Offline mode
Added 2022-12-25 03:37:32 +0000 UTCHi there! Before I make another post recapping this year's progess, I'd like to make a quick announcement.
I'm happy to announce that early access mods will no longer require an internet connection to verify users. It took a few months of planning, threat modeling and some iterative design, but the end result should offer a good balance between security and convenience.
How it works
When a user successfully logs in for the first time, a token is generated and stored on the device. This token will then be used in place of the authentication server in the event that the login server is unreachable.
Why might this be important?
Internet and power outages happen a lot more often then we would like them to. Same with server maintenance and downtime. These things are beyond anyone's control, making always-online DRM extremely annoying for users.
Will I still need to link my Oculus account?
Yes. The offline token is user-specific, so the server needs to verify whether you're a patron before generating an offline token.
Let me know if you have any questions.
Cheers!
