You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Added
On Minecraft versions below 1.21 the module now needs UltiTools-API 6.4.0 or later. With an older UltiTools-API it
refuses to start before any of its commands, listeners or tasks is registered and logs "UltiLogin needs UltiTools 6.4.0
or later on Minecraft versions below 1.21 (server: …, UltiTools: …). Please update UltiTools."; the core plugin keeps
running. On Minecraft 1.21 or later the requirement stays UltiTools-API 6.3.1 or later (UltiKits/UltiTools-Reborn#655).
On UltiTools-API 6.3.1 the module registers /login, /l, /register, /reg, /changepassword, /changepw, /cpw, /setpassword, /setpw, /recover, /logadmin, /loginadmin and /regs with the framework's
sensitive-command registry when it is enabled, so their arguments are replaced with *** in everything the
framework sends to UltiCloud (the panel console, error reports and chat). The list is taken from the commands' own
declarations: every alias of every command that takes arguments. The local console and log files keep the module's
own ****** mask, which is unchanged.
When a second /panel replaces a link before the first one reached the player, the older link now ends silently
instead of printing "Failed to generate panel link" next to the working link. A web registration that finishes after
its link ended and is refused by max-register-per-ip now shows the address-limit message instead of asking the
player to run /panel again (#74).
连续两次执行 /panel 时，若较早的链接在送达玩家前已被新链接取代，现在会静默结束，不再在可用链接旁显示“生成面板链接失败”。
链接结束后才完成、并因 max-register-per-ip 被拒绝的网页注册，现在显示 IP 注册上限提示，而不是让玩家重新执行 /panel
（#74）。
Declining a web sign-in with "Not me" now uses neutral wording and asks the player to run /panel again. The bind
and replace pages' "Cancel" buttons give the same declined message; the unused old refusal text is no longer shipped.
Requires UltiTools-API 6.3.1 or later. api-version rises from 630 to 631, so UltiTools-API 6.3.0 refuses this
version at load with a warning that the UltiTools version is outdated.
/panel now creates its link through UltiTools-API 6.3.1's player-link API instead of the module's own HTTP request, and
nothing is polled any more: UltiCloud reports the result as an event. All three proofs still work (logged in in game, an
already linked account, a web registration). A sign-in that completes is answered to UltiCloud (account created, account
already exists, not requested, registration rejected, login plugin unavailable); a repeated delivery of the same sign-in
creates and logs in nothing twice; a sign-in that arrives after the player left, the server restarted or the link ended
creates a requested account but logs nobody in, and tells a player who is online to run /panel again. A link ends when
UltiCloud says so (expired, cancelled, declined) or at its own expiry time, which holds the login countdown for at most
ten minutes.
Messages changed. New: "You have been logged in via UltiCloud." (no more "(Player)" or "(Server Owner)"), "The web panel
sign-in is complete.", a cancelled link now says to run /panel again (cancelling is final), the rate-limit and
link-not-permitted answers, "Your game account could not be created. Run /panel again to retry.", and the late sign-in
line. The refusal reasons the old protocol gave are gone: clicking "Not me" now says "The web panel sign-in was
declined. Run /panel again for a new link."
A game password set with /setpassword is now described as a backup for when UltiCloud cannot be reached, and the
player is told to use a password different from their UltiKits account. The reminder follows every web sign-in of an
account that has no game password and every join, /login and re-prompt in which that account is not logged in; the /login refusal and /setpassword's help text say the same.
/panel for a name without an account is refused before any link is requested when its address has already reached max-register-per-ip, so the web side no longer creates an UltiKits account the game would refuse. The limit is checked
again when the web sign-in finishes.
提示文字有变化。新增：“You have been logged in via UltiCloud.”（不再区分 Player／Server Owner）、网页登录完成提示、取消后需重新执行 /panel（取消是终态）、
请求太频繁和不允许生成链接的提示、游戏账号创建失败提示，以及迟到登录的提示。旧协议给出的各种拒绝原因已取消，点击“不是我”会提示“网页面板登录已被拒绝。请重新执行 /panel 获取新链接。”。
UltiLogin 2.0.0's /panel request path (the HTTP call to UltiCloud, the three-second polling, the owner/player
distinction in the sign-in message, the four refusal reasons and the credential-refused message) is gone, with no
bridge: UltiLogin 2.0.0's /panel does not work on UltiTools-API 6.3.1, so update to this version. Players can still
use /login.
On a Paper version that lacks an event one of the login protections uses, the other protections are still registered.
The mount guard falls back to the older mount event; the item-pick, sign-opening and equipment-slot-swap guards are each
skipped with one console warning naming the missing hook when the server has no equivalent event. Before, one missing
event could stop the remaining Paper-specific protections from registering (#83).
在缺少某个登录保护所用事件的 Paper 版本上，其余保护仍会注册。骑乘保护会改用旧的骑乘事件；服务端没有等价事件时，拾取方块、打开告示牌和装备栏交换保护
会各自跳过，并在控制台给出一条指明缺失钩子的警告。此前缺少一个事件可能导致其余 Paper 专属保护都无法注册（#83）。
A player who is not logged in and slides sideways off a block edge is now put back at the centre of the block column
they stood in, at the lowest height where their bounding box does not collide with the real block shapes (full blocks
and slabs alike); when no such height exists the player stays where they were (#74).
Expired failed-login locks (per address, per account and per address-and-account pair) of players who never return
are now cleared by the regular failed-login housekeeping instead of staying in memory until shutdown
(#65, #88).
