Package to authenticate with minecraft using traditional yggdrasil, new microsoft authentication and non-premium. 

dommilosz

minecraft-auth

var __extends = (this && this.__extends) || (function () {

    var extendStatics = function (d, b) {

        extendStatics = Object.setPrototypeOf ||

            ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) ||

            function (d, b) { for (var p in b) if (Object.prototype.hasOwnProperty.call(b, p)) d[p] = b[p]; };

        if (typeof b !== "function" && b !== null)

            throw new TypeError("Class extends value " + String(b) + " is not a constructor or null");

        function __() { this.constructor = d; }

        d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());

var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {

    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }

    return new (P || (P = Promise))(function (resolve, reject) {

        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }

        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }

        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }

        step((generator = generator.apply(thisArg, _arguments || [])).next());

var __generator = (this && this.__generator) || function (thisArg, body) {

    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;

    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;

    function verb(n) { return function (v) { return step([n, v]); }; }

        if (f) throw new TypeError("Generator is already executing.");

            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;

            if (y = 0, t) op = [op[0] & 2, t.value];

                case 0: case 1: t = op; break;

                case 4: _.label++; return { value: op[1], done: false };

                case 5: _.label++; y = op[1]; op = [0]; continue;

                case 7: op = _.ops.pop(); _.trys.pop(); continue;

                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }

                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }

                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }

                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }

                    if (t[2]) _.ops.pop();

                    _.trys.pop(); continue;

        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }

        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };

var __importDefault = (this && this.__importDefault) || function (mod) {

    return (mod && mod.__esModule) ? mod : { "default": mod };

exports.accountsStorage = exports.crackedAccount = exports.microsoftAccount = exports.account = exports.mojangAccount = exports.HttpPost_BEARER = exports.HttpCustom_BEARER = exports.HttpGet_BEARER = exports.AccountsStorage = exports.CrackedAccount = exports.MicrosoftAccount = exports.MojangAccount = exports.Account = exports.OwnershipError = exports.AuthenticationError = exports.MojangAPI = exports.CrackedAuth = exports.MojangAuth = exports.MicrosoftAuth = void 0;

var class_transformer_1 = require("class-transformer");

var crypto_1 = __importDefault(require("crypto"));

var atob_1 = __importDefault(require("atob"));

var http_client_methods_1 = require("http-client-methods");

    MicrosoftAuth.scope = "XboxLive.signin offline_access";

    function setup(_appID, _appSecret, _redirectURL) {

        MicrosoftAuth.appSecret = _appSecret;

        MicrosoftAuth.redirectURL = _redirectURL;

        compiledID = encodeURIComponent(MicrosoftAuth.appID);

        compiledScope = encodeURIComponent(MicrosoftAuth.scope);

        compiledUrl = encodeURIComponent(MicrosoftAuth.redirectURL);

        compiledSecret = encodeURIComponent(MicrosoftAuth.appSecret);

        return __awaiter(this, void 0, void 0, function () {

            return __generator(this, function (_a) {

                        http = require("http");

                        host = 'localhost';

                        server = http.createServer();

                        return [4 /*yield*/, server.listen(port, host, function () {

                                console.log("MS Token Server is running on http://".concat(host, ":").concat(port));

                        server.fullClose = function () {

                            return __awaiter(this, void 0, void 0, function () {

                                return __generator(this, function (_a) {

                                    switch (_a.label) {

                                        case 0: return [4 /*yield*/, server.close()];

                                        case 1:

                                            _a.sent();

                                return __awaiter(this, void 0, void 0, function () {

                                    var _a;

                                    var _a, error, error_description;

                                    return __generator(this, function (_b) {

                                        switch (_b.label) {

                                            case 0:

                                                _a = req.url.split("?")[0];

                                                switch (_a) {

                                                    case "/token": return [3 /*break*/, 1];

                                                    case "/url": return [3 /*break*/, 5];

                                                    case "/close": return [3 /*break*/, 8];

                                                    case "/auth": return [3 /*break*/, 10];

                                                }

                                                return [3 /*break*/, 11];

                                            case 1: return [4 /*yield*/, res.writeHead(200)];

                                            case 2:

                                                _b.sent();

                                                return [4 /*yield*/, res.end()];

                                            case 3:

                                                return [4 /*yield*/, server.fullClose()];

                                            case 4:

                                                r(req.url.split("?code=")[1]);

                                                if (req.url.includes("?code"))

                                                    r(req.url.split("?code=")[1]);

                                                if (req.url.includes("?error")) {

                                                    error = req.url.split("?error=")[1].split("&")[0];

                                                    error_description = decodeURIComponent(req.url.split("&error_description=")[1]);

                                                    j(new AuthenticationError(error, error_description, ""));

                                            case 5: return [4 /*yield*/, res.writeHead(200)];

                                            case 6:

                                                return [4 /*yield*/, res.end(createUrl())];

                                            case 7:

                                            case 8: return [4 /*yield*/, server.fullClose()];

                                            case 9:

                                                j(undefined);

                                            case 10:

                                                res.writeHead(302, {

                                                    'Location': createUrl()

                                                });

                                                res.end();

                                            case 11: return [4 /*yield*/, res.writeHead(404)];

                                            case 12:

                                            case 13:

                                                return [2 /*return*/];

                                        }

                            server.on("request", requestListener);

                    case 1: return [2 /*return*/, _a.sent()];

    MicrosoftAuth._listenForCode = _listenForCode;

    function listenForCode(port, timeout) {

        if (timeout === void 0) { timeout = 60 * 1000; }

                    case 0: return [4 /*yield*/, _createServer(port)];

                        server = _a.sent();

                        return [2 /*return*/, _listenForCode(server, timeout)];

    MicrosoftAuth.listenForCode = listenForCode;

    MicrosoftAuth.onTokenResponse = onTokenResponse;

        return "https://login.live.com/oauth20_authorize.srf?client_id=".concat(compiledID, "&response_type=code&redirect_uri=").concat(compiledUrl, "&scope=").concat(compiledScope);

            var url, body, response, jsonResponse;

                        url = "https://login.live.com/oauth20_token.srf";

                        body = "client_id=".concat(compiledID, "&client_secret=").concat(compiledSecret, "&code=").concat(authCode, "&grant_type=authorization_code&redirect_uri=").concat(compiledUrl);

                        return [4 /*yield*/, (0, http_client_methods_1.HttpPost)(url, body, { "Content-Type": "application/x-www-form-urlencoded" })];

                        response = _a.sent();

                        jsonResponse = JSON.parse(response);

                        if (jsonResponse.error) {

                            throw new AuthenticationError(jsonResponse.error, jsonResponse.error_description, jsonResponse.correlation_id);

                        return [2 /*return*/, jsonResponse];

    function getTokenRefresh(refreshToken) {

                        body = "client_id=".concat(compiledID, "&client_secret=").concat(compiledSecret, "&refresh_token=").concat(refreshToken, "&grant_type=refresh_token&redirect_uri=").concat(compiledUrl);

  "description": "Package to authenticate with minecraft using traditional yggdrasil, new microsoft authentication and non-premium.",

    "npm-publish": "jest && tsc && npm publish"

    "url": "https://github.com/dommilosz/minecraft-auth.git"

    "url": "https://github.com/dommilosz/minecraft-auth/issues"

![npm bundle size](https://img.shields.io/bundlephobia/min/minecraft-auth?label=npm%20size)

![GitHub package.json version](https://img.shields.io/github/package-json/v/dommilosz/minecraft-auth)

![GitHub top language](https://img.shields.io/github/languages/top/dommilosz/minecraft-auth)

![npm](https://img.shields.io/npm/dt/minecraft-auth)

Minecraft-auth is a package to authenticate and get minecraft access tokens.

* Mojang Authentication - standard mojang authentication using username and password

* Microsoft Authentication - new Microsoft oauth authentication to login to new accounts / migrated to microsoft

* Cracked Authentication - non premium offline mode authentication. Requires only username.

Package contains MojangApi class which can be used to fetch other users skins, uuids, check server status and more.

Usage of lowercase classes like `mojangAccount` should be converted to use uppercase equivalents like `MojangAccount`. Usage of lowercase classes may be removed in the future. Currently, it only shows warning about the deprecation.   

All authentication errors are thrown by using AuthenticationError or OwnershipError classes they all extend Error class.

AuthenticationError also contains `additionalInfo: string`

var minecraftAuth = require("minecraft-auth")

let account = new minecraftAuth.MojangAccount();

let account = new minecraftAuth.MicrosoftAccount();

let redirectURL = "http://localhost/auth";

let redirectURL = "http://localhost:8080/token";

minecraftAuth.MicrosoftAuth.setup(appID, appSecret, redirectURL);

console.log(minecraftAuth.MicrosoftAuth.createUrl());

let code = await MicrosoftAuth.listenForCode(8080);

let account = new minecraftAuth.CrackedAccount("username");

await authenticate(); //function from above examples

console.log(account.username);            //Username of the account

console.log(account.uuid);                //UUID of the account (without dashes)

console.log(account.ownership);           //Does account even have minecraft

console.log(account.profile)              //User profile - skins, capes, uuid, username

console.log(account.profile.skins[0].url) //URL of the 1st skin.

AccountsStorage is a storage for your accounts. 

You can add new account with `AccountsStorage::addAccount(account)`

You can remove account with `AccountsStorage::removeAccount(account)`

* `serialize` converts storage to JSON string to save in file

* `deserialize` converts string to AccountStorage object

		{
		"name": "minecraft-auth",
		"version": "1.0.32",
		"version": "1.0.33",
		"description": "Package to authenticate with minecraft using traditional yggdrasil, new microsoft authentication and non-premium.",
		@@ -10,3 +10,3 @@ "main": "dist/index.js",
		"build": "tsc",
		"npm-publish": "jest && tsc && npm publish"
		"prepublishOnly": "jest && tsc"
		},
		@@ -13,0 +13,0 @@ "keywords": [

		@@ -41,3 +41,3 @@ # Minecraft-auth package
		let appSecret = "app secret";
		let redirectURL = "http://localhost/auth";
		let redirectURL = "http://localhost:8080/token";

		@@ -44,0 +44,0 @@ minecraftAuth.MicrosoftAuth.setup(appID, appSecret, redirectURL);

		@@ -145,3 +145,3 @@ "use strict";
		return __awaiter(this, void 0, void 0, function () {
		var _a;
		var _a, error, error_description;
		return __generator(this, function (_b) {
		@@ -167,3 +167,9 @@ switch (_b.label) {
		_b.sent();
		r(req.url.split("?code=")[1]);
		if (req.url.includes("?code"))
		r(req.url.split("?code=")[1]);
		if (req.url.includes("?error")) {
		error = req.url.split("?error=")[1].split("&")[0];
		error_description = decodeURIComponent(req.url.split("&error_description=")[1]);
		j(new AuthenticationError(error, error_description, ""));
		}
		return [3 /break/, 11];
		@@ -170,0 +176,0 @@ case 5: return [4 /yield/, res.writeHead(200)];

Improved metrics