象棋大师 · Admin

Sign in to manage social posts and view analytics.

象棋大师Admin panel

Traffic

Live from Google Analytics 4 (property configured under Connections).

New vs returning

Which mode players choose

Most-started lessons

All events

New post

Publish to Discord and/or your Facebook Page. Leave the schedule empty to post immediately.

Post history

Audit log

Discord

Connected.

Discord → Server Settings → Integrations → Webhooks → New Webhook → copy the URL. Saved encrypted; it is never shown again.

Facebook Page

Connected.

Needs a Page Access Token with pages_manage_posts. Meta App Review is required before it works on a live Page.

Google Analytics

Connected.

Paste the service-account JSON key and your GA4 property ID (a number, not G-…). Grant that service-account email Viewer on the GA property, and enable the Google Analytics Data API in the Cloud project.

Change password

Minimum 12 characters. Stored as a salted scrypt hash — never in plain text.

How this panel is protected

Sessions are server-side with an HttpOnly · Secure · SameSite=Strict cookie, expiring after 8 hours (1 hour idle). Every change requires a CSRF token. Logins are rate limited with a 15-minute lockout after 5 failures. All credentials are AES-256-GCM encrypted at rest with a key held only in the service environment, and are never sent back to this page. The service listens on localhost only — the public edge is nginx over HTTPS.