Microsoft Authentication Scheme - Revision history

imported>Rigner: Added some Xbox Live error codes I saw happening

2024-11-06T15:51:46Z

Added some Xbox Live error codes I saw happening

← Older revision		Revision as of 15:51, 6 November 2024
Line 113:		Line 113:
	Noted XErr codes and their meanings:		Noted XErr codes and their meanings:

			* '''2148916227''': The account is banned from Xbox.
	* '''2148916233''': The account doesn't have an Xbox account. Once they sign up for one (or login through minecraft.net to create one) then they can proceed with the login. This shouldn't happen with accounts that have purchased Minecraft with a Microsoft account, as they would've already gone through that Xbox signup process.		* '''2148916233''': The account doesn't have an Xbox account. Once they sign up for one (or login through minecraft.net to create one) then they can proceed with the login. This shouldn't happen with accounts that have purchased Minecraft with a Microsoft account, as they would've already gone through that Xbox signup process.
	* '''2148916235''': The account is from a country where Xbox Live is not available/banned		* '''2148916235''': The account is from a country where Xbox Live is not available/banned
Line 118:		Line 119:
	* '''2148916237''': The account needs adult verification on Xbox page. (South Korea)		* '''2148916237''': The account needs adult verification on Xbox page. (South Korea)
	* '''2148916238''': The account is a child (under 18) and cannot proceed unless the account is added to a Family by an adult. This only seems to occur when using a custom Microsoft Azure application. When using the Minecraft launchers client id, this doesn't trigger.		* '''2148916238''': The account is a child (under 18) and cannot proceed unless the account is added to a Family by an adult. This only seems to occur when using a custom Microsoft Azure application. When using the Minecraft launchers client id, this doesn't trigger.
			* '''2148916262''': <i>TBD, happens rarely without any additional information.</i>

	== Authenticate with Minecraft ==		== Authenticate with Minecraft ==

imported>TreSer: Added cape data to profile information

2024-09-14T17:59:07Z

Added cape data to profile information

← Older revision		Revision as of 17:59, 14 September 2024
Line 249:		Line 249:
	"alias" : "STEVE"		"alias" : "STEVE"
	} ],		} ],
	"capes" : [ ]		"capes" : [ {
			"id": "5af20372-79e0-4e1f-80f8-6bd8e3135995",
			"state": "ACTIVE",
			"url": "http://textures.minecraft.net/texture/2340c0e03dd24a11b15a8b33c2a7e9e32abb2051b2481d0ba7defd635ca7a933",
			"alias": "Migrator"
			} ]
	}		}
	</syntaxhighlight>		</syntaxhighlight>

imported>Uku: add `d=` prefix to Xbox Live authentication; using the token by itself will simply not work

2024-08-01T00:09:09Z

add `d=` prefix to Xbox Live authentication; using the token by itself will simply not work

← Older revision		Revision as of 00:09, 1 August 2024
Line 27:		Line 27:
	"AuthMethod": "RPS",		"AuthMethod": "RPS",
	"SiteName": "user.auth.xboxlive.com",		"SiteName": "user.auth.xboxlive.com",
	"RpsTicket": "<access token>" // your access token from the previous step here		"RpsTicket": "d=<access token>" // your access token from the previous step here, make sure that it is prefixed with `d=`
	},		},
	"RelyingParty": "http://auth.xboxlive.com",		"RelyingParty": "http://auth.xboxlive.com",

imported>Patyhank: /* Authenticate with Xbox Live */ RpsTicket with d= will causing bad request

2024-07-25T12:05:39Z

Authenticate with Xbox Live: RpsTicket with d= will causing bad request

← Older revision		Revision as of 12:05, 25 July 2024
Line 27:		Line 27:
	"AuthMethod": "RPS",		"AuthMethod": "RPS",
	"SiteName": "user.auth.xboxlive.com",		"SiteName": "user.auth.xboxlive.com",
	"RpsTicket": "d=<access token>" // your access token from the previous step here		"RpsTicket": "<access token>" // your access token from the previous step here
	},		},
	"RelyingParty": "http://auth.xboxlive.com",		"RelyingParty": "http://auth.xboxlive.com",

imported>SSSSSteven: Mojang deleted errorType and developerMessage in "Getting the profile" error response

2024-06-15T15:26:07Z

Mojang deleted errorType and developerMessage in "Getting the profile" error response

← Older revision		Revision as of 15:26, 15 June 2024
Line 258:		Line 258:
	{		{
	"path" : "/minecraft/profile",		"path" : "/minecraft/profile",
	~~"errorType" : "NOT_FOUND",~~
	"error" : "NOT_FOUND",		"error" : "NOT_FOUND",
	"errorMessage~~" : "The server has not found anything matching the request URI",~~		"errorMessage" : "The server has not found anything matching the request URI"
	~~"developerMessage~~" : "The server has not found anything matching the request URI"
	}		}
	</syntaxhighlight>		</syntaxhighlight>

imported>RaphiMC: Added MinecraftAuth library to sample implementations

2024-05-08T20:43:16Z

Added MinecraftAuth library to sample implementations

← Older revision		Revision as of 20:43, 8 May 2024
Line 277:		Line 277:

	A rough sample implementation in Java (using javafx and its webview) [https://github.com/MiniDigger/MiniLauncher/blob/master/launcher/src/main/java/me/minidigger/minecraftlauncher/launcher/gui/MsaFragmentController.java here].		A rough sample implementation in Java (using javafx and its webview) [https://github.com/MiniDigger/MiniLauncher/blob/master/launcher/src/main/java/me/minidigger/minecraftlauncher/launcher/gui/MsaFragmentController.java here].

			A fully working Java library supporting 4 login flows can be found [https://github.com/RaphiMC/MinecraftAuth here].

	An implementation in Go [https://gist.github.com/rbrick/be8ed86864fc5d77aa6c979053cfc892 here].		An implementation in Go [https://gist.github.com/rbrick/be8ed86864fc5d77aa6c979053cfc892 here].

imported>Dewycube: /* Sample Implementations */ add authentication example in python

2024-05-08T20:27:22Z

Sample Implementations: add authentication example in python

← Older revision		Revision as of 20:27, 8 May 2024
Line 270:		Line 270:

	== Sample Implementations ==		== Sample Implementations ==
			[https://gist.github.com/dewycube/223d4e9b3cddde932fbbb7cfcfb96759 minecraft_auth.py]: Authentication like the launcher does (i.e. code flow) + refresh token request.

	A fully working kotlin implementation can be found [https://gitlab.bixilon.de/bixilon/minosoft/-/blob/master/src/main/java/de/bixilon/minosoft/util/account/microsoft/MicrosoftOAuthUtils.kt] here using device tokens.		A fully working kotlin implementation can be found [https://gitlab.bixilon.de/bixilon/minosoft/-/blob/master/src/main/java/de/bixilon/minosoft/util/account/microsoft/MicrosoftOAuthUtils.kt] here using device tokens.

imported>LassiPulkkinen: Add Category:Minecraft Modern.

2024-02-26T18:43:57Z

Add Category:Minecraft Modern.

← Older revision		Revision as of 18:43, 26 February 2024
Line 292:		Line 292:

	A PHP library can be found [https://github.com/Aberdeener/minecraft-oauth/ here].		A PHP library can be found [https://github.com/Aberdeener/minecraft-oauth/ here].

			[[Category:Minecraft Modern]]

imported>JakobDev: Mention that you now need to apply for Permission to use the Azure App with the Minecraft API

2023-06-15T17:48:57Z

Mention that you now need to apply for Permission to use the Azure App with the Minecraft API

← Older revision		Revision as of 17:48, 15 June 2023
Line 10:		Line 10:

	In any case, you'll need to include <code>XboxLive.signin</code> in the <code>scope</code> parameter of the authorization request; otherwise the next endpoint will complain, and not in a helpful way.		In any case, you'll need to include <code>XboxLive.signin</code> in the <code>scope</code> parameter of the authorization request; otherwise the next endpoint will complain, and not in a helpful way.

			According to [https://help.minecraft.net/hc/en-us/articles/16254801392141p this support Article], new created Azure Apps must apply for the Permission to use the Minecraft API using [https://aka.ms/mce-reviewappid this form]. If your App don't have the Permission <code>api.minecraftservices.com</code> will return a 403.

	<i>Note: You <b>must</b> use the <code>consumers</code> AAD tenant to sign in with the <code>XboxLive.signin</code> scope. Using an Azure AD tenant ID or the <code>common</code> scope will just give errors. This also means you cannot sign in with users that are in the AAD tenant, only with consumer Microsoft accounts.</i>		<i>Note: You <b>must</b> use the <code>consumers</code> AAD tenant to sign in with the <code>XboxLive.signin</code> scope. Using an Azure AD tenant ID or the <code>common</code> scope will just give errors. This also means you cannot sign in with users that are in the AAD tenant, only with consumer Microsoft accounts.</i>

imported>L GS: Updated Python implementation link to a non-outdated version of the same repository, since the creator has switched to a different hosting service.

2023-04-20T12:18:16Z

Updated Python implementation link to a non-outdated version of the same repository, since the creator has switched to a different hosting service.

← Older revision		Revision as of 12:18, 20 April 2023
Line 279:		Line 279:
	An implementation in JS can be found [https://github.com/PrismarineJS/node-minecraft-protocol/blob/master/src/client/microsoftAuth.js here] and one using JS/TS [https://gist.github.com/Plagiatus/ce5f18bc010395fc45d8553905e10f55 here]		An implementation in JS can be found [https://github.com/PrismarineJS/node-minecraft-protocol/blob/master/src/client/microsoftAuth.js here] and one using JS/TS [https://gist.github.com/Plagiatus/ce5f18bc010395fc45d8553905e10f55 here]

	An implementation in Python can be found [https://~~gitlab~~.~~com~~/JakobDev/minecraft-launcher-lib/-/~~blob~~/master/minecraft_launcher_lib/microsoft_account.py here]		An implementation in Python can be found [https://codeberg.org/JakobDev/minecraft-launcher-lib/src/branch/master/minecraft_launcher_lib/microsoft_account.py here]

	An implementation in Rust can be found [https://gist.github.com/OverHash/a71b32846612ba09d8f79c9d775bfadf here].		An implementation in Rust can be found [https://gist.github.com/OverHash/a71b32846612ba09d8f79c9d775bfadf here].