authlib-injector icon indicating copy to clipboard operation
authlib-injector copied to clipboard

[Question] How can I determine whether the authserver I connected is Mojang or 3rd-party

Open teddyxlandlee opened this issue 1 year ago • 3 comments

As 1.19.1 releases, many players are concerning that they're possibly reported by others if their keypair are signed by Mojang, and they signed their chats.
However, keypairs signed by 3rd party yggdrasil servers can't be recognized by Mojang's report system.

What I'm planning to do is to develop a mod warning players who are connecting a Mojang-auth server which enforces secure profile.

How can I determine whether the player is connecting Mojang-auth or 3rd-party authserver?

Thank you.

teddyxlandlee avatar Jul 24 '22 02:07 teddyxlandlee

@teddyxlandlee 起夜级方案:Class.forName一个ai的类

Lama3L9R avatar Jul 24 '22 02:07 Lama3L9R

@teddyxlandlee 起夜级方案:Class.forName一个ai的类

这样有一个问题 你没办法保证用authlib-injector的不会原地tp到moj-auth

teddyxlandlee avatar Jul 24 '22 02:07 teddyxlandlee

With the release of authlib-injector v1.2.0, clients with authlib-injector will use a randomly-generated profile key, and an empty signature (\0). Both the server and the client will accept any profile key, regardless of whether the signature is valid or not.

yushijinhun avatar Aug 06 '22 10:08 yushijinhun