Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Proxy Sessions #2285

Merged
merged 1 commit into from
Mar 15, 2021
Merged

Proxy Sessions #2285

merged 1 commit into from
Mar 15, 2021

Conversation

hex3l
Copy link
Member

@hex3l hex3l commented Feb 13, 2021

I would like some feedback on these points:

  • There is an edge case that is worth considering:
    • What if a player joins the server with the same username as the user that is switching server?
      1. Player A starts changing server
      2. Proxy sends the login message to mc-server
      3. mc-server process the message and within the next 5 seconds grants access to Player A based on nickname
      4. Player B joins, with the same nickname as Player A, the mc-server
      • Now Player B got access to Player A account without even typing a command.
        • An idea to avoid this could be to add Player A remote IP to the proxy message in order to restrict the access
  • Configurable entries expire time
  • Tests (?)

This PR is an improved version of #2276 and avoids tasks
Closes #2126

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

Autologin - bungeecord
2 participants