Fabric mod to (maybe) ignore global bans while still using the auth server

Overview
=== SECURITY WARNING ===
DO NOT USE THIS MOD IF YOU DO NOT 100% TRUST THE SERVER NOT TO STEAL YOUR ACCOUNT. This mod is not secure because servers will unavoidably have the opportunity to steal access tokens (because they have to be sent to the auth server decrypted), and this implementation is currently vulnerable to man-in-the-middle attacks. If, while using this mod, you do join a server that you do not trust completely, you will need to invalidate your access token. In the official launcher, this can be done by signing out. In MultiMC, you can also sign out, or you can use the 'Refresh' button in the account manager. These actions will cause a new access token to be generated and invalidate the old one.

This is a fabric mod to ignore the global ban system. It must be installed on both the client and the server to ignore bans, but vanilla clients will be able to connect to a server running this mod. A client running this mod will not be able to connect to a server without this mod.

This mod works by sending the information used by the client for authentication to the server. The server then authenticates as a client, ignoring any ban or insufficient privilege errors. This works because when a client authenticates usiong the /join API endpoint, the error is specific. If the error is a ban error, then it can be ignored by the client if the client is modified to do so. However, servers use the /hasJoined API endpoint. That endpoint returns nothing if it is unsuccessful, so servers have no way to tell if a client is banned. This mod changes that by having servers try authenticating using what is normally client-side information before disconnecting the client. If that authentication process returns a ban error (or an insufficient privileges error, I felt like disabling those as well), then it will be ignored and the client will be allowed to join.

This mod has recieved very little testing. I only know that an unbanned client can connect to a server. I assume that nobody wants to get banned for testing purposes, so we'll have to wait and see if it actually works.
You might also like...

This project demonstrates reference implementation of Auth API Client

Client Application to test Auth API for OTP verification. Introduction Aadhaar “authentication” means the process wherein Aadhaar Number or Virtual ID

Oct 27, 2021

💡极致性能的企业级Java服务器框架,RPC,游戏服务器框架,web应用服务器框架。(Extreme fast enterprise Java server framework, can be RPC, game server framework, web server framework.)

💡极致性能的企业级Java服务器框架,RPC,游戏服务器框架,web应用服务器框架。(Extreme fast enterprise Java server framework, can be RPC, game server framework, web server framework.)

👉 为性能而生的万能服务器框架 👈 Ⅰ. zfoo简介 🚩 性能炸裂,天生异步,Actor设计思想,无锁化设计,基于Spring的MVC式用法的万能RPC框架 极致序列化,原生集成的目前二进制序列化和反序列化速度最快的 zfoo protocol 作为网络通讯协议 高可拓展性,单台服务器部署,

Jan 1, 2023

BurritoSpigot is a fork of TacoSpigot 1.8.9 that offers several enhancements to performance as well as bug fixes. while offer extra APIs and support for plugins

🌯 BurritoSpigot 🌯 BurritoSpigot is a fork of TacoSpigot 1.8.8 that offers several enhancements to performance as well as bug fixes. while offer extr

Dec 20, 2022

Collection of homework assignments I did for myself and for others while as an undergrad @ UNLV.

Collection of homework assignments I did for myself and for others while as an undergrad @ UNLV.

Mona Lisa Collection of homework assignments I did for myself and for others while as an undergrad @ UNLV. If you have questions or concerns please fe

May 10, 2022

WordleCompanion - A tool to help you determine those hard-to-guess words while doing your daily Wordle puzzles.

A tool to help you determine those hard-to-guess words while doing your daily Wordle puzzles. How it works Enter the 5-letter word you

Jan 22, 2022

Very briefly capturing some of new/ update in API that were introduced after Java 8 that may come handy for dev folks while programming

Very briefly capturing some of new/ update in API that were introduced after Java 8 that may come handy for dev folks while programming. Also have created tests demonstrating those APIs and playaround with it.

Jan 24, 2022

Example usage of work manager in Android, while doing this study, image downloading was preferred as a method.

Example usage of work manager in Android, while doing this study, image downloading was preferred as a method.

android-workmanager-example Example usage of work manager in Android, while doing this study, image downloading was preferred as a method. Java 11 com

Jan 29, 2022

jedibot is an application that aims to do beneficial actions on the Ethereum blockchain for the DeFi ecosystem while earning a profit for the user.

jedibot is an application that aims to do beneficial actions on the Ethereum blockchain for the DeFi ecosystem while earning a profit for the user. These actions include maintaining the DAI peg, providing liquidity and liquidating undercollateralized assets.

Feb 5, 2022

Android Application for a user’s favorite Movies, TV shows and Anime while keeping up to date with the latest releases.

MovieDroid Native Android Application for organized and categorized list of a user’s favorite movies and TV shows while keeping up to date with the la

Dec 26, 2022
Releases(v1.0.0-alpha.5)
Owner
null
Some anti afk bot which prevents you from getting punished for going afk in games. Way of stopping the bot is slightly flawed but we'll ignore that.

AntiAFK Some anti afk bot which prevents you from getting punished for going afk in games. Gui mode coming soon... Installation Install Java 17. Downl

flasky 1 Jan 13, 2022
Text to Speech Project for Spring Boot and Kotlin, Auth Server, Python with Fast API (gTTS)

TTS-App Text to Speech Project for Spring Boot Module (etc Resource, Auth Server, Python with Fast API (gTTS)) Python의 gTTS lib를 활용하여 텍스트를 음성으로 변환하는 서

Seokhyun 7 Dec 21, 2021
LimboAuth - Minecraft Auth System for Velocity proxy built in virtual server (Limbo).

LimboAuth Auth System built in virtual server (Limbo). MC-Market SpigotMC.org Описание и обсуждение на русском языке (spigotmc.ru) Описание и обсужден

Elytrium 89 Jan 4, 2023
Conway's Game Of Life, but made by me in a very inefficient and unpractical way. Still, I am proud!

Conway's Game Of Life, but made by me in a very ugly and inefficient way. Still, I am proud! I want to share my appreciation to cellular automata with anyone who comes across this repo.

Ulaş Dilek 6 May 25, 2022
Velocity global chat/discord bridge

VelocityDiscord Velocity global chat/discord bridge Default config generated on startup: # Don't change this config_version="1" [discord] # Bot token

Foo 8 Dec 18, 2022
GalaxyCDC is a core component of PolarDB-X which is responsible for global binary log generation, publication and subscription.

中文文档 What is ApsaraDB GalaxyCDC ? GalaxyCDC is a core component of PolarDB-X which is responsible for global binary log generation, publication and su

null 56 Dec 19, 2022
Add custom auth options (e.g. face unlock) to your phone using Xposed.

UniversalAuth This project aims to bring a variety of custom authentication options to various Android ROMs. Your phone needs to have Xposed (or EdXpo

Andy Bao 134 Dec 29, 2022
Template mod to make an addon mod for Create fabric.

Create Fabric Addon Template This template mod comes pre-configured for developing an addon mod for Create on Fabric. Setup For environment setup inst

null 14 Dec 29, 2022
CobaltStrike and Google Auth twice

GoogleAuth 基于cobaltStrike的谷歌二次验证 语言:Java 目的:实现在多人联合中的安全验证 原文:https://my.oschina.net/u/4587690/blog/5161930 开发原因:很简单,原文没有源代码。也没有jar包,不能“拿来吧你”。所以就自己写算了。

null 58 Dec 20, 2022
This project shows how to configure basic auth to secure our rest API and basic transaction on Data JPA

Basic Atuthentication Spring Boot Data JPA, MySQL This project shows how to configure basic auth to secure our rest API and basic transaction on Data

Hafizullah Samim 1 Feb 10, 2022