ModsFinder

Custom-Mojang-Auth

by voidxwalker

Custom-Mojang-Auth is a Fabric library that lets a custom server sign players in through their own Mojang account.

FabricClient-side onlyMIT LicenseOpen source1.16 – 1.20.2

What it does

The library handles the authentication step for a custom server. It initializes an Authenticator, which obtains the player's UUID and access token from the Minecraft session the client already has, then uses them to sign the server in on the player's behalf. Obtaining the UUID is usually straightforward, and obtaining the access token is less involved as well, though the method depends on the Minecraft version in use. Version 1.16.1 has its own proxy-based way of doing this, so the approach differs between releases.

Privacy is the design focus. The client signs its messages with a private key and sends only the signed payload to the server. A verification function on the server side checks that the payload was signed by the client. Login credentials and other compromising information never leave the client's machine. Because the mod runs on the client alone, a server owner only needs to use the library in their own server setup, and players need nothing extra beyond this mod.

Key features

  1. Mojang account sign-in

    Lets a custom server authenticate players through their own Mojang account instead of an offline name.

  2. Authenticator initialization

    The mod sets up an Authenticator that gathers the UUID and access token the sign-in needs.

  3. Signed client payloads

    The client signs its messages with a private key, and the server verifies that signature against the payload.

  4. Credentials stay local

    Login information never leaves the client's machine, only the signed payload is sent to the server.

Compatibility

Latest build for each game version and loader.

1.20.x3 of 3 versions with builds
1.20.21.0.0
1.20.11.0.0
1.201.0.0
1.19.x5 of 5 versions with builds
1.19.41.0.0
1.19.31.0.0
1.19.21.0.0
1.19.11.0.0
1.191.0.0
1.18.x3 of 3 versions with builds
1.18.21.0.0
1.18.11.0.0
1.181.0.0
1.17.x2 of 2 versions with builds
1.17.11.0.0
1.171.0.0
1.16.x6 of 6 versions with builds
ReleaseBetaAlphaNot available

Only full game releases are shown. This mod publishes no snapshot builds.

Use cases

Who it’s for: Server owners and developers building a custom login system for Minecraft Java Edition on Fabric. Players only need the mod when they connect to a server that uses it.

How it compares

Full comparison

Potato Auth is a Fabric option that is also client-side only and open source under the MIT License, with files for 1.20 – 1.21.5. Packet Auth covers a wider span, 1.18 – 1.21.5, on Fabric and Quilt, but runs on both client and server and is not open source, licensed as All rights reserved. Custom-Mojang-Auth stays on the client side and targets 1.16 – 1.20.2.

ModLoadersGame versionsEnvironmentUpdated
Custom-Mojang-AuthFabric1.16 – 1.20.2Client-side only2023-10-08
Potato AuthFabric1.20 – 1.21.5Client-side only2025-11-27
Packet AuthFabric and Quilt1.18 – 1.21.5Client and server2025-05-15

Questions

Does Custom-Mojang-Auth need to be installed on the server?

Servers do not need it; each player installs it for their own game. The server must still verify the signed payload using its own setup.

Which Minecraft versions does Custom-Mojang-Auth support?

Files exist for 19 release versions, 1.16.1 – 1.20.2. The latest Fabric file is 1.0.0 for 1.20.2, published 2023-10-08.

Does the mod send passwords to the server?

No. Login information stays on the client, and only messages signed with the client's private key are sent.

In the catalog

Custom-Mojang-Auth is one of 3,514 Library mods on ModsFinder, and one of 2,348 Library mods for Fabric. 12,076 mods support Minecraft 1.20.2.

More from voidxwalker

All projects

Similar mods

What the author says

use the following function to verify that a payload has been signed by the client. where payload is an array. ## Privacy The client simply signs messages using its private key, which can then be send to a server. No login information, or other compromising information ever leaves the client's machine.
voidxwalker, on the Modrinth page

Official listing

Owner
voidxwalker
Published
2023-10-08
Updated on Modrinth
2023-10-08
Facts verified
2026-10-15

Tags