game integrity. We upgraded the login flow by integrating Cloudflare Turnstile, a privacy-first CAPTCHA alternative. Turnstile prevents credential-stuffing and automated attacks on both registration and login views, loading dynamically with a customized dark theme to preserve our retro-cyber aesthetic.

Cybersecurity layers protect individual player sessions from brute-force attempts.

Social Authentication: Meta & Google OAuth

To streamline onboarding, we added native support for Google and Meta/Facebook Login. Clicking a provider sends a handshake payload to our backend, redirects the player to authenticate securely, and returns a profile payload to initialize their player identity. This eliminates the need for manual signups while preserving full data privacy settings.

Email Verification and Threat Remediation

For email-based signups, we integrated Resend verification links. Newly registered users receive an email verification token, and their account remains in a pending state until verified. A warning banner and automated resend mechanisms ensure a smooth recovery and validation flow.