- Add optionalAuth middleware: attaches session when present, never blocks (guests pass through) - Make game endpoints (start/answer) accept optional auth - GameSessionStore.userId: string → string | null - Rate limiter falls back to IP for unauthenticated users - Frontend: remove /play route guard, show 'Create account' CTA on score screen for guests - Add tests for guest session creation, answer submission, and cross-user session isolation |
||
|---|---|---|
| .. | ||
| apiRouter.ts | ||
| gameRouter.ts | ||
| healthRouter.ts | ||
| lobbyRouter.ts | ||