Use relative /api/tournament path instead of hardcoded
http://141.37.123.132:8086. The browser was hitting the external
tournament-server directly with the user's RS256 token, which it
rejects. Routing through our backend lets it publish to the native
server with the auto-registered director token.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Servers are now env-var configured; the Servers dialog, add form,
remove buttons, and TournamentServerService are all deleted.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
openJoinDialog now fetches user bots and official bots in parallel via
forkJoin. Each section shows its own empty state independently.
Official bot difficulty buttons are hidden when no official bots are
registered. User bots empty state links to /bots to create one.
Disables all join buttons while any join is in progress.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Map raw backend response (evaluation/continuationMoves) to frontend
model (eval/winChance/continuations). Add getFenHistory() call after
loading a game or PGN so runAnalysis() gets per-ply FEN history and
triggers analyzeGame() instead of falling back to single-position
analysis. Remove !hasAnnotations guard so positionAnalysis card shows
even when a game is loaded.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Remove token from WebSocket URL query parameters in ChallengeWebSocketService
and GameApiService. Instead, send {"type":"auth","token":"..."} as the first
text frame after the connection opens, matching the new backend auth protocol.
---------
Co-authored-by: LQ63 <lkhermann@web.de>
Reviewed-on: #13
OfficialBotService posts to /api/bots/official/join-tournament, but
the auth interceptor's protected-endpoint whitelist omitted /api/bots,
so no Authorization header was sent and the request hit the official-
bots service anonymously -> 401.
Add /api/bots to the whitelist.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Reviewed-on: #12
POST /api/board/game is @InternalOnly and returns 401 for browser clients.
Switch to /api/board/game/vs-bot which is @PermitAll and notifies the
official-bots service to play the bot side automatically.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
User Profile info, no game before login/register, menu bar
---------
Co-authored-by: Lala, Shahd <Shahd.Lala@sybit.de>
Co-authored-by: shahdlala66 <shahd.lala66@gmail.com>
Reviewed-on: #2
Janis
shahdlala66
shosho996
Janis Eccarius
lq64
LQ63