Discussion in 'General discussion' started by Daltontastic, Nov 21, 2016.
I hope shoghichip is right, because it would be awesome for banning
Then I will write a mod to send fake UUIDs.
While not faking xbox data? Have fun!
There should be some sort of validation api. Getting the uuid a xbox id should return. Then it is foolproof!
I'll just log out or create a new MS account.
Was that deliberate? xD
I got curious about the xbox live auth option so I created an Xbox live account. My gamertag has spaces in the name. I logged in on my iPad (it worked. yay!) and attempted to join my server (nope!). I added the gamertag to my whitelisted users list and restarted my server. No dice... username is not recognized. BTW I'm using SimpleAuth v1.7.2. I have a hunch that the spaces in the gamertag are causing problems.
You may have to sign out to play your servers
OR PocketMine-MP could support spaces in player names by automatically converting them to underscores
Then what would become of players with the same username except a underscore instead of the space?
Consider using NameCorrector plugin by PEMapModder.
Also consider the possibility to add and reserve an Xbox prefix only for players using Xbox account names.
The Xbox gamertag can not contain an underscore. The only allowed characters are aA-zZ and 0-9 and space. And the gamertag can't begin or end in a space or begin with a number.
Yes. We are saying that we are replacing them with underscore, then non-xbox clients join with the same name but with an underscore.
The main disadvantage is that xbox clients cannot change their names, so their names are easily occupied.
I suffer from this. My name was always robske_110 and for some dump reason XBOX doesn't allow _ while allowing spaces. I did never understand that, but I cannot join most servers because not all have NameCorrector or plugins like that. But we'll not be able to change this.
nope. jwt signing not checked/enforced. that's the entire reason this thread was created.
sorry, should've worded that better :/ found your follow-up question a bit confusing (you asked if PocketMine had an online mode to force XBLive login, people answered no, you then asked if it verified the data.) yeah, if you edited the data, the jwt wouldn't validate correctly. as stated earlier, PM doesn't do this, ¯\_(ツ)_/¯
Separate names with a comma.