Add the will request routes to the realm allow-list

[ryanbarlow97]

Stage 6b: ProvinceSystem gains a will request queue that RPCharacters pulls and acknowledges. This adds both plugin routes to ProvinceSystemGateway's realm allow-list:

• GET /characters/plugin/wills/pending gets realm_id in the query.
• POST /characters/plugin/wills/applied gets realm_id in the top-level body.

RPCharacters already sends realm_id=TFMCWeb.getRealmId() on both, so this is a second guard; an explicit realm is left untouched. Tests cover injection on both routes, the explicit realm being kept, and the methods not crossing over (the pull is GET only, the ack POST only).

RPCharacters reaches ProvinceSystem only through this gateway (reflectively, via its GatewayClient), and reads the realm through the existing public TFMCWeb.getRealmId(), so no new accessor was needed.

Release note: this is intended as TFMCWeb 1.2.0. main also carries #36 (resend player meta when LuckPerms permissions change), merged and unreleased, so the 1.2.0 release will include it.

Gate: mvn clean verify, 161 tests, coverage checks met.

Docs: TF-Minecraft/Docs#213

🤖 Generated with Claude Code

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}