Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug Report] 不兼容 authlib-injector 1.2.0 #56

Closed
2 tasks
yushijinhun opened this issue Aug 5, 2022 · 3 comments
Closed
2 tasks

[Bug Report] 不兼容 authlib-injector 1.2.0 #56

yushijinhun opened this issue Aug 5, 2022 · 3 comments
Labels
bug Something isn't working

Comments

@yushijinhun
Copy link

Bug Description

当用户使用 authlib-injector 1.2.0 的客户端,进入使用 MultiLogin 的 1.19+ 服务器时,会报 Invalid signature for profile public key. Try restarting your game. 错误。

细节请参考 authlib-injector v1.2.0 Release Notes 以及 yushijinhun/authlib-injector#158。authlib-injector 为了应对 Minecraft 1.19 的聊天消息签名机制,在 v1.2.0 版本中会向服务端发送一个随机生成的 Profile Key,以及内容为一个零字节的数字签名,代码实现参考此处。服务端校验 Profile Key 的签名时,不论内容如何,校验结果应始终通过,代码实现参考此处

这一改动将消除聊天消息中的感叹号,并且将允许服务端开启 enforce-secure-profile,以消除进入服务器时聊天消息可能被修改的警告。

但因为不论服务端是否启用 enforce-secure-profile,只要客户端发送了 Profile Key,服务端始终会校验其数字签名,并且在签名无效的情况下将会断开链接。因此,服务端必须使用措施绕过签名校验。对于使用 authlib-injector 的服务端,将版本升级到 v1.2.0 即可;而对于使用 MultiLogin 的服务端,目前 MultiLogin 暂不支持此功能。

MultiLogin Version

All versions

System Architecture

All architectures

Configurations

N/A

Logs

No response

Steps to reproduce

No response

Affected area

  • I included all information required in the sections above
  • I made sure there are no duplicates of this report (Use Search)
@MuelsyseKen
Copy link

刚刚遇到一样的问题,原来是这个原因。

@CaaMoe CaaMoe added the bug Something isn't working label Aug 8, 2022
@2623684696
Copy link

还好我还没用

@CaaMoe CaaMoe mentioned this issue Aug 13, 2022
2 tasks
@CaaMoe
Copy link
Owner

CaaMoe commented Aug 14, 2022

v0.3.16
v0.5.0-ALPHA.5

@CaaMoe CaaMoe closed this as completed Sep 9, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

4 participants