AOS REVIVALJoin Discord
01 / REVIVAL

Username + password

A unique username becomes your callsign. The same credentials work on this site and in the launcher; the database stores an Argon2id hash, never the password itself.

  • Ranked profile
  • Portable between devices
  • Offline recovery code
02 / GUEST

Signed installation

Jump in without registration. The launcher proves possession of a locally generated Ed25519 key and receives a collision-safe Guest-XXXXXXXX callsign.

  • No password
  • No hardware fingerprint
  • Upgrade without losing history
03 / ORIGINAL STEAM

Valve-validated owner

Retail clients keep their native protocol-168 handshake. Packet 105 carries an opaque Steam ticket; the game server waits for Valve’s OK callback before accepting the connection or resolving a profile.

  • No revival password required
  • SteamID64-backed profile
  • Original AppID 224540 path

TRUST IS EARNED AT THE GATE.

Names are presentation. The server attaches gameplay to an identity only after a cryptographic proof succeeds, then exchanges it for a short-lived, single-use join ticket scoped to one server.

Inspect Steam packet 105
  1. 01
    ProvePassword hash, guest signature, or Valve ticket validation.
  2. 02
    ResolveFind one durable player ID; names alone never establish ownership.
  3. 03
    BindIssue a 90-second join token locked to the selected server.
  4. 04
    RecordAccept idempotent statistics only from an authenticated server.
Ace of Spades engineer representing the identity system security checkpointAUTH CHECKPOINT / REV-01

NO ID-BY-NAME. NO SCORE-BY-CLIENT.

Opaque sessions

Browser cookies are HttpOnly; launcher bearer tokens are random, revocable, and stored hashed.

Scoped proofs

Guest challenges expire, game tickets are one-use, and Steam callback attestations reject stale timestamps and ticket replay.

Server authority

The game client cannot choose another player ID or upload leaderboard results directly.

Minimal data

No email is required. IP addresses are HMAC-pseudonymized for rate limits and audit events.