PteroBridge is a two-sided, security-focused single sign-on bridge between Paymenter and Pterodactyl.
It consists of:
paymenter/PteroBridge: a Paymenter 1.5 server extension that inherits the official Pterodactyl provisioning extension and adds a time-sensitive Manage server action.pterodactyl: a Composer package for Pterodactyl 1.14 that verifies signed assertions, creates one-use login codes, and starts the Pterodactyl session.
PteroBridge uses its own documented protocol and is not wire-compatible with third-party SSO extensions. Long-lived credentials are never placed in a URL. The browser receives only a random, single-use authorization code that expires within 30 seconds.
The implementation and automated test suite are complete as a release candidate. PteroBridge has not undergone an independent security audit. Do not install it on production systems until the staging acceptance checks and rollback exercise have passed on the target deployment.
See:
- Paymenter
1.5.0 - Pterodactyl
1.14.1 - PHP
8.3 ext-sodium- HTTPS on both public origins
Both upstream release archives used for compatibility work were checked against their published SHA-256 digests before inspection.
PteroBridge is available under the MIT License.