Registered users
—
Current user records
DEALCHESS / SECURE ACCESS
Admin Vault
CONTROL CENTER · DEVICE-BOUND ACCESS
Unlock Admin Access
Your device can verify you with fingerprint, face recognition, or its screen-lock PIN.
WebAuthn asks your device to verify you. Your fingerprint or face data is handled by your device and is not sent to DealChess. Device unlock stores the API token locally on this device; use only a trusted device.
Use HTTPS and keep this device protected. “Log out from this device” removes the saved token and this app's reference to the WebAuthn credential. Browsers do not provide a website API to delete the authenticator credential itself.
DEALCHESS / CONTROL PLANE
Admin Dashboard
API connected
Active accounts
—
Status: active
Premium accounts
—
Premium subscription type
New today
—
Daily registration limit
Players & subscriptions
| Status | Plan | Voice | Created | Last login | Action | |
|---|---|---|---|---|---|---|
| Connect to load users. | ||||||
Select Edit to update the account's subscription, status, voice permission, or trial.
Feature access requests
Approval and revocation are enforced by the API as well as the Users App. Approved features are stored in the same D1 database bound as DB → chess-db.
| Player | Feature | Status | Requested | Message | Actions |
|---|---|---|---|---|---|
| Connect to load requests. | |||||
Registration code generator
Codes are stored as hashes. A code is displayed only once when generated; existing codes cannot be recovered.
Issued registration codes
| Code | Created | Expires | Status | Action | |
|---|---|---|---|---|---|
| Connect to load codes. | |||||
Device reset code generator
Resetting invalidates current sessions and clears the existing device binding. Issue a reset only after verifying the account owner.
Device reset codes
| Code | Created | Expires | Status | Action | |
|---|---|---|---|---|---|
| Connect to load codes. | |||||
TURN usage & routing control
Cloudflare TURN usage
—
Usage data is not available yet.
Cloudflare provider
—
Requires configured TURN credentials
Oracle backup
Not configured
Status only until an Oracle TURN provider is integrated
Routing state
—
—
Usage is not automatically fetched from Cloudflare billing. Enter a verified usage reading. Oracle backup routing requires ORACLE_TURN_URL, ORACLE_TURN_USERNAME, and ORACLE_TURN_CREDENTIAL Worker variables. In automatic mode, traffic shifts to Oracle at the configured shift threshold when Oracle is configured; the hard cutoff falls back to Oracle or blocks new TURN sessions if no backup is available.
TURN switch and policy history
| Time | Actor | Action | Before | After |
|---|---|---|---|---|
| Connect to load TURN history. | ||||
System overview
Total users
—
Active games started today
—
Premium users
—
Trial users
—
Registration & trial settings
Recent admin audit logs
| Time | Admin | Action | Target | Old value | New value |
|---|---|---|---|---|---|
| No logs loaded. | |||||
Vault & device security
Biometric device unlock
Checking this device…
Use fingerprint, face recognition, or device PIN when supported by the operating system and authenticator.
This device only
The WebAuthn credential is scoped to this website and this browser profile. It does not sync the admin token to your other devices.
Token storage note
To avoid asking you to paste the token each visit, this PWA stores it in IndexedDB on this device. WebAuthn prompts for local user verification but, without server-side WebAuthn challenge verification, this is a local convenience lock rather than a replacement for backend token authentication.
DealChess Admin PWA v1.4.0 · Neon control panel · WebAuthn device unlock · API requests still require the admin token.