v1.3.0-TrueUUID

English

TrueUUID 1.3.0 is a security update for every Forge, Fabric, and NeoForge
build. It also delivers the exact-patch coverage prepared for 1.2.1, which was
never published. This release contains 52 exact mod builds for Minecraft 1.20.1
through 1.21.11 and new server plugins for Spigot 1.20.1 and Paper 1.20.1. The
login flow of every mod build passed the installed-JAR login matrix: premium
login, offline fallback, confirmed migration, and known-name denial.

Security fixes

• A timeout, a silent or malformed client response, or a failed session check no longer falls back to offline admission. Only a TrueUUID client that explicitly reports it has no local premium session reaches the offline-fallback policy.
• Removed the short same-IP reconnect grace. A reconnecting player must verify again.
• Fixed a Forge and NeoForge login race that could let a native offline login finish before the TrueUUID check started. Minecraft 1.20.2 and later install the gate at startClientVerification, and 1.20.1 installs it right after the login profile is set, before Forge publishes negotiation state. Fabric was not affected.
• Fixed premium verification failing with HTTP 204 behind proxies, NAT, or split IPv4/IPv6 routing. TrueUUID no longer sends the server-observed client IP to the hasJoined endpoint.
• Fixed NeoForge 1.20.3 login answers, which used the wrong NeoForge payload wrapper and failed during login.

New builds

• Fabric and NeoForge: 1.20.3, 1.20.5, 1.21, 1.21.2, 1.21.7, and 1.21.9.
• Forge: 1.20.3, 1.21, 1.21.7, and 1.21.9. Forge never published a loader for Minecraft 1.20.5 or 1.21.2.

New server plugins

• TrueUUID now runs as a plugin on Spigot 1.20.1 and Paper 1.20.1 servers, with no server mod. The plugin needs ProtocolLib 5.1.0 or newer.
• A player with the matching TrueUUID client mod is verified through the mod. A premium player without the mod is verified through the normal Mojang login.
• The plugin works with any Spigot or Paper 1.20.1 build whose login internals match, and it refuses to start when BungeeCord or Velocity forwarding is enabled.
• Name collisions between premium and offline players wait for a one-time administrator approval. See the identity policy guide in the repository.

Other changes

• A player without TrueUUID on the client is disconnected with a plain message asking them to install it.
• The offline-fallback chat notice is shorter and states that the account was not premium-verified.
• Join notices show a bold blue TrueUUID gradient, and a server started in an interactive terminal prints the same gradient at startup. Log files stay plain.

Upgrade notes for server owners

• If you relied on allowOfflineOnFailure = true to admit players while Mojang or the network was unavailable, those logins are now denied. Players on an offline launcher with TrueUUID installed are still handled by the offline-fallback policy.
• allowOfflineOnTimeout and the recentIpGrace keys remain in existing config files for compatibility. They are ignored.

Supported downloads

• Forge: 1.20.1, 1.20.2, 1.20.3, 1.20.4, 1.20.6, 1.21, 1.21.1, and 1.21.3 through 1.21.11.
• Fabric: every Minecraft release from 1.20.1 through 1.21.11.
• NeoForge: every Minecraft release from 1.20.1 through 1.21.11.
• Server plugins: Spigot 1.20.1 and Paper 1.20.1.

中文

TrueUUID 1.3.0 是面向所有 Forge、Fabric 与 NeoForge 构建的安全更新，同时
包含原本为 1.2.1 准备、但从未发布的精确补丁版本覆盖。本次发布共 52 个精确
Mod 构建，覆盖 Minecraft 1.20.1 至 1.21.11，并新增 Spigot 1.20.1 与 Paper 1.20.1
服务端插件。每个 Mod 构建的登录流程都通过了生产 JAR 真实登录验收：正版登录、
离线兜底、确认迁移和已验证名称拒绝。

安全修复

• 超时、客户端无响应或响应畸形、会话校验失败时，不再降级为离线放行。只有明确报告本地没有正版会话的 TrueUUID 客户端，才会进入离线兜底策略。
• 移除短时间同 IP 重连宽限。玩家重连时必须重新验证。
• 修复 Forge 与 NeoForge 的登录竞态：原版离线登录可能在 TrueUUID 校验开始前完成。Minecraft 1.20.2 及以上版本在 startClientVerification 安装鉴权关卡，1.20.1 则在设置登录档案后、Forge 发布协商状态前安装。Fabric 不受影响。
• 修复在代理、NAT 或 IPv4/IPv6 分流环境下正版验证返回 HTTP 204 而失败的问题。TrueUUID 不再向 hasJoined 接口发送服务端看到的客户端 IP。
• 修复 NeoForge 1.20.3 使用错误的 NeoForge 载荷包装、导致登录应答失败的问题。

新增构建

• Fabric 与 NeoForge：1.20.3、1.20.5、1.21、1.21.2、1.21.7 和 1.21.9。
• Forge：1.20.3、1.21、1.21.7 和 1.21.9。Forge 上游从未发布 Minecraft 1.20.5 或 1.21.2 的加载器。

新增服务端插件

• TrueUUID 现在可以作为插件运行在 Spigot 1.20.1 与 Paper 1.20.1 服务器上，无需服务端 Mod。插件需要 ProtocolLib 5.1.0 或更新版本。
• 安装了匹配 TrueUUID 客户端 Mod 的玩家通过 Mod 验证，未安装 Mod 的正版玩家通过常规 Mojang 登录验证。
• 插件兼容登录内部结构匹配的任意 Spigot 或 Paper 1.20.1 构建，并会在启用 BungeeCord 或 Velocity 转发时拒绝启动。
• 正版与离线玩家的名称冲突需要管理员一次性批准。详见仓库中的身份策略管理指南。

其他更新

• 客户端未安装 TrueUUID 的玩家会被断开连接，并看到提示其安装本 Mod 的纯文本信息。
• 离线兜底的聊天提示更简短，并明确说明该账号未通过正版验证。
• 进服提示中的 TrueUUID 以粗体蓝色渐变显示。在交互式终端中启动的服务器也会在启动时显示同样的渐变。日志文件保持纯文本。

服务器升级须知

• 如果此前依赖 allowOfflineOnFailure = true 在 Mojang 或网络不可用时放行玩家，这类登录现在会被拒绝。安装了 TrueUUID 的离线启动器玩家仍按离线兜底策略处理。
• allowOfflineOnTimeout 与 recentIpGrace 相关配置为兼容旧配置文件而保留，但会被忽略。

支持的下载

• Forge：1.20.1、1.20.2、1.20.3、1.20.4、1.20.6、1.21、1.21.1，以及 1.21.3 至 1.21.11。
• Fabric：1.20.1 至 1.21.11 的每个 Minecraft 正式版本。
• NeoForge：1.20.1 至 1.21.11 的每个 Minecraft 正式版本。
• 服务端插件：Spigot 1.20.1 与 Paper 1.20.1。

v1.2.0-TrueUUID

English

TrueUUID 1.2.0 is a major cross-loader update since 1.1.2. It expands the
previous Forge 1.20.1 and NeoForge 1.21.1 release to 36 exact builds across
Forge, Fabric, and NeoForge.

Highlights

• Added Fabric support and expanded Forge and NeoForge coverage across Minecraft 1.20.1, 1.20.2, 1.20.4, 1.20.6, 1.21.1, 1.21.3, 1.21.4, 1.21.5, 1.21.6, 1.21.8, 1.21.10, and 1.21.11. Each JAR targets one exact loader and Minecraft version.
• Added a localized account-status badge for Premium, Offline, Singleplayer, and Premium (LAN): it appears briefly in the HUD, fades after three seconds, and remains as the same lock-and-label badge in the pause menu. Private singleplayer now emits one status message; opening the world to LAN changes the chat and badge once to Premium (LAN).
• Added one private server-confirmed join result for the joining player, structured login audit logs, and optional operator-only notifications (off by default).
• Added the public, loader-neutral TrueuuidApi for addons to query account state, register login callbacks, and inspect protected verified names.
• Hardened Mojang/Yggdrasil verification, offline fallback, verified-name protection, migration handling, timeouts, and short same-IP reconnect grace.
• Fixed the profile-property handling that could leave Fabric 1.21.10 and 1.21.11 stuck on the negotiating screen, and repaired Forge 1.20.1 production Mixin packaging.
• Consolidated shared status timing, artwork, presentation, notification routing, and loader runtime behavior so version modules contain only narrow API-era seams.
• All 36 release targets passed build and packaging checks plus premium login, offline fallback, confirmed migration, and known-name denial acceptance tests. GitHub, Modrinth, and CurseForge publish the same tested JARs and this exact changelog.

中文

TrueUUID 1.2.0 是自 1.1.2 以来的一次重要跨加载器更新。支持范围从原有的
Forge 1.20.1 和 NeoForge 1.21.1 扩展到 Forge、Fabric 与 NeoForge 的 36 个精确构建。

主要更新

• 新增 Fabric 支持，并将 Forge 与 NeoForge 扩展到 Minecraft 1.20.1、1.20.2、1.20.4、1.20.6、1.21.1、1.21.3、1.21.4、1.21.5、1.21.6、1.21.8、1.21.10 和 1.21.11。每个 JAR 仅对应一个加载器和 Minecraft 版本。
• 新增正版、离线、单人模式与正版（局域网）的本地化账号状态徽章：在 HUD 中短暂显示，三秒后淡出，并在暂停菜单中持续显示相同的锁图标和文字。私有单人世界只提示一次；开放至局域网后，聊天与徽章会切换一次到正版（局域网）。
• 加入玩家仅收到一次服务器确认结果；服务器记录结构化登录审计，并可选择仅向管理员发送通知（默认关闭）。
• 新增跨加载器公开 TrueuuidApi，供附加模组查询账号状态、注册登录回调并检查受保护的已验证名称。
• 加强 Mojang/Yggdrasil 验证、离线回退、已验证名称保护、迁移处理、超时控制和短时间同 IP 重连宽限。
• 修复可能导致 Fabric 1.21.10 和 1.21.11 卡在“正在协商”界面的 profile 属性处理问题，并修复 Forge 1.20.1 生产 JAR 的 Mixin 打包。
• 统一了状态计时、图案、显示信息、通知路由与加载器运行逻辑，各版本模块只保留必要的 API 时代适配层。
• 全部 36 个发布目标均通过构建和打包检查，以及正版登录、离线回退、确认迁移和已验证名称拒绝验收。GitHub、Modrinth 与 CurseForge 将发布同一批已测试 JAR 和这份完全一致的更新日志。

v1.0.2-TrueUUID

修复重大BUG
开放公共查询账号状态API

v1.0.1-TrueUUID

Changelog

All notable changes to this project will be documented in this file.
This project adheres to Keep a Changelog and Semantic Versioning (when applicable).

Added

• Name Registry to record names that have successfully verified as premium (name -> premium UUID).
• Policy: knownPremiumDenyOffline — once a name verifies as premium, deny offline fallback for that name on future failures.
• Policy: allowOfflineForUnknownOnly — allow offline fallback only for names that have never verified as premium.
• Recent IP Grace window (configurable TTL) to temporarily allow premium session if same name+IP recently verified.
• Admin command: /trueuuid link <name> with dry-run and backups to migrate/merge offline data to the premium UUID.
• Short Title subtitles configuration: auth.offlineShortSubtitle, auth.onlineShortSubtitle.

Changed

• Configuration documented and expanded:
  • auth.knownPremiumDenyOffline = true
  • auth.allowOfflineForUnknownOnly = true
  • auth.recentIpGrace.enabled = true
  • auth.recentIpGrace.ttlSeconds = 300 (defaults)
• Improved user messaging: clearer offline fallback chat message.

Fixed

• Client sometimes only showed “Disconnected” without reason on Forge 1.20.1 login stage:
  • Server now explicitly sends Login and Game disconnect packets before closing to ensure the client displays the reason.

Notes

• Recent IP Grace is for usability, not strong security. Use a small TTL and avoid shared networks if possible.

更新日志

本项目遵循 Keep a Changelog 规范，重要变更会记录在此。

新增

• 名字注册表：记录“已成功通过正版校验”的名字及其正版 UUID（name -> premiumUUID）。
• 策略：knownPremiumDenyOffline — 一旦某名字曾验证为正版，后续鉴权失败时禁止离线兜底。
• 策略：allowOfflineForUnknownOnly — 仅“从未验证为正版”的名字允许离线兜底。
• 近期同 IP 容错窗口（可配置 TTL）：若同名同 IP 近期成功，本次失败可临时按正版处理。
• 管理命令：/trueuuid link <name>，支持 dry-run 与备份，将离线 UUID 的数据迁移/合并到正版 UUID。
• 标题短副标题可配：auth.offlineShortSubtitle、auth.onlineShortSubtitle。

变更

• 配置扩展并完善默认值：
  • auth.knownPremiumDenyOffline = true
  • auth.allowOfflineForUnknownOnly = true
  • auth.recentIpGrace.enabled = true
  • auth.recentIpGrace.ttlSeconds = 300
• 离线兜底的聊天提示文案更清晰。

修复

• Forge 1.20.1 登录阶段客户端有时仅显示“连接中断”而无详细原因：
  • 服务器端在断开前显式发送登录与游戏断开包，确保客户端能显示自定义原因。

说明

• “同 IP 容错”偏向可用性，并非强安全。建议缩短 TTL，公共/共享网络慎用。