Authenticate T5 and T6 telemetry over HTTPS

t5/tws_telemetry.gsc

@@ -21,7 +21,22 @@ init()
 
     level.telemetry_url = GetDvar("tws_telemetry_url");
     if (level.telemetry_url == "")
-        level.telemetry_url = "http://192.168.1.199:3000/api/telemetry";
+        level.telemetry_url = "https://ec.thewrightserver.net/api/telemetry";
+
+    if (getSubStr(toLower(level.telemetry_url), 0, 8) != "https://")
+    {
+        print("^1[tws_telemetry] Telemetry disabled: tws_telemetry_url must use HTTPS");
+        return;
+    }
+
+    // Shared reporter secret; update both scripts when rotating it.
+    // This must match Electric Cherry's EC_TELEMETRY_TOKEN environment variable.
+    level.telemetry_token = "e03a03f7d22418f0c062b0b2a7317fd91b1194c4400e84b469866de501180dc2";
+    if (level.telemetry_token.size < 32)
+    {
+        print("^1[tws_telemetry] Telemetry disabled: embedded telemetry token must be at least 32 characters");
+        return;
+    }
 
     level.telemetry_server = GetDvar("tws_server_id");
     if (level.telemetry_server == "")
@@ -273,6 +288,7 @@ telemetry_send(entry)
 
     headers = [];
     headers["Content-Type"] = "application/json";
+    headers["Authorization"] = "Bearer " + level.telemetry_token;
 
     options = [];
     options["method"] = "POST";