Implement JWT signature verification and Xbox Live checks, close #315

Browse Source

This can be enabled or disabled using the "online-mode" directive in
server.properties.

NOTE: For safety reasons it is enabled by default, since many naive server owners currently believe that authentication is not needed because "the client is forced to sign-in".
Newsflash for readers: the forced authentication is easily bypassed using a LAN proxy.

Un-authenticated LAN connections will still work fine if the online mode is disabled.

Added the following API methods:
- Server->getOnlineMode() : bool
- Server->requiresAuthentication() : bool
- Player->isAuthenticated() : bool

JWT verification is rather expensive, so it is done in an AsyncTask. Make sure you don't hog your worker threads.

...

This commit is contained in:

Dylan K. Taylor

2017-09-25 12:30:58 +01:00

parent 8ca59d12e9

commit 03d3e595d6

4 changed files with 224 additions and 14 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

2

src/pocketmine/lang/locale

Submodule src/pocketmine/lang/locale updated: d5796bed26...bfa58add7c