Minecraft登录认证方式

零、准备工作

在进行Minecraft验证之前，需要准备一些东西

一、获取机器码

POST/GET https://login.microsoftonline.com/consumers/oauth2/v2.0/devicecode

Headers[默认传输表单就行]

Key Value
Content-Type application/x-www-form-urlencoded

Body

Key Value
client_id 你所申请的Azure软件id
scope XboxLive.signin offline_access

成功返回 json

{
    "user_code": "8位用户需要的代码",
    "device_code": "一长串机器码，需要保存，后续要用",
    "verification_uri": "https://www.microsoft.com/link",
    "expires_in": 900,
    "interval": 5,
    "message": "To sign in, use a web browser to open the page https://www.microsoft.com/link and enter the code 8位用户需要的代码 to authenticate."
}

二、获取Token

POST https://login.microsoftonline.com/consumers/oauth2/v2.0/token

Headers[默认传输表单就行]

Key Value
Content-Type application/x-www-form-urlencoded

Body

Key Value
client_id 你所申请的Arur软件id
grant_type urn:ietf:params:oauth:grant-type:device_code
device_code 第一步获取的device_code

成功返回 json

{
    "token_type": "Bearer",
    "scope": "XboxLive.signin",
    "expires_in": 3599,
    "ext_expires_in": 3599,
    "access_token": "MicrosoftToken，需要保存",
    "refresh_token": "刷新用token，以后登录可用，可以省略第一步"
}

错误返回

{
    "error": "错误码",
    "error_description": "错误详细信息",
    "error_codes": [
        //错误代码
    ],
    "timestamp": "时间",
    "trace_id": "可帮助诊断的请求唯一标识符[无需理会]",
    "correlation_id": "用来将RPC的响应和请求关联起来[无需理会]"
}

这种情况，一般就是用户没有完成微软的登录验证，一般这个请求是隔几秒请求一次，直到用户成功登录验证，如果用户完成了所需步骤，那就是传输数据出问题，或者验证超时，一般900秒超时，可以看第一步请求返回的expires_in

三、XBox身份验证

POST https://user.auth.xboxlive.com/user/authenticate

Headers

Key Value
Content-Type application/json

Body[Json格式]

这里的<access_token>就是第二步的返回的access_token

{
    "Properties": {
        "AuthMethod": "RPS",
        "SiteName": "user.auth.xboxlive.com",
        "RpsTicket": "d=<access_token>"
    },
    "RelyingParty": "http://auth.xboxlive.com",
    "TokenType": "JWT"
}

成功返回 json

"IssueInstant": "时间",
    "NotAfter": "时间",
    "Token": "这是XBoxLive的Token，要保存",
    "DisplayClaims": {
        "xui": [
            {
                "uhs": "用户信息哈希值，要保存"
            }
        ]
    }
}

错误返回

对，就是返回空

四、XSTS 身份验证

POST https://xsts.auth.xboxlive.com/xsts/authorize

Headers

Key Value
Content-Type application/json

Body[Json格式]

这里的<xbl_token>就是第三步的返回的Token

{
    "Properties": {
        "SandboxId": "RETAIL",
        "UserTokens": [
            "<xbl_token>"
        ]
    },
    "RelyingParty": "rp://api.minecraftservices.com/",
    "TokenType": "JWT"
}

成功返回 json

{
    "IssueInstant": "时间",
    "NotAfter": "时间",
    "Token": "XSTS的token，保存",
    "DisplayClaims": {
        "xui": [
            {
                "uhs": "与上一步的uhs要一样"
            }
        ]
    }
}

token解析错误返回

{
    "Identity": "0",
    "XErr": 2148916262
}

token为空或json格式错误返回

你没看错，就是返回空

五、获取MinecraftToken

POST https://api.minecraftservices.com/authentication/login_with_xbox

Headers

Key Value
Content-Type application/json

Body[Json格式]

这里的就是第三、四步的返回的ush，是一样的

这里的<xsts_token>就是第四步的返回的Token

{
    "identityToken": "XBL3.0 x=<uhs>;<xsts_token>"
}

成功返回 json

{
    "username": "这里不用管，不是Minecraft的UUID",
    "roles": [],
    "metadata": {},
    "access_token": "这是Minecraft的Token，需要保存",
    "expires_in": 86400,
    "token_type": "Bearer"
}

错误返回

{
    "path": "/authentication/login_with_xbox",
    "error": "错误代码"
}

六、获取MinecraftUUID

GET https://api.minecraftservices.com/minecraft/profile

Headers

这里的<minecraft_token>是第五步的返回的access_token，而且Bearer后面是有一个空格的喔！

Key Value
Authorization Bearer <minecraft_token>

成功返回 json

{
    "id": "Minecraft的UUID",
    "name": "Minecraft的用户名",
    "skins": [
        {
            "id": "皮肤ID[不用理]",
            "state": "ACTIVE",
            "url": "获取皮肤图片的网址",
            "textureKey": "图片的key[不用理]",
            "variant": "CLASSIC"
        }
    ],
    "capes": [
        {
            "id": "披风ID[不用理]",
            "state": "INACTIVE",
            "url": "获取披风图片的网址",
            "alias": "披风名"
        },{
            //可以是多个披风，与上面格式一样
        }
    ],
    "profileActions": {}
}

错误或未拥有Minecraft返回

{
    "path": "/minecraft/profile"
}
posted @ 2024-09-02 21:41  TuringICE  阅读(547)  评论(0)    收藏  举报