Namespace FishMMO.WebShared

Classes

ClientGate

Verifies the X-FishMMO-Client signature on incoming requests. See FishMMO-Unity/Assets/Scripts/Client/Launcher/ClientApiSigner.cs for the matching client-side producer and the canonical-string format.

The gate is intentionally lightweight: it filters out generic crawlers and casual scanners that don't ship the signed header, and it adds an anti-replay window so a captured header is useful only for 30 seconds. It is NOT an authentication mechanism — the shared secret is compiled into the public client and any motivated attacker can extract it. All real authority comes from the SRP/token flow inside the application.

MiddlewareExtensions

Extension methods for common ASP.NET middleware used across FishMMO web servers.