openhands
5628e7d6b7
1. env.ts: APP_KEY placeholder detection with validation 2. schema.prisma: password column widened to varchar(255) for argon2id 3. auth.ts: trustHost restricted to development only 4. next.config.ts: added CSP, HSTS, X-Frame-Options, and other security headers 5. api.ts: CORS restricted to APP_URL instead of wildcard 6. register-form.tsx: migrated from REST API fetch to server action (useActionState) 7. twofactor.ts + 2fa page: TOTP recovery codes (8 one-time codes, generated and displayed) 8. register.ts: password min length 8 + complexity requirements (upper, lower, digit) 9. register.ts + help-tickets.ts + radio-shouts.ts: Zod schema validation 10. rate-limit.ts: improved periodic cleanup with aggressive eviction at 10k buckets 11. guard.ts + admin actions: rate-limited admin actions (30 req/min per staff) 12. help-tickets.ts + radio-shouts.ts: content moderation via moderateOrThrow
atomcms-next
AtomCMS (Laravel) converted to Next.js 16 (App Router) + Prisma 7 against the same Arcturus-emulator MySQL/MariaDB database. Auth via NextAuth (argon2id/bcrypt + md5→argon2id upgrade), RCON to the emulator, full public site + admin panel.
Try it now (no database)
The dev/preview server is already running — open:
Public pages render with fallback defaults (empty data). Login / register / admin need a database (below).
Try it for real (your AtomCMS database)
Point it at your live (or a copy of your) AtomCMS database to log in with real accounts and see real data:
- Edit
atomcms-next/.env:DATABASE_URL=mysql://USER:PASSWORD@HOST:3306/DBNAME DATABASE_CONNECT_TIMEOUT_MS=10000 AUTH_SECRET=any-long-random-string-at-least-32-chars HOTEL_NAME=YourHotel # Optional emulator link (for RCON: give credits, ban, motto, disconnect): RCON_HOST=127.0.0.1 RCON_PORT=3001 - Restart the server (
pnpm -C atomcms-next start, orpnpm dev). - Log in at
/loginwith any existing account. Staff (rank ≥min_staff_rank, default 7) get the /admin panel. New users can/register.
It reads the schema you already have — no migrations are run against the emulator
tables (introspect/conform only). prisma generate is already done; if you add
tables, pnpm -C atomcms-next prisma:generate.
Run it yourself
cd atomcms-next
pnpm install # already done
pnpm dev # dev server (hot reload) on :3000
# or:
pnpm build && pnpm start # production
pnpm typecheck # tsc --noEmit
pnpm test # vitest (unit tests)
What's built
- Public: home, news (+comments/reactions), shop, marketplace, community,
rankings, staff, photos, guilds, rares, leaderboard, help (+tickets), profile
/u/<name>(badges/photos/guestbook), client launcher/client(SSO ticket), login / register / logout, settings, voucher redeem. - Admin (
/admin, staff-gated): users (give currency/motto/rank/alert/kick via RCON), rooms, articles, catalog, vouchers, badges, radio, achievements, rare-values, photos, bans, applications, word-filter, IP, logs, teams, housekeeping, permissions, emulator config, email templates, calendar, subscriptions, CMS settings. - Core: Prisma data layer (190 models), NextAuth auth core (byte-compatible argon2id/bcrypt/md5 + SSO ticket + Laravel encrypter + TOTP), RCON client + currency service, atom visual theme (self-hosted Nunito).