There should be some sort of validation api. Getting the uuid a xbox id should return. Then it is foolproof!
I got curious about the xbox live auth option so I created an Xbox live account. My gamertag has spaces in the name. I logged in on my iPad (it worked. yay!) and attempted to join my server (nope!). I added the gamertag to my whitelisted users list and restarted my server. No dice... username is not recognized. BTW I'm using SimpleAuth v1.7.2. I have a hunch that the spaces in the gamertag are causing problems.
OR PocketMine-MP could support spaces in player names by automatically converting them to underscores
Consider using NameCorrector plugin by PEMapModder. Also consider the possibility to add and reserve an Xbox prefix only for players using Xbox account names.
The Xbox gamertag can not contain an underscore. The only allowed characters are aA-zZ and 0-9 and space. And the gamertag can't begin or end in a space or begin with a number.
Yes. We are saying that we are replacing them with underscore, then non-xbox clients join with the same name but with an underscore. The main disadvantage is that xbox clients cannot change their names, so their names are easily occupied.
I suffer from this. My name was always robske_110 and for some dump reason XBOX doesn't allow _ while allowing spaces. I did never understand that, but I cannot join most servers because not all have NameCorrector or plugins like that. But we'll not be able to change this.
sorry, should've worded that better :/ found your follow-up question a bit confusing (you asked if PocketMine had an online mode to force XBLive login, people answered no, you then asked if it verified the data.) yeah, if you edited the data, the jwt wouldn't validate correctly. as stated earlier, PM doesn't do this, ¯\_(ツ)_/¯