Merge pull request #5 from weslenng/fix/realign-authenticator-api-v2

fix: realign authenticator online flows with current Blizzard API

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,5 @@
+blank_issues_enabled: false
+contact_links:
+  - name: Official Blizzard Support
+    url: https://us.battle.net/support/en/
+    about: If you are locked out of your Battle.net account, contact Blizzard. The project maintainer cannot recover your account.

.github/ISSUE_TEMPLATE/report.yml

@@ -0,0 +1,34 @@
+name: "Bug Report / API Endpoint Update"
+description: "Read before opening. Account recovery requests will be closed instantly."
+title: "[API Update]: "
+labels: ["help wanted"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        # ⚠️ STOP AND READ THIS ⚠️
+        
+        **Blizzard changed their API endpoints. This tool is currently broken.**
+        
+        * **Account Recovery:** I cannot help you. You must contact Blizzard Customer Support.
+        * **Fixing the Tool:** This tool will remain broken until a developer sniffs out and provides the updated Blizzard endpoints/payload configurations.
+
+  - type: checkboxes
+    id: acknowledgment
+    attributes:
+      label: Mandatory Acknowledgment
+      description: You must agree to these terms before submitting.
+      options:
+        - label: "I understand that this tool is currently broken due to Blizzard's API changes."
+          required: true
+        - label: "I understand that the repository maintainer CANNOT recover my Battle.net account."
+          required: true
+
+  - type: textarea
+    id: technical-details
+    attributes:
+      label: Updated Endpoint Data / Technical Contribution
+      description: "If you have intercepted the new Blizzard API traffic, please provide the new endpoints, request headers, or payload structure here."
+      placeholder: "e.g., New authentication endpoint is found at..."
+    validations:
+      required: false

README.md

@@ -1,5 +1,43 @@
 # Battle.net Authenticator Tool
 
+---
+
+# 🛑 NOT MAINTAINED / BROKEN BY BLIZZARD 🛑
+
+**This repository is functional ONLY as a local backup manager. Online features are dead.**
+
+### 💻 What Happened?
+Blizzard recently modified their identity API endpoints and restricted authentication scopes. This change was implemented to prevent users from extracting their raw device secrets and forcing them to use the heavy, official Battle.net mobile app for 2FA. 
+
+This tool was built using completely legal, public API access. However, because Blizzard has locked down these endpoints to restrict user choice, **you can no longer attach new authenticators or retrieve secrets online using this script.**
+
+### 🚨 Read Before Opening an Issue:
+*   **Will this be fixed?** Only if a someone manages to legally map the new endpoints or payload schemas. Pull Requests are welcome.
+*   **Are you locked out of your account?** I have zero association with Blizzard and zero access to their backend. **Do not open an issue.** You must contact [Blizzard Customer Support](https://us.battle.net/support/en/) directly to have the authenticator detached from your account. 
+*   **Spam Policy:** Any issue opened asking for a "fix," reporting an API connection failure, or asking for account help will be locked and deleted immediately.
+
+---
+
+### 🔍 Legacy Local Functions (What Still Works)
+If you already ran this tool in the past and have your `battlenet_authenticator_SERIAL.json` backup file, the tool is 100% operational offline:
+
+*   **Reconstruct TOTP:** Generates your standard RFC 6238 TOTP keys (8 digits, 30s period) and outputs a QR code to import into **Aegis, Bitwarden, 1Password, or Google Authenticator**.
+*   **Local Security:** Encrypt or decrypt your local JSON backups using strong AES-256-GCM encryption (upgraded to 600k PBKDF2 iterations in v1.3.0).
+
+---
+
+## 🛠️ Offline Usage
+
+If you are running the tool locally to regenerate keys from an existing backup:
+
+```bash
+pip install requests cryptography "qrcode[pil]"
+python bnet_auth_tool.py
+```
+
+---
+# Version History
+
 Version: 1.3.0
 
 A Python-based command-line tool for managing Battle.net software authenticators. This tool allows you to:
@@ -14,7 +52,7 @@ A Python-based command-line tool for managing Battle.net software authenticators
 
 **Disclaimer:** This tool interacts with your Battle.net account and handles sensitive security information (authenticator secrets). Use it responsibly and at your own risk. Ensure you understand the security implications and securely manage any generated files and passphrases. The author is not responsible for any damage or loss resulting from the use of this tool.
 
-## Features
+# Features
 
 *   **Attach New Authenticator:** Guides through attaching a new virtual authenticator.
 *   **Retrieve Existing Secret:** Recovers the secret key if you have the Serial and Restore Code.
@@ -110,3 +148,6 @@ Version `1.3.0` introduces a significant improvement to the security of *newly e
     *   A QR code image containing the `otpauth://` URL.
     *   Scan this with your authenticator app to add the key.
     *   Securely delete after successful import.
+ 
+## Donations
+[![ko-fi](https://ko-fi.com/img/githubbutton_sm.svg)](https://ko-fi.com/P5P21QRW51)