v1.0.1 Changelog
Account Manager v1.0.1 is a security and reliability maintenance release focused on improving authentication session handling, network reliability, and build security.
Security & Reliability
- Improved authentication session handling to prevent stale asynchronous operations from restoring cleared account state
- Centralized Microsoft and Minecraft access-token state in a thread-safe in-memory session
- Added session-generation validation for authentication and Minecraft Services operations
- Minecraft profile, skin upload, and IGN change requests now verify that they still belong to the active session
- Added connection and request timeouts for Xbox Live, XSTS, and Minecraft Services requests
- Added a 2 MB maximum skin-file size check before upload
- Updated Microsoft Authentication Library for Java (MSAL4J) from 1.19.1 to 1.26.0
- Pinned third-party GitHub Actions to exact commit SHAs
- Added SHA-256 verification for the Gradle 9.5.1 distribution
Changed
- Refactored internal authentication-session handling
- Improved Clear Account behavior by invalidating previous authentication operations
- Updated project version to 1.0.1
Requirements
- Minecraft: Java Edition 26.1.2
- Fabric Loader 0.19.3+
- Fabric API
- Java 25+
Known Limitation — Minecraft Services Authorization
Account Manager's Minecraft Services application is still awaiting allow-list approval from Minecraft.
Until authorization is granted, Minecraft profile-service features may return:
App Not Authorized
This may temporarily affect:
- Minecraft profile loading
- IGN / UUID retrieval
- Skin uploading
- Minecraft profile-name changes
Microsoft browser-based sign-in itself remains implemented and functional.
Account Manager uses its own Microsoft Entra public-client registration and does not use another application's Client ID or attempt to bypass Minecraft Services authorization.
Security
Authentication tokens are kept in memory and are not intentionally written to disk, displayed in the UI, or shared with third parties.
Never share Microsoft passwords, access tokens, refresh tokens, authorization codes, Xbox tokens, or XSTS tokens when requesting support.
Download
Install the normal release file:
account-manager-1.0.1.jar
Do not install a -sources.jar as the normal mod.
Made by te5r.
Discord: @te5rontop
