Initial commit - realms platform

backend/src/services/AuthService.h

@@ -2,6 +2,7 @@
 #include <string>
 #include <functional>
 #include <memory>
+#include <optional>
 #include <jwt-cpp/jwt.h>
 #include <bcrypt/BCrypt.hpp>
 
@@ -9,12 +10,38 @@ struct UserInfo {
     int64_t id = 0;
     std::string username;
     bool isAdmin = false;
+    bool isModerator = false;  // Site-wide moderator role
     bool isStreamer = false;
+    bool isRestreamer = false;
+    bool isBot = false;
+    bool isTexter = false;
     bool isPgpOnly = false;
+    bool isDisabled = false;   // SECURITY FIX #26: Track disabled status
     std::string bio;
     std::string avatarUrl;
+    std::string bannerUrl;
+    int bannerPosition = 50;   // Y position percentage (0-100) for object-position
+    int bannerZoom = 100;      // Zoom percentage (100-200)
+    int bannerPositionX = 50;  // X position percentage (0-100) for object-position
+    std::string graffitiUrl;
     std::string pgpOnlyEnabledAt;
     std::string colorCode;
+    double ubercoinBalance = 0.0;  // Übercoin balance (3 decimal places)
+    std::string createdAt;         // Account creation date (for burn rate calculation)
+    int tokenVersion = 1;          // SECURITY FIX #10: Token version for revocation
+};
+
+// Chat service compatibility struct
+struct UserClaims {
+    std::string userId;
+    std::string username;
+    std::string userColor;
+    bool isAdmin;
+    bool isModerator;  // Site-wide moderator role
+    bool isStreamer;
+    bool isRestreamer;
+
+    UserClaims() : isAdmin(false), isModerator(false), isStreamer(false), isRestreamer(false) {}
 };
 
 class AuthService {
@@ -40,7 +67,10 @@ public:
     
     std::string generateToken(const UserInfo& user);
     bool validateToken(const std::string& token, UserInfo& userInfo);
-    
+
+    // Chat service compatibility method
+    std::optional<UserClaims> verifyToken(const std::string& token);
+
     // New method to fetch complete user info including color
     void fetchUserInfo(int64_t userId, std::function<void(bool, const UserInfo&)> callback);
     
@@ -56,6 +86,7 @@ public:
 private:
     AuthService() = default;
     std::string jwtSecret_;
-    
+
     bool validatePassword(const std::string& password, std::string& error);
+    void validateAndLoadJwtSecret();  // SECURITY FIX #5
 };