2 commits

Author	SHA1	Message	Date
lila	9ab2bc3d0e	feat(api): apply rate limiters to game and lobby routes ... Wire gameLimiter into gameRouter and lobbyLimiter into lobbyRouter. Both run after requireAuth since they key by req.session.user.id.	2026-04-23 20:36:36 +02:00
lila	4d1ebe2450	feat(api): add REST endpoints for lobby create and join ... - POST /api/v1/lobbies creates a lobby with a Crockford-Base32 6-char code, retrying on unique violation up to 5 times - POST /api/v1/lobbies/:code/join validates lobby state then calls the model's atomic addPlayer, idempotent for repeat joins from the same user - Routes require authentication via requireAuth	2026-04-16 19:51:38 +02:00