Client JWT authentication (#723)

## Description:

Send JWT to the game server for verification.

## Please complete the following:

- [x] I have added screenshots for all UI updates
- [ ] I confirm I have thoroughly tested these changes and take full
responsibility for any bugs introduced
- [x] I understand that submitting code with bugs that could have been
caught through manual testing blocks releases and new features for all
contributors

---------

Co-authored-by: Scott Anderson <662325+scottanderson@users.noreply.github.com>

src/client/ApiSchemas.ts

@@ -1,48 +0,0 @@
-import { z } from "zod";
-import { base64urlToUuid } from "./Base64";
-
-export const RefreshResponseSchema = z.object({
-  token: z.string(),
-});
-export type RefreshResponse = z.infer<typeof RefreshResponseSchema>;
-
-export const TokenPayloadSchema = z.object({
-  jti: z.string(),
-  sub: z
-    .string()
-    .refine(
-      (val) => {
-        const uuid = base64urlToUuid(val);
-        return uuid != null;
-      },
-      {
-        message: "Invalid base64-encoded UUID",
-      },
-    )
-    .transform((val) => {
-      const uuid = base64urlToUuid(val);
-      if (!uuid) throw new Error("Invalid base64 UUID");
-      return uuid;
-    }),
-  iat: z.number(),
-  iss: z.string(),
-  aud: z.string(),
-  exp: z.number(),
-  rol: z
-    .string()
-    .optional()
-    .transform((val) => val.split(",")),
-});
-export type TokenPayload = z.infer<typeof TokenPayloadSchema>;
-
-export const UserMeResponseSchema = z.object({
-  user: z.object({
-    id: z.string(),
-    avatar: z.string(),
-    username: z.string(),
-    global_name: z.string(),
-    discriminator: z.string(),
-    locale: z.string(),
-  }),
-});
-export type UserMeResponse = z.infer<typeof UserMeResponseSchema>;

src/client/Base64.ts

@@ -1,37 +0,0 @@
-import { base64url } from "jose";
-
-/**
- * Converts a UUID string to a base64url-encoded binary representation.
- * @param uuid - The UUID string (e.g., '123e4567-e89b-12d3-a456-426614174000')
- * @returns base64url string (e.g., 'Ej5FZ+i7EtOkVkJmFBdAAA')
- */
-export function uuidToBase64url(uuid: string): string {
-  const hex = uuid.replace(/-/g, "");
-  const bytes = new Uint8Array(16);
-
-  for (let i = 0; i < 16; i++) {
-    bytes[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);
-  }
-
-  return base64url.encode(bytes);
-}
-
-/**
- * Converts a base64url-encoded binary UUID back to its canonical UUID string.
- * @param encoded - base64url string (e.g., 'Ej5FZ+i7EtOkVkJmFBdAAA')
- * @returns UUID string (e.g., '123e4567-e89b-12d3-a456-426614174000')
- */
-export function base64urlToUuid(encoded: string): string {
-  const bytes = base64url.decode(encoded);
-  const hex = Array.from(bytes)
-    .map((b) => b.toString(16).padStart(2, "0"))
-    .join("");
-
-  return [
-    hex.slice(0, 8),
-    hex.slice(8, 12),
-    hex.slice(12, 16),
-    hex.slice(16, 20),
-    hex.slice(20),
-  ].join("-");
-}

src/client/ClientGameRunner.ts

@@ -43,7 +43,7 @@ export interface LobbyConfig {
   playerName: string;
   clientID: ClientID;
   gameID: GameID;
-  persistentID: string;
+  token: string;
   // GameStartInfo only exists when playing a singleplayer game.
   gameStartInfo?: GameStartInfo;
   // GameRecord exists when replaying an archived game.
@@ -59,7 +59,7 @@ export function joinLobby(
   initRemoteSender(eventBus);
 
   consolex.log(
-    `joinging lobby: gameID: ${lobbyConfig.gameID}, clientID: ${lobbyConfig.clientID}, persistentID: ${lobbyConfig.persistentID.slice(0, 5)}`,
+    `joinging lobby: gameID: ${lobbyConfig.gameID}, clientID: ${lobbyConfig.clientID}`,
   );
 
   const userSettings: UserSettings = new UserSettings();

src/client/Main.ts

@@ -273,7 +273,7 @@ class Client {
             ? ""
             : this.flagInput.getCurrentFlag(),
         playerName: this.usernameInput.getCurrentUsername(),
-        persistentID: getPersistentIDFromCookie(),
+        token: localStorage.getItem("token") ?? getPersistentIDFromCookie(),
         clientID: lobby.clientID,
         gameStartInfo: lobby.gameStartInfo ?? lobby.gameRecord?.gameStartInfo,
         gameRecord: lobby.gameRecord,

src/client/Transport.ts

@@ -346,7 +346,7 @@ export class Transport {
         gameID: this.lobbyConfig.gameID,
         clientID: this.lobbyConfig.clientID,
         lastTurn: numTurns,
-        persistentID: this.lobbyConfig.persistentID,
+        token: this.lobbyConfig.token,
         username: this.lobbyConfig.playerName,
         flag: this.lobbyConfig.flag,
       } satisfies ClientJoinMessage),

src/client/jwt.ts

@@ -5,7 +5,7 @@ import {
   TokenPayloadSchema,
   UserMeResponse,
   UserMeResponseSchema,
-} from "./ApiSchemas";
+} from "../core/ApiSchemas";
 
 function getAudience() {
   const { hostname } = new URL(window.location.href);