Add Node.js server skeleton with auth, persistence, and admin console (custom-node-server branch)

src/auth.js

@@ -0,0 +1,45 @@
+const axios = require('axios');
+const logger = require('./logger');
+
+// These functions are intentionally generic/stubbed. Configure endpoints via env.
+// STEAM: require STEAM_WEB_API_KEY to call ISteamUserAuth/AuthenticateUserTicket if you have an auth ticket.
+// RECNET: set RECNET_VERIFY_URL to a RecNet endpoint that verifies tokens.
+
+const STEAM_API_KEY = process.env.STEAM_WEB_API_KEY || '';
+const RECNET_VERIFY_URL = process.env.RECNET_VERIFY_URL || '';
+
+async function verifySteamToken(token) {
+  if (!STEAM_API_KEY) throw new Error('STEAM_WEB_API_KEY not configured');
+  if (!token) throw new Error('no token');
+
+  // Example: call Steam Web API to validate an auth ticket. Replace with proper endpoint as needed.
+  // This is a placeholder; Steam ticket verification requires the AuthenticateUserTicket endpoint and a ticket from client.
+  const url = `https://api.steampowered.com/ISteamUserAuth/AuthenticateUserTicket/v1/?key=${STEAM_API_KEY}&ticket=${encodeURIComponent(token)}`;
+  try {
+    const res = await axios.get(url);
+    // Properly interpret res.data based on Steam response shape
+    logger.debug('Steam verify response', { data: res.data });
+    // Map to a normalized user object
+    return { id: res.data.response?.params?.steamid || null, provider: 'steam', raw: res.data };
+  } catch (err) {
+    logger.warn('Steam token verification failed', { err: err.message });
+    throw err;
+  }
+}
+
+async function verifyRecNetToken(token) {
+  if (!RECNET_VERIFY_URL) throw new Error('RECNET_VERIFY_URL not configured');
+  if (!token) throw new Error('no token');
+
+  try {
+    const res = await axios.post(RECNET_VERIFY_URL, { token });
+    logger.debug('RecNet verify response', { data: res.data });
+    // Map to normalized user
+    return { id: res.data?.id || res.data?.userId || null, provider: 'recnet', raw: res.data };
+  } catch (err) {
+    logger.warn('RecNet token verification failed', { err: err.message });
+    throw err;
+  }
+}
+
+module.exports = { verifySteamToken, verifyRecNetToken };