Microsoft sign-in is gone. Server accounts now receive Yggdrasil tokens
from the panel and launch with authlib-injector pointed at the panel's
auth server, so online-mode servers verify players against it.
- Download authlib-injector from the panel mirror (fallback: official),
SHA-256 verified and cached, with prefetched metadata
- New Skin & cape settings tab: upload, arm style, reset, cape picker
with front/back previews
- Avatars render from the panel's head endpoint
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_011ARcGWxLx21FwXJ3yfGriS
- Yggdrasil API per the authlib-injector spec: metadata with signing key
and skin domains, authenticate/refresh/validate/invalidate/signout,
join/hasJoined, profile lookup, texture upload, and the minecraftservices
endpoints (chat certificates, publickeys, attributes, blocklist)
- 4096-bit signing key generated once into the data volume; textures and
chat certificates signed SHA1withRSA (verified with Java's own crypto)
- Skins/capes stored content-addressed after validation and re-encoding;
cape library with public/group/private visibility; head avatars API
- Launcher login returns a game session; launcher sessions recorded for
launcher-only servers; authlib-injector download mirror
- Schema v2: player UUIDs (offline UUID backfilled), skins, capes, tokens,
sessions, chat keys, game server tables
- Remove Microsoft sign-in from the engine and panel
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_011ARcGWxLx21FwXJ3yfGriS
- Accounts: panel login/sign-up, Microsoft device-code sign-in, offline
play; tokens encrypted with a key kept in the OS credential store
- Home: instance rail, live server status, news feed, social links,
Play button with download progress, speed and ETA
- Full settings: accounts, memory/resolution/after-launch behaviour,
Java and GC presets, Minecraft keybind editor applied to options.txt,
theme overrides, storage manager, self-update via GitHub releases
- Game console, crash dialog with hints, per-instance overrides
- Live admin branding (colours, fonts, backgrounds, custom CSS)
- Online install tests for vanilla/Fabric/Quilt/Forge/NeoForge (CI)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_011ARcGWxLx21FwXJ3yfGriS
scoped