Account Manager v1.0.1

v1.0.1 Changelog

Account Manager v1.0.1 is a security and reliability maintenance release focused on improving authentication session handling, network reliability, and build security.

Security & Reliability

• Improved authentication session handling to prevent stale asynchronous operations from restoring cleared account state
• Centralized Microsoft and Minecraft access-token state in a thread-safe in-memory session
• Added session-generation validation for authentication and Minecraft Services operations
• Minecraft profile, skin upload, and IGN change requests now verify that they still belong to the active session
• Added connection and request timeouts for Xbox Live, XSTS, and Minecraft Services requests
• Added a 2 MB maximum skin-file size check before upload
• Updated Microsoft Authentication Library for Java (MSAL4J) from 1.19.1 to 1.26.0
• Pinned third-party GitHub Actions to exact commit SHAs
• Added SHA-256 verification for the Gradle 9.5.1 distribution

Changed

• Refactored internal authentication-session handling
• Improved Clear Account behavior by invalidating previous authentication operations
• Updated project version to 1.0.1

Requirements

• Minecraft: Java Edition 26.1.2
• Fabric Loader 0.19.3+
• Fabric API
• Java 25+

Known Limitation — Minecraft Services Authorization

Account Manager's Minecraft Services application is still awaiting allow-list approval from Minecraft.

Until authorization is granted, Minecraft profile-service features may return:

App Not Authorized

This may temporarily affect:

• Minecraft profile loading
• IGN / UUID retrieval
• Skin uploading
• Minecraft profile-name changes

Microsoft browser-based sign-in itself remains implemented and functional.

Account Manager uses its own Microsoft Entra public-client registration and does not use another application's Client ID or attempt to bypass Minecraft Services authorization.

Security

Authentication tokens are kept in memory and are not intentionally written to disk, displayed in the UI, or shared with third parties.

Never share Microsoft passwords, access tokens, refresh tokens, authorization codes, Xbox tokens, or XSTS tokens when requesting support.

Download

Install the normal release file:

account-manager-1.0.1.jar

Do not install a -sources.jar as the normal mod.

---

Made by te5r.
Discord: @te5rontop

Account Manager v1.0.0

First public release of Account Manager for Minecraft: Java Edition 26.1.2 using Fabric.

Features

• Microsoft sign-in using the system browser
• Account Manager interface integrated into the Multiplayer screen
• Minecraft profile viewer
• IGN and UUID display
• Current skin preview
• Skin PNG selection and validation
• Classic / Slim skin model preview
• Minecraft skin upload integration
• Minecraft IGN change integration
• Manual profile refresh
• Authentication state stored only in memory
• Custom Account Manager UI and branding

Requirements

• Minecraft: Java Edition 26.1.2
• Fabric Loader 0.19.3+
• Fabric API
• Java 25+

⚠️ Known Limitation — Minecraft Services Authorization

Microsoft authentication is implemented and functional.

However, Minecraft manually reviews and allowlists new third-party applications that access Minecraft Java Edition service APIs.

Account Manager's application is currently awaiting Minecraft Services authorization.

Until authorization is granted, Minecraft profile-service features may return:

App Not Authorized

This may affect features such as:

• Minecraft profile loading
• IGN / UUID retrieval
• Skin uploading
• Minecraft name changes

Account Manager does not use another application's Client ID and does not attempt to bypass Minecraft Services authorization.

This notice will be removed once the application has been approved by Minecraft.

Security

Authentication is performed through Microsoft's official browser-based OAuth flow.

Account Manager does not intentionally store access tokens, refresh tokens, Xbox/XSTS tokens, or passwords on disk.

Never share authentication tokens or Microsoft credentials when reporting an issue.

Download

Use:

account-manager-1.0.0.jar

Do not install a -sources.jar as the normal mod.

---

Made by te5r.
Discord: @te5rontop