Advertisement
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

ClientSecret

Comments in 'Plugin Development' started by Creeperface, Sep 22, 2015.

  1. Creeperface
    Offline

    Creeperface Notable Member Plugin Developer

    Joined:
    Nov 8, 2014
    Posts:
    1,346
    Plugins:
    4
    Minecraft User:
    CreeperFace
    what return getClientSecret()? What is it?
    CraftYourBukkit likes this.
  2. Gamecrafter
    Offline

    Gamecrafter

    Joined:
    Nov 20, 2014
    Posts:
    978
    Plugins:
    9
    It returns a client's secret. :D
  3. Creeperface
    Offline

    Creeperface Notable Member Plugin Developer

    Joined:
    Nov 8, 2014
    Posts:
    1,346
    Plugins:
    4
    Minecraft User:
    CreeperFace
  4. Gamecrafter
    Offline

    Gamecrafter

    Joined:
    Nov 20, 2014
    Posts:
    978
    Plugins:
    9
    Yep. If you use it on me, it'll return "Gamecrafter is not really a game crafter." XD
    Hotshot_9930 likes this.
  5. Hotshot_9930
    Offline

    Hotshot_9930 Notable Member Plugin Developer

    Joined:
    May 26, 2014
    Posts:
    665
    Plugins:
    2
    Minecraft User:
    HotshotHD
    My life has been a lie :(
    pomee4 likes this.
  6. PEMapModder
    Offline

    PEMapModder Notable Member Plugin Developer

    Joined:
    Oct 9, 2013
    Posts:
    7,294
    Plugins:
    11
    Minecraft User:
    PEMapModder
    https://github.com/PocketMine/PocketMine-MP/blob/mcpe-0.12/src/pocketmine/Player.php#L1841
    https://github.com/PocketMine/Pocke...cketmine/network/protocol/LoginPacket.php#L53
    Therefore, a string.
    According to @shoghicp, it is a string created by hash of the combination of server address, server port, client ID and client device ID. Since it is dependent on the server address, the client has different secrets on different servers, and since the device ID is secret, other servers do not know what the client secret is, and since hash is technically considered as an irreversible process, this means that you can use it to identify a unique player (but the player can still change it through a mod, changing client ID or simply registering another DNS that points to your server!) for authentication (but not for banning! Everything from the client is NOT reliable except client IP!).
    Last edited: Sep 23, 2015
    Brutus and iksaku like this.
  7. Gamecrafter
    Offline

    Gamecrafter

    Joined:
    Nov 20, 2014
    Posts:
    978
    Plugins:
    9
    getClientSecret() will replace getClientId(), correct? I heard that somewhere.
  8. PEMapModder
    Offline

    PEMapModder Notable Member Plugin Developer

    Joined:
    Oct 9, 2013
    Posts:
    7,294
    Plugins:
    11
    Minecraft User:
    PEMapModder
    You can consider so, except that it is more secure as other servers won't know it.
  9. Primus
    Offline

    Primus Notable Member

    Joined:
    Apr 7, 2015
    Posts:
    1,470
    Minecraft User:
    PrimusLV
    Is that called: SecretID?

Share This Page

Advertisement