games647 / FastLogin

Checks if a minecraft player has a valid paid account. If so, they can skip offline authentication automatically. (premium auto login)
https://www.spigotmc.org/resources/fastlogin.14153
MIT License
494 stars 121 forks source link

Genuine users cannot automatically log in and register #1055

Closed CaliGrosto closed 4 months ago

CaliGrosto commented 1 year ago

What happened?

[23:04:47 INFO]: [FastLogin] New packet START[class=PacketLoginInStart, id=0] from com.comphenix.protocol.injector.temporary.TemporaryPlayerInvocationHandler@68339e2b
[23:04:48 INFO]: [FastLogin] Handling player Takanashi_Kira
[23:04:48 INFO]: [FastLogin] Requesting premium login for registered player: Takanashi_Kira
[23:04:51 INFO]: [FastLogin] New packet ENCRYPTION_BEGIN[class=PacketLoginInEncryptionBegin, id=1] from com.comphenix.protocol.injector.temporary.TemporaryPlayerInvocationHandler@68339e2b
[23:04:51 INFO]: [FastLogin] Enabling onlinemode encryption for /127.0.0.1:59468
[23:04:52 ERROR]: [FastLogin] GameProfile Takanashi_Kira (/127.0.0.1:59468) tried to log in with an invalid session. ServerId: 7151f85f9387902a175fa5828f4d3a7d9354b4a9
[23:04:52 INFO]: /127.0.0.1:59468 lost connection: Disconnected

After following the tutorial, an error occurred in the backend of the server

What did you expect?

No response

Steps to reproduce

No response

Plugin list

Authme ProtocolLib FastLogin

Configuration file

No response

Server log

No response

Plugin version

1.20.1

Platform

Spigot

Relevance

WsJohn commented 1 year ago

Same problems to me. Some premium players can login normally others don't. Changing a network connection would work for some players, but not sure what cause this issue. Plugin list AdvancedLogin ProtocolLib FastLogin plugin version 1.20.1 platform purpur

games647 commented 1 year ago

Enabling onlinemode encryption for /127.0.0.1

tried to log in with an invalid session. ServerId: 7151f85f9387902a175fa5828f4d3a7d9354b4a9

127.0.0.1 is a loopback address. So you are using some form of proxy. FastLogin asks Mojang to verify the origin of the connecting IP with the address Mojang received to prevent proxy attacks. This setting is configurable, but it's advised to leave it enabled. It is more important to fix the forwarding of real IP address to your server in order that other plugins also work fine like IP bans.

If you are using BungeeCord/Waterfall or Velocity, you need to enable IP forwarding and follow the respective setup guide for FastLogin. Based on existing tickets another used solution is TCPShield. They have an additional plugin to provide this feature. If you another solution in place, you need to check how it can provide the actual client IP to the server not the proxy IP.

CaliGrosto commented 1 year ago

为 /127.0.0.1 启用联机模式加密

尝试使用无效会话登录。服务器 Id: 7151f85f9387902a175fa5828f4d3a7d9354b4a9

127.0.0.1是一个环回地址。所以你正在使用某种形式的代理。FastLogin要求Mojang使用Mojang收到的地址验证连接IP的来源,以防止代理攻击。此设置是可配置的,但建议将其保持启用状态。更重要的是修复将真实IP地址转发到您的服务器,以便其他插件也可以像IP禁令一样正常工作。

如果您使用的是BungeeCord/Waterfall或Velocity,则需要启用IP转发并遵循FastLogin的相应设置指南。基于现有的票证,另一个使用的解决方案是TCPShield。他们有一个额外的插件来提供此功能。如果采用其他解决方案,则需要检查它如何向服务器提供实际的客户端 IP,而不是代理 IP。

Thank you, I understand