GameOps Panel
Admin dashboard for CoD4/B3 servers with full audit trails, granular RBAC, and hardened session security.
Overview
A web-based management panel for Call of Duty 4 servers running on the B3 (BigBrotherBot) admin framework, covering live server monitoring, player moderation (bans, temp-bans, IP bans, warnings), and map rotation management, all backed by a tamper-evident audit trail that records who did what, to whom, and when.
How it came together
Challenge
The panel proxies two separate backend services (a legacy REST API and B3's plugin API) without ever exposing their credentials to the client, while giving every admin action full accountability. On top of that, admin sessions needed a hard security ceiling: standard JWT-based auth silently renews on every request, so an idle-but-open session for a compromised or shared account could stay valid indefinitely.
Solution
Server-side Next.js API routes proxy both backends with credentials that never reach the browser, and every successful mutating request is resolved into a human-readable audit entry (actor, action, target) rather than a raw API log. Role-based permissions are enforced server-side per route and per menu item via middleware, not just hidden in the UI. Auth runs on NextAuth v5 with Supabase-backed credentials and a hard 18-hour absolute session lifetime, tracked independently of the rolling session cookie, with automatic forced sign-out the moment it expires, even on an idle tab.
Outcome
The panel now actively manages multiple live CoD4 communities with full admin accountability: every ban, warning, kick, and permission change is traceable in the Audit Logs page.
Technical Stack
Tags
Visual Showcase
Dashboard
Server Stats & Online players
Key Features
Full Audit Trail
Every ban, kick, warning, role change, and rotation edit is logged with the acting admin, target, and timestamp, searchable in a dedicated Audit Logs page.
Granular Role-Based Access
Per-route and per-menu permission tiers, including a Developer tier, enforced server-side via middleware rather than just hidden in the UI.
Hardened Session Security
Admin sessions carry a hard 18-hour absolute lifetime enforced independently of activity, with automatic forced logout the moment it expires, even on an idle tab.
Real-time Server Monitoring
Track live player activity, current map, and server uptime.
Warning & Escalation System
Track player warning history ahead of a ban, giving admins context before taking action.
Ban & Moderation Tools
Issue bans, temp-bans, IP bans, or kicks with real-time sync back to the server and detailed logs.
Admin & User Management
Full CRUD for admin accounts with tiered roles, password resets, and self-delete protection.
Screenshot Gallery
View and manage player screenshots to detect suspicious activity or cheats directly from the panel.
Command Center
Send commands instantly to your game server from a sleek web interface.