Making sure cracked users can't join with a premium username

Discussion in 'Spigot Plugin Development' started by DotRar, May 18, 2016.

  1. Does Minecraft already do this? If it doesn't, would this work?
    1. Check if the username is premium
    If it is, continue. If it is not, let them in.
    2. Check the UUID of the user joining
    If it matches the UUID of the actual account, let them in. If it does not, kick them

    Or can the UUID be faked?
     
  2. Enable onlinemode?
     
    • Agree Agree x 3
  3. 1. Unless your server is set to offline mode then no.
    2. If using bungeecord, there is a small chance of that happening if you didn't set up the software properly.
     
  4. On bungeecord enable online mode in bungeecord and disable it in the other servers.
     
  5. I am trying to make this work for a cracked bungee network. I can set up the bungee so you can't join servers without going through it.
    Would the process I suggested in my original post work though?
     
  6. Use bungee premiun authenticathor

    Enviado desde mi SM-G900F mediante Tapatalk
     
  7. Can you link me to where it says that? I thought that was only on bukkit
     
  8. It doesn't say that anywhere.
     
    • Agree Agree x 1
  9. Notch originally approved cracked for mainly testing Minecraft.
    Too lazy to find the source though.
     
    • Agree Agree x 3
  10. If you write a mod with MCP and run it from your IDE you will be playing cracked mc.
     
  11. that is testing your mod :/
     
  12. Yeah, as @Kopsukka said, cracked can be used for testing
     
  13. Pretty sure it doesn't say "no support for offline mode" anywhere. He wants to do this, let him. He's obviously well aware of the risks as this thread wouldn't exist if not. No need to be an asshole about it if you don't agree with cracked. Keep that opinion to yourself as its unneeded and honestly doesn't help him solve the issue behind the thread.
     
    • Agree Agree x 1
    • Winner Winner x 1
  14. Just fetch their UUID using the username. If it can be found, follow premium authentication. Otherwise, let them bypass it and use your own auth.

    (note, on Bukkit/Spigot without BungeeCord you need to set online-mode to true, otherwise premium auth will not at all)
     
  15. UUIDs in offline mode are name-based (UUID variant 3) for every user who logs in.

    If you want premium authentication, please just use it.
     
  16. This UUID variant would be different from the one the Mojang API uses, right?
    e.g. http://api.mojang.com/users/profiles/minecraft/0RW0 would be different from a cracked user with the name 0RW0
     
  17. AFAIK MCP only works when you have downloaded mc before.