Merge pull request #868 from Grasscutters/plugin-auth

Refactor 'dispatch' server/Update plugin authentication API

build.gradle

@@ -43,7 +43,7 @@ sourceCompatibility = JavaVersion.VERSION_17
 targetCompatibility = JavaVersion.VERSION_17
 
 group = 'xyz.grasscutters'
-version = '1.1.1-dev'
+version = '1.1.2-dev'
 
 
 sourceCompatibility = 17
@@ -87,6 +87,9 @@ dependencies {
     implementation group: 'org.luaj', name: 'luaj-jse', version: '3.0.1'
 
     protobuf files('proto/')
+
+    compileOnly 'org.projectlombok:lombok:1.18.24'
+    annotationProcessor 'org.projectlombok:lombok:1.18.24'
 }
 
 configurations.all {

src/main/java/emu/grasscutter/Configuration.java

 package emu.grasscutter;
 
 import emu.grasscutter.utils.ConfigContainer;
+import emu.grasscutter.utils.ConfigContainer.*;
 
 import java.util.Locale;
 
@@ -34,11 +35,13 @@ public final class Configuration extends ConfigContainer {
     public static final Database DATABASE = config.databaseInfo;
     public static final Account ACCOUNT = config.account;
     
-    public static final Dispatch DISPATCH_INFO = config.server.dispatch;
+    public static final HTTP HTTP_INFO = config.server.http;
     public static final Game GAME_INFO = config.server.game;
+    public static final Dispatch DISPATCH_INFO = config.server.dispatch;
     
-    public static final Encryption DISPATCH_ENCRYPTION = config.server.dispatch.encryption;
-    public static final Policies DISPATCH_POLICIES = config.server.dispatch.policies;
+    public static final Encryption HTTP_ENCRYPTION = config.server.http.encryption;
+    public static final Policies HTTP_POLICIES = config.server.http.policies;
+    public static final Files HTTP_STATIC_FILES = config.server.http.files;
     
     public static final GameOptions GAME_OPTIONS = config.server.game.gameOptions;
     public static final GameOptions.InventoryLimits INVENTORY_LIMITS = config.server.game.gameOptions.inventoryLimits;

src/main/java/emu/grasscutter/Grasscutter.java

@@ -3,11 +3,17 @@ package emu.grasscutter;
 import java.io.*;
 import java.util.Calendar;
 
+import emu.grasscutter.auth.AuthenticationSystem;
+import emu.grasscutter.auth.DefaultAuthentication;
 import emu.grasscutter.command.CommandMap;
 import emu.grasscutter.game.managers.StaminaManager.StaminaManager;
 import emu.grasscutter.plugin.PluginManager;
 import emu.grasscutter.plugin.api.ServerHook;
 import emu.grasscutter.scripts.ScriptLoader;
+import emu.grasscutter.server.http.HttpServer;
+import emu.grasscutter.server.http.dispatch.DispatchHandler;
+import emu.grasscutter.server.http.handlers.*;
+import emu.grasscutter.server.http.dispatch.RegionHandler;
 import emu.grasscutter.utils.ConfigContainer;
 import emu.grasscutter.utils.Utils;
 import org.jline.reader.EndOfFileException;
@@ -26,11 +32,9 @@ import ch.qos.logback.classic.Logger;
 import emu.grasscutter.data.ResourceLoader;
 import emu.grasscutter.database.DatabaseManager;
 import emu.grasscutter.utils.Language;
-import emu.grasscutter.server.dispatch.DispatchServer;
 import emu.grasscutter.server.game.GameServer;
 import emu.grasscutter.tools.Tools;
 import emu.grasscutter.utils.Crypto;
-import emu.grasscutter.BuildConfig;
 
 import javax.annotation.Nullable;
 
@@ -48,9 +52,10 @@ public final class Grasscutter {
 
 	private static int day; // Current day of week.
 
-	private static DispatchServer dispatchServer;
+	private static HttpServer httpServer;
 	private static GameServer gameServer;
 	private static PluginManager pluginManager;
+	private static AuthenticationSystem authenticationSystem;
 
 	public static final Reflections reflector = new Reflections("emu.grasscutter");
 	public static ConfigContainer config;
@@ -104,13 +109,26 @@ public final class Grasscutter {
 		// Initialize database.
 		DatabaseManager.initialize();
 		
+		// Initialize the default authentication system.
+		authenticationSystem = new DefaultAuthentication();
+	
 		// Create server instances.
-		dispatchServer = new DispatchServer();
+		httpServer = new HttpServer();
 		gameServer = new GameServer();
 		// Create a server hook instance with both servers.
-		new ServerHook(gameServer, dispatchServer);
+		new ServerHook(gameServer, httpServer);
+		
 		// Create plugin manager instance.
 		pluginManager = new PluginManager();
+		// Add HTTP routes after loading plugins.
+		httpServer.addRouter(HttpServer.UnhandledRequestRouter.class);
+		httpServer.addRouter(HttpServer.DefaultRequestRouter.class);
+		httpServer.addRouter(RegionHandler.class);
+		httpServer.addRouter(LogHandler.class);
+		httpServer.addRouter(GenericHandler.class);
+		httpServer.addRouter(AnnouncementsHandler.class);
+		httpServer.addRouter(DispatchHandler.class);
+		httpServer.addRouter(GachaHandler.class);
 		
 		// TODO: find a better place?
 		StaminaManager.initialize();
@@ -118,10 +136,10 @@ public final class Grasscutter {
 		// Start servers.
 		var runMode = SERVER.runMode;
 		if (runMode == ServerRunMode.HYBRID) {
-			dispatchServer.start();
+			httpServer.start();
 			gameServer.start();
 		} else if (runMode == ServerRunMode.DISPATCH_ONLY) {
-			dispatchServer.start();
+			httpServer.start();
 		} else if (runMode == ServerRunMode.GAME_ONLY) {
 			gameServer.start();
 		} else {
@@ -149,6 +167,19 @@ public final class Grasscutter {
 		pluginManager.disablePlugins();
 	}
 
+	/*
+	 * Methods for the language system component.
+	 */
+	
+	public static void loadLanguage() {
+		var locale = config.language.language;
+		language = Language.getLanguage(Utils.getLanguageCode(locale));
+	}
+	
+	/*
+	 * Methods for the configuration system component.
+	 */
+
 	/**
 	 * Attempts to load the configuration from a file.
 	 */
@@ -164,18 +195,12 @@ public final class Grasscutter {
 		// If the file already exists, we attempt to load it.
 		try (FileReader file = new FileReader(configFile)) {
 			config = gson.fromJson(file, ConfigContainer.class);
-		} 
-		catch (Exception exception) {
+		} catch (Exception exception) {
 			getLogger().error("There was an error while trying to load the configuration from config.json. Please make sure that there are no syntax errors. If you want to start with a default configuration, delete your existing config.json.");
 			System.exit(1);
 		} 
 	}
 
-	public static void loadLanguage() {
-		var locale = config.language.language;
-        language = Language.getLanguage(Utils.getLanguageCode(locale));
-	}
-
 	/**
 	 * Saves the provided server configuration.
 	 * @param config The configuration to save, or null for a new one.
@@ -192,44 +217,9 @@ public final class Grasscutter {
 		}
 	}
 
-	public static void startConsole() {
-		// Console should not start in dispatch only mode.
-		if (SERVER.runMode == ServerRunMode.DISPATCH_ONLY) {
-			getLogger().info(translate("messages.dispatch.no_commands_error"));
-			return;
-		}
-
-		getLogger().info(translate("messages.status.done"));
-		getLogger().info(translate("messages.status.version", BuildConfig.VERSION, BuildConfig.GIT_HASH));
-		String input = null;
-		boolean isLastInterrupted = false;
-		while (true) {
-			try {
-				input = consoleLineReader.readLine("> ");
-			} catch (UserInterruptException e) {
-				if (!isLastInterrupted) {
-					isLastInterrupted = true;
-					Grasscutter.getLogger().info("Press Ctrl-C again to shutdown.");
-					continue;
-				} else {
-					Runtime.getRuntime().exit(0);
-				}
-			} catch (EndOfFileException e) {
-				Grasscutter.getLogger().info("EOF detected.");
-				continue;
-			} catch (IOError e) {
-				Grasscutter.getLogger().error("An IO error occurred.", e);
-				continue;
-			}
-
-			isLastInterrupted = false;
-			try {
-				CommandMap.getInstance().invoke(null, null, input);
-			} catch (Exception e) {
-				Grasscutter.getLogger().error(translate("messages.game.command_error"), e);
-			}
-		}
-	}
+	/*
+	 * Getters for the various server components.
+	 */
 	
 	public static ConfigContainer getConfig() {
 		return config;
@@ -275,8 +265,8 @@ public final class Grasscutter {
 		return gson;
 	}
 
-	public static DispatchServer getDispatchServer() {
-		return dispatchServer;
+	public static HttpServer getHttpServer() {
+		return httpServer;
 	}
 
 	public static GameServer getGameServer() {
@@ -287,15 +277,73 @@ public final class Grasscutter {
 		return pluginManager;
 	}
 	
+	public static AuthenticationSystem getAuthenticationSystem() {
+		return authenticationSystem;
+	}
+
+	public static int getCurrentDayOfWeek() {
+		return day;
+	}
+	
+	/*
+	 * Utility methods.
+	 */
+	
 	public static void updateDayOfWeek() {
 		Calendar calendar = Calendar.getInstance();
 		day = calendar.get(Calendar.DAY_OF_WEEK); 
 	}
 
-	public static int getCurrentDayOfWeek() {
-		return day;
+	public static void startConsole() {
+		// Console should not start in dispatch only mode.
+		if (SERVER.runMode == ServerRunMode.DISPATCH_ONLY) {
+			getLogger().info(translate("messages.dispatch.no_commands_error"));
+			return;
 		}
 
+		getLogger().info(translate("messages.status.done"));
+		String input = null;
+		boolean isLastInterrupted = false;
+		while (true) {
+			try {
+				input = consoleLineReader.readLine("> ");
+			} catch (UserInterruptException e) {
+				if (!isLastInterrupted) {
+					isLastInterrupted = true;
+					Grasscutter.getLogger().info("Press Ctrl-C again to shutdown.");
+					continue;
+				} else {
+					Runtime.getRuntime().exit(0);
+				}
+			} catch (EndOfFileException e) {
+				Grasscutter.getLogger().info("EOF detected.");
+				continue;
+			} catch (IOError e) {
+				Grasscutter.getLogger().error("An IO error occurred.", e);
+				continue;
+			}
+
+			isLastInterrupted = false;
+			try {
+				CommandMap.getInstance().invoke(null, null, input);
+			} catch (Exception e) {
+				Grasscutter.getLogger().error(translate("messages.game.command_error"), e);
+			}
+		}
+	}
+
+	/**
+	 * Sets the authentication system for the server.
+	 * @param authenticationSystem The authentication system to use.
+	 */
+	public static void setAuthenticationSystem(AuthenticationSystem authenticationSystem) {
+		Grasscutter.authenticationSystem = authenticationSystem;
+	}
+
+	/*
+	 * Enums for the configuration.
+	 */
+	
 	public enum ServerRunMode {
 		HYBRID, DISPATCH_ONLY, GAME_ONLY
 	}

src/main/java/emu/grasscutter/auth/AuthenticationSystem.java

+package emu.grasscutter.auth;
+
+import emu.grasscutter.server.http.objects.*;
+import express.http.Request;
+import express.http.Response;
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Getter;
+
+import javax.annotation.Nullable;
+
+/**
+ * Defines an authenticator for the server.
+ * Can be changed by plugins.
+ */
+public interface AuthenticationSystem {
+    
+    /**
+     * Called when a user requests to make an account.
+     * @param username The provided username.
+     * @param password The provided password. (SHA-256'ed)
+     */
+    void createAccount(String username, String password);
+
+    /**
+     * Called when a user requests to reset their password.
+     * @param username The username of the account to reset.
+     */
+    void resetPassword(String username);
+
+    /**
+     * Called by plugins to internally verify a user's identity.
+     * @param details A unique, one-time token to verify the user.
+     * @return True if the user is verified, False otherwise.
+     */
+    boolean verifyUser(String details);
+
+    /**
+     * This is the authenticator used for password authentication.
+     * @return An authenticator.
+     */
+    Authenticator<LoginResultJson> getPasswordAuthenticator();
+
+    /**
+     * This is the authenticator used for token authentication.
+     * @return An authenticator.
+     */
+    Authenticator<LoginResultJson> getTokenAuthenticator();
+
+    /**
+     * This is the authenticator used for session authentication.
+     * @return An authenticator.
+     */
+    Authenticator<ComboTokenResJson> getSessionKeyAuthenticator();
+
+    /**
+     * This is the authenticator used for handling external authentication requests.
+     * @return An authenticator.
+     */
+    ExternalAuthenticator getExternalAuthenticator();
+
+    /**
+     * A data container that holds relevant data for authenticating a client.
+     */
+    @Builder @AllArgsConstructor @Getter
+    class AuthenticationRequest {
+        private final Request request;
+        @Nullable private final Response response;
+        
+        @Nullable private final LoginAccountRequestJson passwordRequest;
+        @Nullable private final LoginTokenRequestJson tokenRequest;
+        @Nullable private final ComboTokenReqJson sessionKeyRequest;
+        @Nullable private final ComboTokenReqJson.LoginTokenData sessionKeyData;
+    }
+
+    /**
+     * Generates an authentication request from a {@link LoginAccountRequestJson} object.
+     * @param request The Express request.
+     * @param jsonData The JSON data.
+     * @return An authentication request.
+     */
+    static AuthenticationRequest fromPasswordRequest(Request request, LoginAccountRequestJson jsonData) {
+        return AuthenticationRequest.builder()
+                .request(request)
+                .passwordRequest(jsonData)
+                .build();
+    }
+
+    /**
+     * Generates an authentication request from a {@link LoginTokenRequestJson} object.
+     * @param request The Express request.
+     * @param jsonData The JSON data.
+     * @return An authentication request.
+     */
+    static AuthenticationRequest fromTokenRequest(Request request, LoginTokenRequestJson jsonData) {
+        return AuthenticationRequest.builder()
+                .request(request)
+                .tokenRequest(jsonData)
+                .build();
+    }
+
+    /**
+     * Generates an authentication request from a {@link ComboTokenReqJson} object.
+     * @param request The Express request.
+     * @param jsonData The JSON data.
+     * @return An authentication request.
+     */
+    static AuthenticationRequest fromComboTokenRequest(Request request, ComboTokenReqJson jsonData, 
+                                                       ComboTokenReqJson.LoginTokenData tokenData) {
+        return AuthenticationRequest.builder()
+                .request(request)
+                .sessionKeyRequest(jsonData)
+                .sessionKeyData(tokenData)
+                .build();
+    }
+
+    /**
+     * Generates an authentication request from a {@link Response} object.
+     * @param request The Express request.
+     * @param response the Express response.
+     * @return An authentication request.
+     */
+    static AuthenticationRequest fromExternalRequest(Request request, Response response) {
+        return AuthenticationRequest.builder().request(request)
+                .response(response).build();
+    }
+}

src/main/java/emu/grasscutter/auth/Authenticator.java

+package emu.grasscutter.auth;
+
+import emu.grasscutter.server.http.objects.*;
+
+/**
+ * Handles username/password authentication from the client.
+ * @param <T> The response object type. Should be {@link LoginResultJson} or {@link ComboTokenResJson}
+ */
+public interface Authenticator<T> {
+    
+    /**
+     * Attempt to authenticate the client with the provided credentials.
+     * @param request The authentication request wrapped in a {@link AuthenticationSystem.AuthenticationRequest} object.
+     * @return The result of the login in an object.
+     */
+    T authenticate(AuthenticationSystem.AuthenticationRequest request);
+}
\ No newline at end of file

src/main/java/emu/grasscutter/auth/DefaultAuthentication.java

+package emu.grasscutter.auth;
+
+import emu.grasscutter.Grasscutter;
+import emu.grasscutter.auth.DefaultAuthenticators.*;
+import emu.grasscutter.server.http.objects.ComboTokenResJson;
+import emu.grasscutter.server.http.objects.LoginResultJson;
+
+import static emu.grasscutter.utils.Language.translate;
+
+/**
+ * The default Grasscutter authentication implementation.
+ * Allows all users to access any account.
+ */
+public final class DefaultAuthentication implements AuthenticationSystem {
+    private final Authenticator<LoginResultJson> passwordAuthenticator = new PasswordAuthenticator();
+    private final Authenticator<LoginResultJson> tokenAuthenticator = new TokenAuthenticator();
+    private final Authenticator<ComboTokenResJson> sessionKeyAuthenticator = new SessionKeyAuthenticator();
+    private final ExternalAuthenticator externalAuthenticator = new ExternalAuthentication();
+    
+    @Override
+    public void createAccount(String username, String password) {
+        // Unhandled. The default authenticator doesn't store passwords.
+    }
+
+    @Override
+    public void resetPassword(String username) {
+        // Unhandled. The default authenticator doesn't store passwords.
+    }
+    
+    @Override
+    public boolean verifyUser(String details) {
+        Grasscutter.getLogger().info(translate("dispatch.authentication.default_unable_to_verify"));
+        return false;
+    }
+
+    @Override
+    public Authenticator<LoginResultJson> getPasswordAuthenticator() {
+        return this.passwordAuthenticator;
+    }
+
+    @Override
+    public Authenticator<LoginResultJson> getTokenAuthenticator() {
+        return this.tokenAuthenticator;
+    }
+
+    @Override
+    public Authenticator<ComboTokenResJson> getSessionKeyAuthenticator() {
+        return this.sessionKeyAuthenticator;
+    }
+
+    @Override
+    public ExternalAuthenticator getExternalAuthenticator() {
+        return this.externalAuthenticator;
+    }
+}

src/main/java/emu/grasscutter/auth/DefaultAuthenticators.java

+package emu.grasscutter.auth;
+
+import emu.grasscutter.Grasscutter;
+import emu.grasscutter.auth.AuthenticationSystem.AuthenticationRequest;
+import emu.grasscutter.database.DatabaseHelper;
+import emu.grasscutter.game.Account;
+import emu.grasscutter.server.http.objects.*;
+
+import static emu.grasscutter.Configuration.*;
+import static emu.grasscutter.utils.Language.translate;
+
+/**
+ * A class containing default authenticators.
+ */
+public final class DefaultAuthenticators {
+    
+    /**
+     * Handles the authentication request from the username and password form.
+     */
+    public static class PasswordAuthenticator implements Authenticator<LoginResultJson> {
+        @Override public LoginResultJson authenticate(AuthenticationRequest request) {
+            var response = new LoginResultJson();
+            
+            var requestData = request.getPasswordRequest();
+            assert requestData != null; // This should never be null.
+            
+            boolean successfulLogin = false; 
+            String address = request.getRequest().ip();
+            String responseMessage = translate("messages.dispatch.account.username_error");
+            
+            // Get account from database.
+            Account account = DatabaseHelper.getAccountByName(requestData.account);
+            
+            // Check if account exists.
+            if(account == null && ACCOUNT.autoCreate) {
+                // This account has been created AUTOMATICALLY. There will be no permissions added.
+                account = DatabaseHelper.createAccountWithId(requestData.account, 0);
+                
+                // Check if the account was created successfully.
+                if(account == null) {
+                    responseMessage = translate("messages.dispatch.account.username_create_error");
+                    Grasscutter.getLogger().info(translate("messages.dispatch.account.account_login_create_error", address));
+                } else {
+                    // Add default permissions.
+                    for (var permission : ACCOUNT.defaultPermissions)
+                        account.addPermission(permission);
+
+                    // Continue with login.
+                    successfulLogin = true;
+
+                    // Log the creation.
+                    Grasscutter.getLogger().info(translate("messages.dispatch.account.account_login_create_success", address, response.data.account.uid));
+                }
+            } else if(account != null)
+                successfulLogin = true;
+            
+            // Set response data.
+            if(successfulLogin) {
+                response.message = "OK";
+                response.data.account.uid = account.getId();
+                response.data.account.token = account.generateSessionKey();
+                response.data.account.email = account.getEmail();
+                
+                // Log the login.
+                Grasscutter.getLogger().info(translate("messages.dispatch.account.login_success", address, account.getId()));
+            } else {
+                response.retcode = -201;
+                response.message = responseMessage;
+                
+                // Log the failure.
+                Grasscutter.getLogger().info(translate("messages.dispatch.account.account_login_exist_error", address));
+            }
+            
+            return response;
+        }
+    }
+
+    /**
+     * Handles the authentication request from the game when using a registry token.
+     */
+    public static class TokenAuthenticator implements Authenticator<LoginResultJson> {
+        @Override public LoginResultJson authenticate(AuthenticationRequest request) {
+            var response = new LoginResultJson();
+            
+            var requestData = request.getTokenRequest();
+            assert requestData != null;
+            
+            boolean successfulLogin;
+            String address = request.getRequest().ip();
+            
+            // Log the attempt.
+            Grasscutter.getLogger().info(translate("messages.dispatch.account.login_token_attempt", address));
+            
+            // Get account from database.
+            Account account = DatabaseHelper.getAccountById(requestData.uid);
+            
+            // Check if account exists/token is valid.
+            successfulLogin = account != null && account.getSessionKey().equals(requestData.token);
+            
+            // Set response data.
+            if(successfulLogin) {
+                response.message = "OK";
+                response.data.account.uid = account.getId();
+                response.data.account.token = account.getSessionKey();
+                response.data.account.email = account.getEmail();
+                
+                // Log the login.
+                Grasscutter.getLogger().info(translate("messages.dispatch.account.login_token_success", address, requestData.uid));
+            } else {
+                response.retcode = -201;
+                response.message = translate("messages.dispatch.account.account_cache_error");
+                
+                // Log the failure.
+                Grasscutter.getLogger().info(translate("messages.dispatch.account.login_token_error", address));
+            }
+            
+            return response;
+        }
+    }
+
+    /**
+     * Handles the authentication request from the game when using a combo token/session key.
+     */
+    public static class SessionKeyAuthenticator implements Authenticator<ComboTokenResJson> {
+        @Override public ComboTokenResJson authenticate(AuthenticationRequest request) {
+            var response  = new ComboTokenResJson();
+            
+            var requestData = request.getSessionKeyRequest();
+            var loginData = request.getSessionKeyData();
+            assert requestData != null; assert loginData != null;
+            
+            boolean successfulLogin;
+            String address = request.getRequest().ip();
+            
+            // Get account from database.
+            Account account = DatabaseHelper.getAccountById(loginData.uid);
+            
+            // Check if account exists/token is valid.
+            successfulLogin = account != null && account.getSessionKey().equals(loginData.token);
+            
+            // Set response data.
+            if(successfulLogin) {
+                response.message = "OK";
+                response.data.open_id = account.getId();
+                response.data.combo_id = "157795300";
+                response.data.combo_token = account.generateLoginToken();
+                
+                // Log the login.
+                Grasscutter.getLogger().info(translate("messages.dispatch.account.combo_token_success", address));
+            } else {
+                response.retcode = -201;
+                response.message = translate("messages.dispatch.account.session_key_error");
+                
+                // Log the failure.
+                Grasscutter.getLogger().info(translate("messages.dispatch.account.combo_token_error", address));
+            }
+            
+            return response;
+        }
+    }
+
+    /**
+     * Handles authentication requests from external sources.
+     */
+    public static class ExternalAuthentication implements ExternalAuthenticator {
+        @Override public void handleLogin(AuthenticationRequest request) {
+            assert request.getResponse() != null;
+            request.getResponse().send("Authentication is not available with the default authentication method.");
+        }
+
+        @Override public void handleAccountCreation(AuthenticationRequest request) {
+            assert request.getResponse() != null;
+            request.getResponse().send("Authentication is not available with the default authentication method.");
+        }
+
+        @Override public void handlePasswordReset(AuthenticationRequest request) {
+            assert request.getResponse() != null;
+            request.getResponse().send("Authentication is not available with the default authentication method.");
+        }
+    }
+}

src/main/java/emu/grasscutter/auth/ExternalAuthenticator.java

+package emu.grasscutter.auth;
+
+import emu.grasscutter.auth.AuthenticationSystem.AuthenticationRequest;
+
+/**
+ * Handles authentication via external routes.
+ */
+public interface ExternalAuthenticator {
+
+    /**
+     * Called when an external login request is made.
+     * @param request The authentication request.
+     */
+    void handleLogin(AuthenticationRequest request);
+
+    /**
+     * Called when an external account creation request is made.
+     * @param request The authentication request.
+     *                
+     * For developers: Use {@link AuthenticationRequest#getRequest()} to get the request body.
+     *                 Use {@link AuthenticationRequest#getResponse()} to get the response body.
+     */
+    void handleAccountCreation(AuthenticationRequest request);
+
+    /**
+     * Called when an external password reset request is made.
+     * @param request The authentication request.
+     *                
+     * For developers: Use {@link AuthenticationRequest#getRequest()} to get the request body.
+     *                 Use {@link AuthenticationRequest#getResponse()} to get the response body.
+     */
+    void handlePasswordReset(AuthenticationRequest request);
+}

src/main/java/emu/grasscutter/game/gacha/GachaBanner.java

@@ -136,13 +136,13 @@ public class GachaBanner {
 	}
 	
 	public GachaInfo toProto(String sessionKey) {
-		String record = "http" + (DISPATCH_INFO.encryption.useInRouting ? "s" : "") + "://"
-						+ lr(DISPATCH_INFO.accessAddress, DISPATCH_INFO.bindAddress) + ":"
-						+ lr(DISPATCH_INFO.accessPort, DISPATCH_INFO.bindPort)
+		String record = "http" + (HTTP_ENCRYPTION.useInRouting ? "s" : "") + "://"
+						+ lr(HTTP_INFO.accessAddress, HTTP_INFO.bindAddress) + ":"
+						+ lr(HTTP_INFO.accessPort, HTTP_INFO.bindPort)
 						+ "/gacha?s=" + sessionKey + "&gachaType=" + gachaType;
-		String details = "http" + (DISPATCH_INFO.encryption.useInRouting ? "s" : "") + "://"
-						+ lr(DISPATCH_INFO.accessAddress, DISPATCH_INFO.bindAddress) + ":"
-						+ lr(DISPATCH_INFO.accessPort, DISPATCH_INFO.bindPort)
+		String details = "http" + (HTTP_ENCRYPTION.useInRouting ? "s" : "") + "://"
+						+ lr(HTTP_INFO.accessAddress, HTTP_INFO.bindAddress) + ":"
+						+ lr(HTTP_INFO.accessPort, HTTP_INFO.bindPort)
 						+ "/gacha/details?s=" + sessionKey + "&gachaType=" + gachaType;
 
 		// Grasscutter.getLogger().info("record = " + record);

src/main/java/emu/grasscutter/plugin/Plugin.java

@@ -3,6 +3,8 @@ package emu.grasscutter.plugin;
 import emu.grasscutter.Grasscutter;
 import emu.grasscutter.plugin.api.ServerHook;
 import emu.grasscutter.server.game.GameServer;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
 
 import java.io.File;
 import java.io.InputStream;
@@ -19,6 +21,7 @@ public abstract class Plugin {
     private PluginIdentifier identifier;
     private URLClassLoader classLoader;
     private File dataFolder;
+    private Logger logger;
 
     /**
      * This method is reflected into.
@@ -35,6 +38,7 @@ public abstract class Plugin {
         this.identifier = identifier;
         this.classLoader = classLoader;
         this.dataFolder = new File(PLUGINS_FOLDER, identifier.name);
+        this.logger = LoggerFactory.getLogger(identifier.name);
         
         if(!this.dataFolder.exists() && !this.dataFolder.mkdirs()) {
             Grasscutter.getLogger().warn("Failed to create plugin data folder for " + this.identifier.name);
@@ -104,6 +108,14 @@ public abstract class Plugin {
         return this.server;
     }
 
+    /**
+     * Returns the plugin's logger.
+     * @return A SLF4J logger.
+     */
+    public final Logger getLogger() {
+        return this.logger;
+    }
+    
     /* Called when the plugin is first loaded. */
     public void onLoad() { }
     /* Called after (most of) the server enables. */

src/main/java/emu/grasscutter/plugin/api/ServerHook.java

 package emu.grasscutter.plugin.api;
 
+import emu.grasscutter.Grasscutter;
+import emu.grasscutter.auth.AuthenticationSystem;
 import emu.grasscutter.command.Command;
 import emu.grasscutter.command.CommandHandler;
 import emu.grasscutter.game.player.Player;
-import emu.grasscutter.server.dispatch.DispatchServer;
 import emu.grasscutter.server.game.GameServer;
+import emu.grasscutter.server.http.HttpServer;
+import emu.grasscutter.server.http.Router;
 
 import java.util.LinkedList;
 import java.util.List;
@@ -15,7 +18,7 @@ import java.util.List;
 public final class ServerHook {
     private static ServerHook instance;
     private final GameServer gameServer;
-    private final DispatchServer dispatchServer;
+    private final HttpServer httpServer;
 
     /**
      * Gets the server hook instance.
@@ -28,11 +31,11 @@ public final class ServerHook {
     /**
      * Hooks into a server.
      * @param gameServer The game server to hook into.
-     * @param dispatchServer The dispatch server to hook into.
+     * @param httpServer The HTTP server to hook into.
      */
-    public ServerHook(GameServer gameServer, DispatchServer dispatchServer) {
+    public ServerHook(GameServer gameServer, HttpServer httpServer) {
         this.gameServer = gameServer;
-        this.dispatchServer = dispatchServer;
+        this.httpServer = httpServer;
 
         instance = this;
     }
@@ -45,10 +48,10 @@ public final class ServerHook {
     }
 
     /**
-     * @return The dispatch server.
+     * @return The HTTP server.
      */
-    public DispatchServer getDispatchServer() {
-        return this.dispatchServer;
+    public HttpServer getHttpServer() {
+        return this.httpServer;
     }
 
     /**
@@ -70,4 +73,28 @@ public final class ServerHook {
         Command commandData = clazz.getAnnotation(Command.class);
         this.gameServer.getCommandMap().registerCommand(commandData.label(), handler);
     }
+
+    /**
+     * Adds a router using an instance of a class.
+     * @param router A router instance.
+     */
+    public void addRouter(Router router) {
+        this.addRouter(router.getClass());
+    }
+
+    /**
+     * Adds a router using a class.
+     * @param router The class of the router.
+     */
+    public void addRouter(Class<? extends Router> router) {
+        this.httpServer.addRouter(router);
+    }
+
+    /**
+     * Sets the server's authentication system.
+     * @param authSystem An instance of the authentication system.
+     */
+    public void setAuthSystem(AuthenticationSystem authSystem) {
+        Grasscutter.setAuthenticationSystem(authSystem);
+    }
 }
\ No newline at end of file

src/main/java/emu/grasscutter/scripts/serializer/LuaSerializer.java

@@ -70,15 +70,13 @@ public class LuaSerializer implements Serializer {
 		}
 		
 		try {
+			//noinspection ConfusingArgumentToVarargsMethod
 			object = type.getDeclaredConstructor().newInstance(null);
 			
 			LuaValue[] keys = table.keys();
 			for (LuaValue k : keys) {
 				try {
 					Field field = object.getClass().getDeclaredField(k.checkjstring());
-					if (field == null) {
-						continue;
-					}
 
 					field.setAccessible(true);
 					LuaValue keyValue = table.get(k);

src/main/java/emu/grasscutter/server/dispatch/AnnouncementHandler.java

-package emu.grasscutter.server.dispatch;
-
-import emu.grasscutter.Grasscutter;
-import express.http.HttpContextHandler;
-import express.http.Request;
-import express.http.Response;
-
-import java.io.IOException;
-import java.nio.charset.StandardCharsets;
-import java.nio.file.Files;
-import java.nio.file.Path;
-import java.nio.file.Paths;
-import java.util.Objects;
-
-import static emu.grasscutter.Configuration.*;
-
-public final class AnnouncementHandler implements HttpContextHandler {
-    @Override
-    public void handle(Request request, Response response) throws IOException {
-        if (Objects.equals(request.baseUrl(), "/common/hk4e_global/announcement/api/getAnnContent")) {
-            String data = readToString(Paths.get(DATA("GameAnnouncement.json")));
-
-            response.send("{\"retcode\":0,\"message\":\"OK\",\"data\":" + data + "}");
-        } else if (Objects.equals(request.baseUrl(), "/common/hk4e_global/announcement/api/getAnnList")) {
-            String data = readToString(Paths.get(DATA("GameAnnouncementList.json")))
-                .replace("System.currentTimeMillis()", String.valueOf(System.currentTimeMillis()));
-
-            response.send("{\"retcode\":0,\"message\":\"OK\",\"data\": " + data + "}");
-        }
-    }
-
-    private static String readToString(Path path) {
-        String content = "";
-
-        try {
-            content = Files.readString(path, StandardCharsets.UTF_8);
-        } catch (IOException ignored) {
-            Grasscutter.getLogger().warn("Unable to open file " + path.toAbsolutePath());
-        }
-        
-        return content;
-    }
-}
\ No newline at end of file

src/main/java/emu/grasscutter/server/dispatch/ClientLogHandler.java

-package emu.grasscutter.server.dispatch;
-
-import express.http.HttpContextHandler;
-import express.http.Request;
-import express.http.Response;
-
-import java.io.IOException;
-
-/**
- * Used for processing crash dumps and logs generated by the game.
- * Logs are in JSON, and are sent to the server for logging.
- */
-public final class ClientLogHandler implements HttpContextHandler {
-    @Override
-    public void handle(Request request, Response response) throws IOException {
-        // TODO: Figure out how to dump request body and log to file.
-        response.send("{\"code\":0}");
-    }
-}

src/main/java/emu/grasscutter/server/dispatch/DispatchServer.java

-package emu.grasscutter.server.dispatch;
-
-import com.google.gson.Gson;
-import com.google.gson.GsonBuilder;
-import com.google.protobuf.ByteString;
-
-import emu.grasscutter.GameConstants;
-import emu.grasscutter.Grasscutter;
-import emu.grasscutter.Grasscutter.ServerDebugMode;
-import emu.grasscutter.Grasscutter.ServerRunMode;
-import emu.grasscutter.database.DatabaseHelper;
-import emu.grasscutter.game.Account;
-import emu.grasscutter.net.proto.QueryCurrRegionHttpRspOuterClass.QueryCurrRegionHttpRsp;
-import emu.grasscutter.net.proto.QueryRegionListHttpRspOuterClass.QueryRegionListHttpRsp;
-import emu.grasscutter.net.proto.RegionInfoOuterClass.RegionInfo;
-import emu.grasscutter.net.proto.RegionSimpleInfoOuterClass.RegionSimpleInfo;
-import emu.grasscutter.server.dispatch.authentication.AuthenticationHandler;
-import emu.grasscutter.server.dispatch.authentication.DefaultAuthenticationHandler;
-import emu.grasscutter.server.dispatch.http.AnnouncementIndexHandler;
-import emu.grasscutter.server.dispatch.http.GachaDetailsHandler;
-import emu.grasscutter.server.dispatch.http.GachaRecordHandler;
-import emu.grasscutter.server.dispatch.json.*;
-import emu.grasscutter.server.dispatch.json.ComboTokenReqJson.LoginTokenData;
-import emu.grasscutter.server.event.dispatch.QueryAllRegionsEvent;
-import emu.grasscutter.server.event.dispatch.QueryCurrentRegionEvent;
-import emu.grasscutter.tools.Tools;
-import emu.grasscutter.utils.Crypto;
-import emu.grasscutter.utils.FileUtils;
-import emu.grasscutter.utils.Utils;
-import express.Express;
-import io.javalin.http.staticfiles.Location;
-import org.eclipse.jetty.server.Connector;
-import org.eclipse.jetty.server.Server;
-import org.eclipse.jetty.server.ServerConnector;
-import org.eclipse.jetty.util.ssl.SslContextFactory;
-
-import java.io.*;
-import java.net.URLDecoder;
-import java.nio.charset.StandardCharsets;
-import java.util.*;
-
-import static emu.grasscutter.utils.Language.translate;
-import static emu.grasscutter.Configuration.*;
-
-public final class DispatchServer {
-	private final Gson gson;
-	private final String defaultServerName = "os_usa";
-
-	public String regionListBase64;
-	public Map<String, RegionData> regions;
-	private AuthenticationHandler authHandler;
-	private Express httpServer;
-
-	public DispatchServer() {
-		this.regions = new HashMap<>();
-		this.gson = new GsonBuilder().create();
-
-		this.initRegion();
-	}
-
-	public Express getServer() {
-		return httpServer;
-	}
-
-	public void setHttpServer(Express httpServer) {
-		this.httpServer.stop();
-		this.httpServer = httpServer;
-		this.httpServer.listen(DISPATCH_INFO.bindPort);
-	}
-
-	public Gson getGsonFactory() {
-		return gson;
-	}
-
-	public QueryCurrRegionHttpRsp getCurrRegion() {
-		// Needs to be fixed by having the game servers connect to the dispatch server.
-		if (SERVER.runMode == ServerRunMode.HYBRID) {
-			return regions.get(defaultServerName).parsedRegionQuery;
-		}
-
-		Grasscutter.getLogger().warn("[Dispatch] Unsupported run mode for getCurrRegion()");
-		return null;
-	}
-
-	private void initRegion() {
-		try {
-			String dispatchDomain = "http" + (DISPATCH_ENCRYPTION.useInRouting ? "s" : "") + "://"
-				+ lr(DISPATCH_INFO.accessAddress, DISPATCH_INFO.bindAddress) + ":"
-				+ lr(DISPATCH_INFO.accessPort, DISPATCH_INFO.bindPort);
-
-			List<RegionSimpleInfo> servers = new ArrayList<>();
-			List<String> usedNames = new ArrayList<>(); // List to check for potential naming conflicts.
-			if (SERVER.runMode == ServerRunMode.HYBRID) { // Automatically add the game server if in hybrid mode.
-				RegionSimpleInfo server = RegionSimpleInfo.newBuilder()
-						.setName("os_usa")
-						.setTitle(DISPATCH_INFO.defaultName)
-						.setType("DEV_PUBLIC")
-						.setDispatchUrl(dispatchDomain + "/query_cur_region/" + defaultServerName)
-						.build();
-				usedNames.add(defaultServerName);
-				servers.add(server);
-
-				// todo: we might want to push custom config to client, see regionList below for clues.
-				RegionInfo serverRegion = RegionInfo.newBuilder()
-						.setGateserverIp(lr(GAME_INFO.accessAddress, GAME_INFO.bindAddress))
-						.setGateserverPort(lr(GAME_INFO.accessPort, GAME_INFO.bindPort))
-						.setSecretKey(ByteString.copyFrom(Crypto.DISPATCH_SEED))
-						.build();
-
-				QueryCurrRegionHttpRsp parsedRegionQuery = QueryCurrRegionHttpRsp.newBuilder().setRegionInfo(serverRegion).build();
-				regions.put(
-					defaultServerName,
-					new RegionData(
-						parsedRegionQuery,
-						Base64.getEncoder().encodeToString(parsedRegionQuery.toByteString().toByteArray())
-					)
-				);
-
-			} else if (DISPATCH_INFO.regions.length == 0) {
-				Grasscutter.getLogger().error("[Dispatch] There are no game servers available. Exiting due to unplayable state.");
-				System.exit(1);
-			}
-
-			for (var regionInfo : DISPATCH_INFO.regions) {
-				if (usedNames.contains(regionInfo.Name)) {
-					Grasscutter.getLogger().error("Region name already in use.");
-					continue;
-				}
-
-				// todo: we might want to push custom config to client, see regionList below for clues.
-				RegionSimpleInfo server = RegionSimpleInfo.newBuilder()
-						.setName(regionInfo.Name)
-						.setTitle(regionInfo.Title)
-						.setType("DEV_PUBLIC")
-						.setDispatchUrl(dispatchDomain + "/query_cur_region/" + regionInfo.Name)
-						.build();
-				usedNames.add(regionInfo.Name);
-				servers.add(server);
-
-				RegionInfo serverRegion = RegionInfo.newBuilder()
-						.setGateserverIp(regionInfo.Ip)
-						.setGateserverPort(regionInfo.Port)
-						.setSecretKey(ByteString.copyFrom(Crypto.DISPATCH_SEED))
-						.build();
-
-				QueryCurrRegionHttpRsp parsedRegionQuery = QueryCurrRegionHttpRsp.newBuilder().setRegionInfo(serverRegion).build();
-				regions.put(
-					regionInfo.Name,
-					new RegionData(
-						parsedRegionQuery,
-						Base64.getEncoder().encodeToString(parsedRegionQuery.toByteString().toByteArray())
-					)
-				);
-			}
-
-			byte[] customConfig = "{\"sdkenv\":\"2\",\"checkdevice\":\"false\",\"loadPatch\":\"false\",\"showexception\":\"false\",\"regionConfig\":\"pm|fk|add\",\"downloadMode\":\"0\"}".getBytes();
-			Crypto.xor(customConfig, Crypto.DISPATCH_KEY);
-
-			QueryRegionListHttpRsp regionList = QueryRegionListHttpRsp.newBuilder()
-					.addAllRegionList(servers)
-					.setClientSecretKey(ByteString.copyFrom(Crypto.DISPATCH_SEED))
-					.setClientCustomConfigEncrypted(ByteString.copyFrom(customConfig))
-					.setEnableLoginPc(true)
-					.build();
-
-			this.regionListBase64 = Base64.getEncoder().encodeToString(regionList.toByteString().toByteArray());
-		} catch (Exception exception) {
-			Grasscutter.getLogger().error("[Dispatch] Error while initializing region info!", exception);
-		}
-	}
-
-	public void start() throws Exception {
-		httpServer = new Express(config -> {
-			config.server(() -> {
-				Server server = new Server();
-				ServerConnector serverConnector;
-
-				if(DISPATCH_ENCRYPTION.useEncryption) {
-					SslContextFactory.Server sslContextFactory = new SslContextFactory.Server();
-					File keystoreFile = new File(DISPATCH_ENCRYPTION.keystore);
-
-					if(keystoreFile.exists()) {
-						try {
-							sslContextFactory.setKeyStorePath(keystoreFile.getPath());
-							sslContextFactory.setKeyStorePassword(DISPATCH_ENCRYPTION.keystorePassword);
-						} catch (Exception e) {
-							e.printStackTrace();
-							Grasscutter.getLogger().warn(translate("messages.dispatch.keystore.password_error"));
-
-							try {
-								sslContextFactory.setKeyStorePath(keystoreFile.getPath());
-								sslContextFactory.setKeyStorePassword("123456");
-								Grasscutter.getLogger().warn(translate("messages.dispatch.keystore.default_password"));
-							} catch (Exception e2) {
-								Grasscutter.getLogger().warn(translate("messages.dispatch.keystore.general_error"));
-								e2.printStackTrace();
-							}
-						}
-
-						serverConnector = new ServerConnector(server, sslContextFactory);
-					} else {
-						Grasscutter.getLogger().warn(translate("messages.dispatch.keystore.no_keystore_error"));
-						DISPATCH_ENCRYPTION.useEncryption = false;
-
-						serverConnector = new ServerConnector(server);
-					}
-				} else {
-					serverConnector = new ServerConnector(server);
-				}
-
-				serverConnector.setPort(DISPATCH_INFO.bindPort);
-				server.setConnectors(new Connector[]{serverConnector});
-				return server;
-			});
-
-			config.enforceSsl = DISPATCH_ENCRYPTION.useEncryption;
-			if(SERVER.debugLevel == ServerDebugMode.ALL) {
-				config.enableDevLogging();
-			}
-			
-			if (DISPATCH_POLICIES.cors.enabled) {
-				var corsPolicy = DISPATCH_POLICIES.cors;
-				if (corsPolicy.allowedOrigins.length > 0) 
-					config.enableCorsForOrigin(corsPolicy.allowedOrigins);
-				else config.enableCorsForAllOrigins();
-			}
-		});
-		httpServer.get("/", (req, res) -> res.send("<!doctype html><html><head><meta charset=\"utf8\"></head><body>" + translate("messages.status.welcome") + "</body></html>"));
-
-		httpServer.raw().error(404, ctx -> {
-			if(SERVER.debugLevel == ServerDebugMode.MISSING) {
-				Grasscutter.getLogger().info(translate("messages.dispatch.unhandled_request_error", ctx.method(), ctx.url()));
-			}
-			ctx.contentType("text/html");
-			ctx.result("<!doctype html><html><head><meta charset=\"utf8\"></head><body><img src=\"https://http.cat/404\" /></body></html>"); // I'm like 70% sure this won't break anything.
-		});
-
-		// Authentication Handler
-		// These routes are so that authentication routes are always the same no matter what auth system is used.
-		httpServer.get("/authentication/type", (req, res) -> {
-			res.send(this.getAuthHandler().getClass().getName());
-		});
-
-		httpServer.post("/authentication/login", (req, res) -> this.getAuthHandler().handleLogin(req, res));
-		httpServer.post("/authentication/register", (req, res) -> this.getAuthHandler().handleRegister(req, res));
-		httpServer.post("/authentication/change_password", (req, res) -> this.getAuthHandler().handleChangePassword(req, res));
-
-		// Server Status
-		httpServer.get("/status/server", (req, res) -> {
-
-			int playerCount = Grasscutter.getGameServer().getPlayers().size();
-			String version = GameConstants.VERSION;
-
-			res.send("{\"retcode\":0,\"status\":{\"playerCount\":" + playerCount + ",\"version\":\"" + version + "\"}}");
-		});
-
-		// Dispatch
-		httpServer.get("/query_region_list", (req, res) -> {
-			// Log
-			Grasscutter.getLogger().info(String.format("[Dispatch] Client %s request: query_region_list", req.ip()));
-
-			// Invoke event.
-			QueryAllRegionsEvent event = new QueryAllRegionsEvent(regionListBase64); event.call();
-			// Respond with event result.
-			res.send(event.getRegionList());
-		});
-
-		httpServer.get("/query_cur_region/:id", (req, res) -> {
-			String regionName = req.params("id");
-			// Log
-			Grasscutter.getLogger().info(
-					String.format("Client %s request: query_cur_region/%s", req.ip(), regionName));
-			// Create a response form the request query parameters
-			String response = "CAESGE5vdCBGb3VuZCB2ZXJzaW9uIGNvbmZpZw==";
-			if (req.query().values().size() > 0) {
-				response = regions.get(regionName).Base64;
-			}
-
-			// Invoke event.
-			QueryCurrentRegionEvent event = new QueryCurrentRegionEvent(response); event.call();
-			// Respond with event result.
-			res.send(event.getRegionInfo());
-		});
-
-		// Login
-
-		httpServer.post("/hk4e_global/mdk/shield/api/login", (req, res) -> {
-			// Get post data
-			LoginAccountRequestJson requestData = null;
-			try {
-				String body = req.ctx().body();
-				requestData = getGsonFactory().fromJson(body, LoginAccountRequestJson.class);
-			} catch (Exception ignored) { }
-
-			// Create response json
-			if (requestData == null) {
-				return;
-			}
-			Grasscutter.getLogger().info(translate("messages.dispatch.account.login_attempt", req.ip()));
-
-			res.send(this.getAuthHandler().handleGameLogin(req, requestData));
-		});
-
-		// Login via token
-		httpServer.post("/hk4e_global/mdk/shield/api/verify", (req, res) -> {
-			// Get post data
-			LoginTokenRequestJson requestData = null;
-			try {
-				String body = req.ctx().body();
-				requestData = getGsonFactory().fromJson(body, LoginTokenRequestJson.class);
-			} catch (Exception ignored) {
-			}
-
-			// Create response json
-			if (requestData == null) {
-				return;
-			}
-			LoginResultJson responseData = new LoginResultJson();
-			Grasscutter.getLogger().info(translate("messages.dispatch.account.login_token_attempt", req.ip()));
-
-			// Login
-			Account account = DatabaseHelper.getAccountById(requestData.uid);
-
-			// Test
-			if (account == null || !account.getSessionKey().equals(requestData.token)) {
-				responseData.retcode = -111;
-				responseData.message = translate("messages.dispatch.account.account_cache_error");
-
-				Grasscutter.getLogger().info(translate("messages.dispatch.account.login_token_error", req.ip()));
-			} else {
-				responseData.message = "OK";
-				responseData.data.account.uid = requestData.uid;
-				responseData.data.account.token = requestData.token;
-				responseData.data.account.email = account.getEmail();
-
-				Grasscutter.getLogger().info(translate("messages.dispatch.account.login_token_success", req.ip(), requestData.uid));
-			}
-
-			res.send(responseData);
-		});
-
-		// Exchange for combo token
-		httpServer.post("/hk4e_global/combo/granter/login/v2/login", (req, res) -> {
-			// Get post data
-			ComboTokenReqJson requestData = null;
-			try {
-				String body = req.ctx().body();
-				requestData = getGsonFactory().fromJson(body, ComboTokenReqJson.class);
-			} catch (Exception ignored) {
-			}
-
-			// Create response json
-			if (requestData == null || requestData.data == null) {
-				return;
-			}
-			LoginTokenData loginData = getGsonFactory().fromJson(requestData.data, LoginTokenData.class); // Get login
-			// data
-			ComboTokenResJson responseData = new ComboTokenResJson();
-
-			// Login
-			Account account = DatabaseHelper.getAccountById(loginData.uid);
-
-			// Test
-			if (account == null || !account.getSessionKey().equals(loginData.token)) {
-				responseData.retcode = -201;
-				responseData.message = translate("messages.dispatch.account.session_key_error");
-
-				Grasscutter.getLogger().info(translate("messages.dispatch.account.combo_token_error", req.ip()));
-			} else {
-				responseData.message = "OK";
-				responseData.data.open_id = loginData.uid;
-				responseData.data.combo_id = "157795300";
-				responseData.data.combo_token = account.generateLoginToken();
-
-				Grasscutter.getLogger().info(translate("messages.dispatch.account.combo_token_success", req.ip()));
-			}
-
-			res.send(responseData);
-		});
-
-		// TODO: There are some missing route request types here (You can tell if they are missing if they are .all and not anything else)
-		//  When http requests for theses routes are found please remove it from the list in DispatchHttpJsonHandler and update the route request types here
-
-		// Agreement and Protocol
-		// hk4e-sdk-os.hoyoverse.com
-		httpServer.get("/hk4e_global/mdk/agreement/api/getAgreementInfos", new DispatchHttpJsonHandler("{\"retcode\":0,\"message\":\"OK\",\"data\":{\"marketing_agreements\":[]}}"));
-		// hk4e-sdk-os.hoyoverse.com
-		// this could be either GET or POST based on the observation of different clients
-		httpServer.all("/hk4e_global/combo/granter/api/compareProtocolVersion", new DispatchHttpJsonHandler("{\"retcode\":0,\"message\":\"OK\",\"data\":{\"modified\":true,\"protocol\":{\"id\":0,\"app_id\":4,\"language\":\"en\",\"user_proto\":\"\",\"priv_proto\":\"\",\"major\":7,\"minimum\":0,\"create_time\":\"0\",\"teenager_proto\":\"\",\"third_proto\":\"\"}}}"));
-
-		// Game data
-		// hk4e-api-os.hoyoverse.com
-		httpServer.all("/common/hk4e_global/announcement/api/getAlertPic", new DispatchHttpJsonHandler("{\"retcode\":0,\"message\":\"OK\",\"data\":{\"total\":0,\"list\":[]}}"));
-		// hk4e-api-os.hoyoverse.com
-		httpServer.all("/common/hk4e_global/announcement/api/getAlertAnn", new DispatchHttpJsonHandler("{\"retcode\":0,\"message\":\"OK\",\"data\":{\"alert\":false,\"alert_id\":0,\"remind\":true}}"));
-		// hk4e-api-os.hoyoverse.com
-		httpServer.all("/common/hk4e_global/announcement/api/getAnnList", new AnnouncementHandler());
-		// hk4e-api-os-static.hoyoverse.com
-		httpServer.all("/common/hk4e_global/announcement/api/getAnnContent", new AnnouncementHandler());
-		// hk4e-sdk-os.hoyoverse.com
-		httpServer.all("/hk4e_global/mdk/shopwindow/shopwindow/listPriceTier", new DispatchHttpJsonHandler("{\"retcode\":0,\"message\":\"OK\",\"data\":{\"suggest_currency\":\"USD\",\"tiers\":[]}}"));
-
-		// Captcha
-		// api-account-os.hoyoverse.com
-		httpServer.post("/account/risky/api/check", new DispatchHttpJsonHandler("{\"retcode\":0,\"message\":\"OK\",\"data\":{\"id\":\"none\",\"action\":\"ACTION_NONE\",\"geetest\":null}}"));
-
-		// Config
-		// sdk-os-static.hoyoverse.com
-		httpServer.get("/combo/box/api/config/sdk/combo", new DispatchHttpJsonHandler("{\"retcode\":0,\"message\":\"OK\",\"data\":{\"vals\":{\"disable_email_bind_skip\":\"false\",\"email_bind_remind_interval\":\"7\",\"email_bind_remind\":\"true\"}}}"));
-		// hk4e-sdk-os-static.hoyoverse.com
-		httpServer.get("/hk4e_global/combo/granter/api/getConfig", new DispatchHttpJsonHandler("{\"retcode\":0,\"message\":\"OK\",\"data\":{\"protocol\":true,\"qr_enabled\":false,\"log_level\":\"INFO\",\"announce_url\":\"https://webstatic-sea.hoyoverse.com/hk4e/announcement/index.html?sdk_presentation_style=fullscreen\\u0026sdk_screen_transparent=true\\u0026game_biz=hk4e_global\\u0026auth_appid=announcement\\u0026game=hk4e#/\",\"push_alias_type\":2,\"disable_ysdk_guard\":false,\"enable_announce_pic_popup\":true}}"));
-		// hk4e-sdk-os-static.hoyoverse.com
-		httpServer.get("/hk4e_global/mdk/shield/api/loadConfig", new DispatchHttpJsonHandler("{\"retcode\":0,\"message\":\"OK\",\"data\":{\"id\":6,\"game_key\":\"hk4e_global\",\"client\":\"PC\",\"identity\":\"I_IDENTITY\",\"guest\":false,\"ignore_versions\":\"\",\"scene\":\"S_NORMAL\",\"name\":\"原神海外\",\"disable_regist\":false,\"enable_email_captcha\":false,\"thirdparty\":[\"fb\",\"tw\"],\"disable_mmt\":false,\"server_guest\":false,\"thirdparty_ignore\":{\"tw\":\"\",\"fb\":\"\"},\"enable_ps_bind_account\":false,\"thirdparty_login_configs\":{\"tw\":{\"token_type\":\"TK_GAME_TOKEN\",\"game_token_expires_in\":604800},\"fb\":{\"token_type\":\"TK_GAME_TOKEN\",\"game_token_expires_in\":604800}}}}"));
-		// Test api?
-		// abtest-api-data-sg.hoyoverse.com
-		httpServer.post("/data_abtest_api/config/experiment/list", new DispatchHttpJsonHandler("{\"retcode\":0,\"success\":true,\"message\":\"\",\"data\":[{\"code\":1000,\"type\":2,\"config_id\":\"14\",\"period_id\":\"6036_99\",\"version\":\"1\",\"configs\":{\"cardType\":\"old\"}}]}"));
-
-		// log-upload-os.mihoyo.com
-		httpServer.all("/log/sdk/upload", new DispatchHttpJsonHandler("{\"code\":0}"));
-		httpServer.all("/sdk/upload", new DispatchHttpJsonHandler("{\"code\":0}"));
-		httpServer.post("/sdk/dataUpload", new DispatchHttpJsonHandler("{\"code\":0}"));
-		// /perf/config/verify?device_id=xxx&platform=x&name=xxx
-		httpServer.all("/perf/config/verify", new DispatchHttpJsonHandler("{\"code\":0}"));
-
-		// Logging servers
-		// overseauspider.yuanshen.com
-		httpServer.all("/log", new ClientLogHandler());
-		// log-upload-os.mihoyo.com
-		httpServer.all("/crash/dataUpload", new ClientLogHandler());
-
-		// webstatic-sea.hoyoverse.com
-		httpServer.get("/admin/mi18n/plat_oversea/m202003048/m202003048-version.json", new DispatchHttpJsonHandler("{\"version\":51}"));
-
-		// gacha record.
-		String gachaMappingsPath = Utils.toFilePath(DATA("/gacha_mappings.js"));
-		// TODO: Only serve the html page and have a subsequent request to fetch the gacha data.
-		httpServer.get("/gacha", new GachaRecordHandler());
-		if(!(new File(gachaMappingsPath).exists())) {
-			Tools.createGachaMapping(gachaMappingsPath);
-		}
-
-		httpServer.raw().config.addSinglePageRoot("/gacha/mappings", gachaMappingsPath, Location.EXTERNAL);
-
-		// gacha details
-		httpServer.get("/gacha/details", new GachaDetailsHandler());
-
-		// announcement index
-		httpServer.get("/hk4e/announcement/*", new AnnouncementIndexHandler());
-		httpServer.get("/sw.js", new AnnouncementIndexHandler());
-		httpServer.get("/dora/lib/vue/2.6.11/vue.min.js", new AnnouncementIndexHandler());
-
-		// static file support for plugins
-		httpServer.raw().config.precompressStaticFiles = false; // If this isn't set to false, files such as images may appear corrupted when serving static files
-
-		httpServer.listen(DISPATCH_INFO.bindPort);
-		Grasscutter.getLogger().info(translate("messages.dispatch.port_bind", Integer.toString(httpServer.raw().port())));
-	}
-
-	private Map<String, String> parseQueryString(String qs) {
-		Map<String, String> result = new HashMap<>();
-		if (qs == null) {
-			return result;
-		}
-
-		int last = 0, next, l = qs.length();
-		while (last < l) {
-			next = qs.indexOf('&', last);
-			if (next == -1) {
-				next = l;
-			}
-
-			if (next > last) {
-				int eqPos = qs.indexOf('=', last);
-				if (eqPos < 0 || eqPos > next) {
-					result.put(URLDecoder.decode(qs.substring(last, next), StandardCharsets.UTF_8), "");
-				} else {
-					result.put(URLDecoder.decode(qs.substring(last, eqPos), StandardCharsets.UTF_8),
-							URLDecoder.decode(qs.substring(eqPos + 1, next), StandardCharsets.UTF_8));
-				}
-			}
-			last = next + 1;
-		}
-		return result;
-	}
-
-	public AuthenticationHandler getAuthHandler() {
-		if(authHandler == null) {
-			return new DefaultAuthenticationHandler();
-		}
-		return authHandler;
-	}
-
-	public boolean registerAuthHandler(AuthenticationHandler authHandler) {
-		if(this.authHandler != null) {
-			Grasscutter.getLogger().error(String.format("[Dispatch] Unable to register '%s' authentication handler. \n" +
-					"The '%s' authentication handler has already been registered", authHandler.getClass().getName(), this.authHandler.getClass().getName()));
-			return false;
-		}
-		this.authHandler = authHandler;
-		return true;
-	}
-
-	public void resetAuthHandler() {
-		this.authHandler = null;
-	}
-
-	public static class RegionData {
-		QueryCurrRegionHttpRsp parsedRegionQuery;
-		String Base64;
-
-		public RegionData(QueryCurrRegionHttpRsp prq, String b64) {
-			this.parsedRegionQuery = prq;
-			this.Base64 = b64;
-		}
-
-		public QueryCurrRegionHttpRsp getParsedRegionQuery() {
-			return parsedRegionQuery;
-		}
-
-		public String getBase64() {
-			return Base64;
-		}
-	}
-}

src/main/java/emu/grasscutter/server/dispatch/authentication/AuthenticationHandler.java

-package emu.grasscutter.server.dispatch.authentication;
-
-import emu.grasscutter.server.dispatch.json.LoginAccountRequestJson;
-import emu.grasscutter.server.dispatch.json.LoginResultJson;
-import express.http.Request;
-import express.http.Response;
-
-public interface AuthenticationHandler {
-
-    // This is in case plugins also want some sort of authentication
-    void handleLogin(Request req, Response res);
-    void handleRegister(Request req, Response res);
-    void handleChangePassword(Request req, Response res);
-
-    /**
-     * Other plugins may need to verify a user's identity using details from handleLogin()
-     * @param details The user's unique one-time token that needs to be verified
-     * @return If the verification was successful
-     */
-    boolean verifyUser(String details);
-
-    LoginResultJson handleGameLogin(Request req, LoginAccountRequestJson requestData);
-}

src/main/java/emu/grasscutter/server/dispatch/authentication/DefaultAuthenticationHandler.java

-package emu.grasscutter.server.dispatch.authentication;
-
-import emu.grasscutter.Grasscutter;
-import emu.grasscutter.database.DatabaseHelper;
-import emu.grasscutter.game.Account;
-import emu.grasscutter.server.dispatch.json.LoginAccountRequestJson;
-import emu.grasscutter.server.dispatch.json.LoginResultJson;
-import express.http.Request;
-import express.http.Response;
-
-import static emu.grasscutter.utils.Language.translate;
-import static emu.grasscutter.Configuration.*;
-
-public class DefaultAuthenticationHandler implements AuthenticationHandler {
-
-    @Override
-    public void handleLogin(Request req, Response res) {
-        res.send("Authentication is not available with the default authentication method");
-    }
-
-    @Override
-    public void handleRegister(Request req, Response res) {
-        res.send("Authentication is not available with the default authentication method");
-    }
-
-    @Override
-    public void handleChangePassword(Request req, Response res) {
-        res.send("Authentication is not available with the default authentication method");
-    }
-
-    @Override
-    public boolean verifyUser(String details) {
-        Grasscutter.getLogger().info(translate("dispatch.authentication.default_unable_to_verify"));
-        return false;
-    }
-
-    @Override
-    public LoginResultJson handleGameLogin(Request req, LoginAccountRequestJson requestData) {
-        LoginResultJson responseData = new LoginResultJson();
-
-        // Login
-        Account account = DatabaseHelper.getAccountByName(requestData.account);
-
-        // Check if account exists, else create a new one.
-        if (account == null) {
-            // Account doesn't exist, so we can either auto create it if the config value is set.
-            if (ACCOUNT.autoCreate) {
-                // This account has been created AUTOMATICALLY. There will be no permissions added.
-                account = DatabaseHelper.createAccountWithId(requestData.account, 0);
-
-                for (String permission : ACCOUNT.defaultPermissions) {
-                    account.addPermission(permission);
-                }
-
-                if (account != null) {
-                    responseData.message = "OK";
-                    responseData.data.account.uid = account.getId();
-                    responseData.data.account.token = account.generateSessionKey();
-                    responseData.data.account.email = account.getEmail();
-
-                    Grasscutter.getLogger().info(translate("messages.dispatch.account.account_login_create_success", req.ip(), responseData.data.account.uid));
-                } else {
-                    responseData.retcode = -201;
-                    responseData.message = translate("messages.dispatch.account.username_create_error");
-
-                    Grasscutter.getLogger().info(translate("messages.dispatch.account.account_login_create_error", req.ip()));
-                }
-            } else {
-                responseData.retcode = -201;
-                responseData.message = translate("messages.dispatch.account.username_error");
-
-                Grasscutter.getLogger().info(translate("messages.dispatch.account.account_login_exist_error", req.ip()));
-            }
-        } else {
-            // Account was found, log the player in
-            responseData.message = "OK";
-            responseData.data.account.uid = account.getId();
-            responseData.data.account.token = account.generateSessionKey();
-            responseData.data.account.email = account.getEmail();
-
-            Grasscutter.getLogger().info(translate("messages.dispatch.account.login_success", req.ip(), responseData.data.account.uid));
-        }
-
-        return responseData;
-    }
-}

src/main/java/emu/grasscutter/server/dispatch/http/AnnouncementIndexHandler.java

-package emu.grasscutter.server.dispatch.http;
-
-import emu.grasscutter.Grasscutter;
-import emu.grasscutter.database.DatabaseHelper;
-import emu.grasscutter.game.Account;
-import emu.grasscutter.utils.FileUtils;
-import emu.grasscutter.utils.Utils;
-import express.http.HttpContextHandler;
-import express.http.Request;
-import express.http.Response;
-
-import java.io.File;
-import java.io.IOException;
-import java.util.Objects;
-
-import static emu.grasscutter.Configuration.DATA;
-
-public class AnnouncementIndexHandler implements HttpContextHandler {
-    private final String render_template;
-    private final String render_swjs;
-    private final String render_vueminjs;
-
-    public AnnouncementIndexHandler() {
-        File template = new File(Utils.toFilePath(DATA("/hk4e/announcement/index.html")));
-        File swjs = new File(Utils.toFilePath(DATA("/hk4e/announcement/sw.js")));
-        File vueminjs = new File(Utils.toFilePath(DATA("/hk4e/announcement/vue.min.js")));
-        this.render_template = template.exists() ? new String(FileUtils.read(template)) : null;
-        this.render_swjs = swjs.exists() ? new String(FileUtils.read(swjs)) : null;
-        this.render_vueminjs = vueminjs.exists() ? new String(FileUtils.read(vueminjs)) : null;
-    }
-
-    @Override
-    public void handle(Request req, Response res) throws IOException {
-        if (Objects.equals(req.path(), "/sw.js")) {
-            res.send(render_swjs);
-        }else if(Objects.equals(req.path(), "/hk4e/announcement/index.html")) {
-            res.send(render_template);
-        }else if(Objects.equals(req.path(), "/dora/lib/vue/2.6.11/vue.min.js")){
-            res.send(render_vueminjs);
-        }else{
-            File renderFile = new File(Utils.toFilePath(DATA(req.path())));
-            if(renderFile.exists()){
-                String ext = req.path().substring(req.path().lastIndexOf(".") + 1);
-                switch(ext){
-                    case "css":
-                        res.type("text/css");
-                        res.send(FileUtils.read(renderFile));
-                        break;
-                    case "js":
-                    default:
-                        res.send(FileUtils.read(renderFile));
-                        break;
-                }
-            }else{
-                Grasscutter.getLogger().info( "File not exist: " + req.path());
-            }
-        }
-
-
-    }
-}

src/main/java/emu/grasscutter/server/dispatch/http/GachaDetailsHandler.java

-package emu.grasscutter.server.dispatch.http;
-
-import java.io.File;
-import java.io.IOException;
-import java.util.Arrays;
-import java.util.LinkedHashSet;
-import java.util.Set;
-
-import emu.grasscutter.Grasscutter;
-import emu.grasscutter.database.DatabaseHelper;
-import emu.grasscutter.game.Account;
-import emu.grasscutter.game.gacha.GachaBanner;
-import emu.grasscutter.game.gacha.GachaManager;
-import emu.grasscutter.game.gacha.GachaBanner.BannerType;
-import emu.grasscutter.game.player.Player;
-import emu.grasscutter.utils.FileUtils;
-import emu.grasscutter.utils.Utils;
-import express.http.HttpContextHandler;
-import express.http.Request;
-import express.http.Response;
-
-import static emu.grasscutter.utils.Language.translate;
-
-import static emu.grasscutter.Configuration.*;
-
-public final class GachaDetailsHandler implements HttpContextHandler {
-	private final String render_template;
-
-	public GachaDetailsHandler() {
-		File template = new File(Utils.toFilePath(DATA("/gacha_details.html")));
-		this.render_template = template.exists() ? new String(FileUtils.read(template)) : null;
-	}
-
-	@Override
-	public void handle(Request req, Response res) throws IOException {
-		String response = this.render_template;
-
-		// Get player info (for langauge).
-		String sessionKey = req.query("s");
-		Account account = DatabaseHelper.getAccountBySessionKey(sessionKey);
-		Player player = Grasscutter.getGameServer().getPlayerByUid(account.getPlayerUid());
-
-		// If the template was not loaded, return an error.
-		if (this.render_template == null) {
-			res.send(translate(player, "gacha.details.template_missing"));
-			return;
-		}
-
-		// Add translated title etc. to the page.
-		response = response.replace("{{TITLE}}", translate(player, "gacha.details.title"));
-		response = response.replace("{{AVAILABLE_FIVE_STARS}}", translate(player, "gacha.details.available_five_stars"));
-		response = response.replace("{{AVAILABLE_FOUR_STARS}}", translate(player, "gacha.details.available_four_stars"));
-		response = response.replace("{{AVAILABLE_THREE_STARS}}", translate(player, "gacha.details.available_three_stars"));
-
-		response = response.replace("{{LANGUAGE}}", Utils.getLanguageCode(account.getLocale()));
-		
-		// Get the banner info for the banner we want.
-		int gachaType = Integer.parseInt(req.query("gachaType"));
-		GachaManager manager = Grasscutter.getGameServer().getGachaManager();
-	 	GachaBanner banner = manager.getGachaBanners().get(gachaType);
-
-		// Add 5-star items.
-		Set<String> fiveStarItems = new LinkedHashSet<>();
-
-		Arrays.stream(banner.getRateUpItems5()).forEach(i -> fiveStarItems.add(Integer.toString(i)));
-		Arrays.stream(banner.getFallbackItems5Pool1()).forEach(i -> fiveStarItems.add(Integer.toString(i)));
-		Arrays.stream(banner.getFallbackItems5Pool2()).forEach(i -> fiveStarItems.add(Integer.toString(i)));
-
-		response = response.replace("{{FIVE_STARS}}", "[" + String.join(",", fiveStarItems) + "]");
-		
-		// Add 4-star items.
-		Set<String> fourStarItems = new LinkedHashSet<>();
-
-		Arrays.stream(banner.getRateUpItems4()).forEach(i -> fourStarItems.add(Integer.toString(i)));
-		Arrays.stream(banner.getFallbackItems4Pool1()).forEach(i -> fourStarItems.add(Integer.toString(i)));
-		Arrays.stream(banner.getFallbackItems4Pool2()).forEach(i -> fourStarItems.add(Integer.toString(i)));
-
-		response = response.replace("{{FOUR_STARS}}", "[" + String.join(",", fourStarItems) + "]");
-
-		// Add 3-star items.
-		Set<String> threeStarItems = new LinkedHashSet<>();
-		Arrays.stream(banner.getFallbackItems3()).forEach(i -> threeStarItems.add(Integer.toString(i)));
-		response = response.replace("{{THREE_STARS}}", "[" + String.join(",", threeStarItems) + "]");
-
-		// Done.
-		res.send(response);
-	}
-}

src/main/java/emu/grasscutter/server/dispatch/http/GachaRecordHandler.java

-package emu.grasscutter.server.dispatch.http;
-
-import java.io.File;
-import java.io.IOException;
-
-import emu.grasscutter.database.DatabaseHelper;
-import emu.grasscutter.game.Account;
-import emu.grasscutter.utils.FileUtils;
-import emu.grasscutter.utils.Utils;
-import express.http.HttpContextHandler;
-import express.http.Request;
-import express.http.Response;
-
-import static emu.grasscutter.Configuration.*;
-
-public final class GachaRecordHandler implements HttpContextHandler {
-	String render_template;
-	public GachaRecordHandler() {
-		File template = new File(Utils.toFilePath(DATA("/gacha_records.html")));
-		if (template.exists()) {
-			// Load from cache
-			render_template = new String(FileUtils.read(template));
-		} else {
-			render_template = "{{REPLACE_RECORD}}";
-		}
-	}
-
-	@Override
-	public void handle(Request req, Response res) throws IOException {
-		// Grasscutter.getLogger().info( req.query().toString() );
-		String sessionKey = req.query("s");
-		int page = 0;
-		int gachaType = 0;
-		if (req.query("p") != null) {
-			page = Integer.parseInt(req.query("p"));
-		}
-
-		if (req.query("gachaType") != null) {
-			gachaType = Integer.parseInt(req.query("gachaType"));
-		}
-
-		Account account = DatabaseHelper.getAccountBySessionKey(sessionKey);
-		if (account != null) {
-			String records = DatabaseHelper.getGachaRecords(account.getPlayerUid(), page, gachaType).toString();
-			// Grasscutter.getLogger().info(records);
-			String response = render_template.replace("{{REPLACE_RECORD}}", records)
-							.replace("{{REPLACE_MAXPAGE}}", String.valueOf(DatabaseHelper.getGachaRecordsMaxPage(account.getPlayerUid(), page, gachaType)));
-
-			res.send(response);
-		} else {
-			res.send("No account found.");
-		}
-	}
-}