This is sort of a problem for me... and I'm wondering how GNet messages can be trusted at all if they don't tell me what client they have come from?
I can probably hack around this using some kind of session token... maybe, but then how do I know that the session token itself is authentic if the mechanism I use to send it to the client (a GNet message objects) doesn't let my code in the client confirm it's even been read from a valid peer?
Anyone else run into this? Got a patch or maybe I'm missing something? I'll poke around in there and try to fix it myself obviously, just wanted to throw it out there.
I can probably hack around this using some kind of session token... maybe, but then how do I know that the session token itself is authentic if the mechanism I use to send it to the client (a GNet message objects) doesn't let my code in the client confirm it's even been read from a valid peer?
Anyone else run into this? Got a patch or maybe I'm missing something? I'll poke around in there and try to fix it myself obviously, just wanted to throw it out there.