Table of Contents

Struct RevokeTokenBroadcast

Namespace
FishMMO.Shared
Assembly
FishMMO.Shared.dll

Broadcast sent by the client during an explicit logout to ask the LoginServer to revoke its currently-held auth token before its TTL expires. The token is sent as the raw HMAC-signed bytes the LoginServer originally issued (and which the client decrypted into memory on SrpSuccess). The server hashes the bytes via TokenService.HashToken and matches the row in IAuthTokenService.

Security note: this broadcast is sent over the FishNet transport without additional encryption; the server's AES-GCM auth channel has typically been torn down by the time the user logs out. Because the only purpose is to revoke the token the eavesdropper would have captured anyway, this is safe.

public struct RevokeTokenBroadcast : IBroadcast
Implements
IBroadcast
Inherited Members

Fields

Token

Raw (HMAC-signed) auth token bytes the LoginServer originally issued.

public byte[] Token

Field Value

byte[]