we will need to verify that the player object id inside the token is valid insid...

[github-actions]

moor itself. And really only something with a WorldState can do that. So it's not

enough to have validated the auth token here, we will need to pepper the scheduler/task

code with checks to make sure that the player objid is valid before letting it go

moor/crates/daemon/src/rpc_server.rs

Line 997 in 47435a1

// TODO: we will need to verify that the player object id inside the token is valid inside

            }
        }

        // TODO: we will need to verify that the player object id inside the token is valid inside
        //   moor itself. And really only something with a WorldState can do that. So it's not
        //   enough to have validated the auth token here, we will need to pepper the scheduler/task
        //   code with checks to make sure that the player objid is valid before letting it go