Cobra Accounts

Cobra Accounts is a back-end solution that makes it easy to set up and manage user accounts. It has everything you need: a server part that talks to the internet, a Postgres database to keep all the user info, and client-side code to communicate with the API easily.

It uses stateless JWT tokens for robust and secure authentication across various platforms.

It is designed to be very flexible and supports a broad range of platforms including Unity, WPF, MAUI, and even web browsers. Additionally, it can be integrated into other back-end services like online stores for user identification and purchase tracking. Basically it can be your central point of authentication and user identification.

It's made to be easy to plug into your projects and works great with Docker, which means setting it up is a breeze. The system is carefully designed to allow for flexible customization and you have full access to the source code. You can easily modify any aspect to suit your project's needs without the hassle of extensive code overhauls and testing.

To use Cobra Accounts, you must also import Cobra Logging and Cobra Database (both are free).

Try It Online

Create an account and log in through the Swagger UI to start exploring some of the features.

Steps

1. Create an Account: Choose to enable or disable 2FA according to your preference.

2. Verify Your Email: Check your email for a verification code and confirm it.

3. Log In: Use your username/email and password.

4. 2FA (Optional): If 2FA is enabled, you'll receive a 2FA code by email. Use the `login-2fa` endpoint for logging in with this code.

5. Access Account Endpoints: Explore account features available to you.

Note: Admin endpoints are restricted to administrators. While you can't interact with these in real-time, we encourage you to review the full feature list for a comprehensive understanding of what Cobra Accounts offers.

The client-side code includes C# methods corresponding to each of the listed endpoints, enabling you to easily invoke these endpoints by simply calling a method.

Server Install Guide

Usage Guide

2FA Guide

Key Features:

- Email Verification: Enhances security by mandating that new users confirm their email addresses. Immediately after signing up, an email is dispatched to the user, featuring a verification link embedded with a distinct code. Clicking on this link verifies the legitimacy of their email.

- Rate Limiting: Incorporates rate limiting as a proactive measure to shield against DDoS (Distributed Denial of Service) attacks, maintaining server reliability and uptime. This mechanism tracks the volume of requests made by each IP address over a defined time period, effectively mitigating excessive traffic that could overload the server.

- JWT Authentication: Leverages JSON Web Tokens (JWT) for secure user authentication, embedding essential user information—like usernames and emails—directly within the token. This approach not only enhances security but also simplifies the validation process, ensuring that user credentials can be securely verified. For example, when a player logs into your game server (supporting integration with Mirror, Photon, or similar platforms), their JWT can be authenticated to fetch their username or email. This enables you to for example assign their in-game display name, without the need for them to provide their username or password directly—only the token is needed.

- Token Auto-refresh: Offers an optional feature for the automatic renewal of authentication tokens on the client side, enhancing user convenience. Each token has a predefined validity period, expressed in minutes. This auto-refresh process can be automated so that you don't have to explicitly call the refresh endpoint, it will be done in automatically in the background.

- Administrative Endpoints: Equips administrators or other internal services with endpoints to manage user accounts. These enable a range of actions, from obtaining detailed user profiles to implementing user deletions, assigning specific roles, or adding custom data to user accounts.

- Flexible Custom Data Integration: Directly integrate custom C# classes into user accounts with the database through straightforward `Read<T>` and `Write<T>` methods. This approach enables the addition of custom data fields without requiring changes to the database schema, providing seamless extension capabilities.

- User Role Assignment: Enables the assignment of specific roles to users, such as access privileges for purchased games, or admin roles.

- Automated Data Backup: Features a robust automatic database backup system designed to protect against data loss and preserve data integrity.

- Two-Factor Authentication (2FA): Enhances account security by introducing an optional two-factor authentication layer. This feature requires users to enter a secondary code, in addition to their password upon login.

- Enhanced Secure Cookies: Utilizes secure, server-side cookies to manage user sessions following login, facilitating smooth integration of the account service with both websites and web applications.

- Customizable Email Templates: Includes a range of customizable email HTML templates for various user interactions such as registration and password changes.

- Password Recovery: Features a built-in password recovery system that supports customizable HTML content, aiding users in regaining access to their accounts if they forget their password.

- Flexible User Identification: Enables user identification through either email or username, no need to check if the user ID is a username or email, it is handled automatically.

- Entity Framework: Utilizes the widely adopted Entity Framework to facilitate efficient and streamlined data management, enhancing the application's overall data handling capabilities.

- Comprehensive Validation: Ensures rigorous validation of usernames, emails, and passwords on both the server and client side, customizable to fit specific needs.

- Swagger API Documentation: Comes with Swagger OpenAPI documentation, facilitating easy API navigation and exploration, especially during the development/testing phases.

- Docker Integration: Specifically designed for Docker (but not required) to streamline the deployment process, complete with simple instructions.

- HTTPS Configuration: Includes guidelines for setting up encrypted communications, enhancing data transmission security.

- Custom Domain Setup: Provides instructions for implementing your own custom web domain.

- Highly Customizable Codebase: Features a well-organized and easily adaptable code structure to meet various development needs.

- Framework Agnostic C# Implementation: Designed with independence from Unity, all core components are developed in C# and are free of Unity-specific dependencies. This ensures compatibility with any .NET Standard 2.1 or higher environment, allowing for broad application beyond Unity projects.

- Multiplatform Support: It is compatible across all Unity platforms that support web requests, including PC, Android/iOS, Linux and more.

Documentation

Discord

Other Assets:

Cobra Updater - Update published games directly from Unity.

Cobra Accounts - Create and manage accounts for your users.

Cobra Store - Create an online store for digital products such as DLC.

Cobra Settings - Manage settings in the cloud or locally for your games or apps.

Cobra Database - Easy database acesss.

Cobra Reflection - Accelerated and simplified C# reflection.

Cobra Packets - Multiplayer networking made easy.

Cobra Optimizers - Smart optimization algorithms.

Cobra Observables - Subscribe to variable changes with events.

Cobra Assemblies (free) - Optimize your Unity project's compilation time.