Uploaded image for project: 'Minecraft Launcher'
  1. Minecraft Launcher
  2. MCL-862

Client token collisions can prevent players from logging in to servers

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Resolution: Fixed
    • Affects Version/s: 1.0.8
    • Fix Version/s: 1.0.9
    • Component/s: None
    • Labels:
    • Environment:
      not relevant
    • Confirmation Status:
      Confirmed

      Description

      The new launcher creates a random UUID which is stored as the clientToken in the launcher_profiles.json file. As far as I can tell there is no system in place to prevent two clients from generating the same UUID.

      When two clients log in with the same UUID, the first client's session gets invalidated, preventing him from joining any servers. The error message displayed is:

      Failed to login: Bad login

      It should be possible to log in to multiple accounts with the same UUID or there needs to be a system to prevent collision. (There are some pieces of code in the launcher suggesting that such a system is in the works.)

      Steps to reproduce:

      • Start client 1 on computer 1
      • Log in on client 1 using account 1 (don't use the auto-login feature)
      • Copy the generated launcher_profiles.json from computer 1 to computer 2
      • Start client 2 on computer 2
      • Log in on client 2 using account 2
      • Join a server with client 1

      (This also works by just starting two client instances on the same computer, they will inevitably share a launcher_profiles.json file and therefore the UUID.)

        Attachments

          Activity

            People

            Assignee:
            dinnerbone [Mojang] Nathan Adams
            Reporter:
            sadimusi Simon Marti
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              CHK: