GeyserMC / Floodgate

Hybrid mode plugin to allow for connections from Geyser to join online mode servers.
https://geysermc.org
MIT License
569 stars 169 forks source link

Players logged in as floodgate do not seem to check the whitelist #531

Closed kulipaa closed 2 months ago

kulipaa commented 2 months ago

Hey, today when I was configuring the whitelist, I found that Bedrock users who were not on the whitelist could still join the server unimpeded.

The wiki only found how to add players to the whitelist

I would like to ask if Bedrock players logging in using the Floodgate plugin will bypass the whitelist check. Thanks🙂

Camotoy commented 2 months ago

Please send a Geyser dump - this should not happen.

kulipaa commented 2 months ago

Geyser-Spigot.zip

Camotoy commented 2 months ago

Thank you for sending that, but this is what we're looking for:

Run geyser dump (server console) / /geyser dump (ingame chat) on your Geyser instance or server, then copy the link it will give you and paste it here. A Geyser dump is a way of providing us with a bunch of useful information about your server and Geyser config. This doesn't include any IPs or sensitive data.

kulipaa commented 2 months ago

sorry https://dump.geysermc.org/95Mabn1GVjSrI3yewT7LwZEyYB5Abmmr

kulipaa commented 2 months ago

Before I added the player to the whitelist (using / whitelist add), which was later cancelled, Turns out he still has access to the server

Camotoy commented 2 months ago

Is he present in the whitelist.json file?

kulipaa commented 2 months ago

He is no longer on the whitelist

Camotoy commented 2 months ago

Was that player given operator status?

kulipaa commented 2 months ago

no

Camotoy commented 2 months ago

Does this issue persist if you switch to Paper?

kulipaa commented 2 months ago

I'll try again in the morning, thanks

kulipaa commented 2 months ago

Sorry for the trouble, I only turned on enforce_whitelist, not white_list.