From af35bbbe44671152938393eea169329046eff449 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 8 Apr 2024 15:49:32 +0000 Subject: [PATCH 1/4] Update flask requirement from ~=3.0.2 to ~=3.0.3 Updates the requirements on [flask](https://github.com/pallets/flask) to permit the latest version. - [Release notes](https://github.com/pallets/flask/releases) - [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst) - [Commits](https://github.com/pallets/flask/compare/3.0.2...3.0.3) --- updated-dependencies: - dependency-name: flask dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 3f29531..5c4b509 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,4 +1,4 @@ -flask~=3.0.2 +flask~=3.0.3 PyYaml==6.0.1 graypy~=2.1.0 requests~=2.31.0 From 285f6fbf3f9053e28579517e8538bb775f7be070 Mon Sep 17 00:00:00 2001 From: Owen Zinn <16374972+Apollogeist@users.noreply.github.com> Date: Tue, 9 Apr 2024 18:51:56 -0500 Subject: [PATCH 2/4] Fix grammar/typos --- ReadMe.md | 64 +++++++++++++++++++++++++++---------------------------- 1 file changed, 32 insertions(+), 32 deletions(-) diff --git a/ReadMe.md b/ReadMe.md index c038140..a1afefe 100644 --- a/ReadMe.md +++ b/ReadMe.md @@ -1,38 +1,38 @@ # DeathGarden Bloodharvest API Rebirth Project -**This project is Work in Progress! This means there are Bugs!** +**This project is a work in progress! That means there are bugs!** -**In the Current state you can play and most features are implemented. For infos about missing Features check out the [ToDo page](https://github.com/users/wolfswolke/projects/2/views/1).** +**In its current state you can play, and most features are implemented. For info about missing features, check out the [to-do page](https://github.com/users/wolfswolke/projects/2/views/1).** **** **Current Progress:** -- Logging (Stashboard, Metrics, gameDataAnalytics) See [Logging.md](https://github.com/wolfswolke/DeathGarden_API_Rebirth/blob/master/Doc/Logging.md) for details. -- Steam Login -- Load Lobby +- Logging (Stashboard, metrics, gameDataAnalytics) See [Logging.md](https://github.com/wolfswolke/DeathGarden_API_Rebirth/blob/master/Doc/Logging.md) for details. +- Steam login +- Load lobby - Shop -- Messaging System -- Currency System +- Messaging system +- Currency system - Matchmaking via Steam P2P - Leaderboard doesn't crash anymore -- GameNews (Disabled atm because they mess InitOrGetGroup up) +- GameNews (disabled atm because they mess InitOrGetGroup up) - InitOrGetGroup -- and alot of other things and Endpoints. (Most of them keep the game from crashing) +- A lot of other features and endpoints (most of them keep the game from crashing) **To-Do List:** - Create a new catalog parser -- Dynamic Leaderboards -- Challenges (Code is done already but needs rework) -- Progression (Leveling, Currency End of match,) -- Private Matches -- End of Match Endpoints +- Dynamic leaderboards +- Challenges (code is done already but needs rework) +- Progression (leveling, currency, end of match, etc.) +- Private matches +- End-of-match endpoints -For more detailed information about our project's tasks, please visit the [ToDo page](https://github.com/users/wolfswolke/projects/2/views/1). +For more detailed information about our project's tasks, please visit the [to-do page](https://github.com/users/wolfswolke/projects/2/views/1). The goal of this project is to revive the Deathgarden backend and servers. If you have any knowledge about how the backend used to work or want to contribute, please reach out! -From what we know the Game was based on WH40KEC (Warhammer 40k Eternal Crusade) and some code was also used in DBD. +From what we know the game was based on WH40KEC (Warhammer 40k Eternal Crusade) and some code was also used in DBD. **Contact Information:** - Matrix: @zkwolf:matrix.org @@ -41,32 +41,32 @@ From what we know the Game was based on WH40KEC (Warhammer 40k Eternal Crusade) ## Usage 0. If you do not already own Deathgarden, you can get it with this command: -steam://run/555440 +`steam://run/555440` 1. Download the [TheExit-Rebirth-Updater.bat](https://github.com/wolfswolke/DeathGarden_API_Rebirth/blob/master/src/files/TheExit-Rebirth-Updater.bat) file and place it in the following directory: "\steamapps\common\DEATHGARDEN\" -2. Run the Script and wait for it to finish. +2. Run the script and wait for it to finish. **Self Hosting/Development Requirements:** -- Steam API Key (See [Steam_Login.md](https://github.com/wolfswolke/DeathGarden_API_Rebirth/blob/master/Doc/Steam_Login.md) for details) -- Python 3.10 (or newer) -- Install the requirements from requirements.txt -- Create an api_config.yaml file (An example is available in the Config folder) -- For request analysis, consider using Fiddler +- Steam API Key (see [Steam_Login.md](https://github.com/wolfswolke/DeathGarden_API_Rebirth/blob/master/Doc/Steam_Login.md) for details). +- Python 3.10 (or newer). +- Install the requirements from `requirements.txt`. +- Create an api_config.yaml file (an example is available in the `src/config` folder). +- For request analysis, consider using Fiddler. **Current Knowledge:** - The game uses Unreal Engine 4.21.0. -- The anticheat is Battleye (Note: Windows 11 blocks vulnerable drivers). -- The newest game version is: te-18f25613-36778-ue4-374f864b (Versions may vary by region). +- The anticheat is BattlEye (note: Windows 11 blocks vulnerable drivers). +- The newest game version is: te-18f25613-36778-ue4-374f864b (versions may vary by region). - The backend and server can be changed with start parameters (new method with the PAK file). - The in-game console can be re-enabled. - The in-game SET command is available. -- The "Status" API is Stashboard, which has been discontinued in 2019. +- The "Status" API is Stashboard, which has been discontinued since 2019. - Fluentd was used for logging. -- The game server uses the Amazon Gamelift SDK (We are now using P2P). -- The steamAPI.dll cannot be spoofed because Battleye checks the signature. (We have a Battleye emulator) -- There is an API Key that is currently not used by the game. -- The authentication is done cia the bhvrSession Cookie. See [bhvrSession.md](https://github.com/wolfswolke/DeathGarden_API_Rebirth/blob/master/Doc/bhvrSession.md) for details. +- The game server uses the Amazon GameLift SDK (we are now using P2P). +- The steam_api.dll cannot be spoofed because Battleye checks the signature. (we have a Battleye emulator) +- There is an API key that is currently not used by the game. +- The authentication is done via the bhvrSession Cookie. See [bhvrSession.md](https://github.com/wolfswolke/DeathGarden_API_Rebirth/blob/master/Doc/bhvrSession.md) for details. -**Currently, Known Endpoints and URLs:** -- This information will be reworked into a Wiki page for more detailed reference. +**Currently Known Endpoints and URLs:** +- This information will be reworked into a wiki page for more detailed reference. From 61d3ad801fa99e00e34f549f7669342a86d2e4ca Mon Sep 17 00:00:00 2001 From: Owen Zinn <16374972+Apollogeist@users.noreply.github.com> Date: Tue, 9 Apr 2024 18:56:02 -0500 Subject: [PATCH 3/4] Fix missed typos, edit for clarity --- ReadMe.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/ReadMe.md b/ReadMe.md index a1afefe..f69687f 100644 --- a/ReadMe.md +++ b/ReadMe.md @@ -2,7 +2,7 @@ **This project is a work in progress! That means there are bugs!** -**In its current state you can play, and most features are implemented. For info about missing features, check out the [to-do page](https://github.com/users/wolfswolke/projects/2/views/1).** +**In its current state, you can play, and most features have been implemented. For info about missing features, check out the [to-do page](https://github.com/users/wolfswolke/projects/2/views/1).** **** @@ -66,7 +66,7 @@ From what we know the game was based on WH40KEC (Warhammer 40k Eternal Crusade) - The game server uses the Amazon GameLift SDK (we are now using P2P). - The steam_api.dll cannot be spoofed because Battleye checks the signature. (we have a Battleye emulator) - There is an API key that is currently not used by the game. -- The authentication is done via the bhvrSession Cookie. See [bhvrSession.md](https://github.com/wolfswolke/DeathGarden_API_Rebirth/blob/master/Doc/bhvrSession.md) for details. +- The authentication is done via the bhvrSession cookie. See [bhvrSession.md](https://github.com/wolfswolke/DeathGarden_API_Rebirth/blob/master/Doc/bhvrSession.md) for details. **Currently Known Endpoints and URLs:** - This information will be reworked into a wiki page for more detailed reference. From 9a05063939093f964f33b8cfddaed98455fd04a3 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 14 Apr 2024 23:39:53 +0000 Subject: [PATCH 4/4] fix: Dockerfile to reduce vulnerabilities --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index eb6366d..f2755ee 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM python:3.13.0a5-alpine3.18 +FROM python:3.13.0a6-alpine3.18 RUN apk upgrade && apk add curl && apk upgrade busybox # CVE-2022-48174