hu0603 # Take player id from connection

[muetsii]

As a player I want the app to be secure and no one can impersonate me to disconnect me.

Background

There is a security issue with player ids. They are provided by the backend and remembered and used by the client.

The client could use the browser console to change the id to impersonate other players, for example to disconnect them from a room.

Acceptance criteria

• The playerid is stored in the connection.

• The id stored in connection is used in the backend for any operation needing a playerid.

• The playerids are inserted into the method data in a before hook.

• SHOULD: probably the room name should be managed at the same time.