Cannot authenticate under 18 Microsoft Accounts not in a family about devauth HOT 14 CLOSED

I believe this is due to your Microsoft account is under 18. To resolve this issue you have to add your account to a family.
This occurs due to a limitation via Microsoft themselves

Reference documentation: https://inv.wtf/xboxonlinesafety.

Do note I'm not quite sure if this would work or not but may be a solution...

from devauth.

I believe this is due to your Microsoft account is under 18. To resolve this issue you have to add your account to a family.
This occurs due to a limitation via Microsoft themselves

Reference documentation: https://inv.wtf/xboxonlinesafety.

Do note I'm not quite sure if this would work or not but may be a solution...

If this is a limitation by Microsoft, then why is it possible to authenticate with oauth from the official launcher, but not this way?

The documentation that you provided states that "Child accounts are all accounts for those under the age of 16 for the US & EU", however the DoB on the account is not less than 16.

from devauth.

I believe this is due to your Microsoft account is under 18. To resolve this issue you have to add your account to a family.
This occurs due to a limitation via Microsoft themselves
Reference documentation: https://inv.wtf/xboxonlinesafety.
Do note I'm not quite sure if this would work or not but may be a solution...

If this is a limitation by Microsoft, then why is it possible to authenticate with oauth from the official launcher, but not this way?

The documentation that you provided states that "Child accounts are all accounts for those under the age of 16 for the US & EU", however the DoB on the account is not less than 16.

It's possible via the Minecraft Launcher because Microsoft have their own special azure application

from devauth.

I believe this is due to your Microsoft account is under 18. To resolve this issue you have to add your account to a family.
This occurs due to a limitation via Microsoft themselves
Reference documentation: https://inv.wtf/xboxonlinesafety.
Do note I'm not quite sure if this would work or not but may be a solution...

If this is a limitation by Microsoft, then why is it possible to authenticate with oauth from the official launcher, but not this way?
The documentation that you provided states that "Child accounts are all accounts for those under the age of 16 for the US & EU", however the DoB on the account is not less than 16.

It's possible via the Minecraft Launcher because Microsoft have their own special azure application

That makes sense, but what about the fact that it's not a child account (according to the definition in the link that you referred to)?

from devauth.

Well I'm not sure about that for Azure Applications it may be for > 18

from devauth.

Hi, can you try to add &fl=dob,easi2 to the Authentication URL. I discovered this parameter in the Minecraft Launcher Authentication URL.

By Authentication URL, I mean the URL you use to login to Microsoft:

I suspect dob might have something to do with it.

Haven't tested myself, but seems promising.

from devauth.

Hi, can you try to add &fl=dob,easi2 to the Authentication URL. I discovered this parameter in the Minecraft Launcher Authentication URL.

By Authentication URL, I mean the URL you use to login to Microsoft:

I suspect dob might have something to do with it.

Haven't tested myself, but seems promising.

I can test this and submit a PR if it solves the issue

from devauth.

I tried adding fl=dob,easi2 query parameter to oauth url but I still get the {"Identity":"0","XErr":2148916238,"Message":"","Redirect":"https://start.ui.xboxlive.com/AddChildToFamily"} response. The account I used doesn't have a minecraft license attached, however that shouldn't make a difference.

from devauth.

I tried adding fl=dob,easi2 query parameter to oauth url but I still get the {"Identity":"0","XErr":2148916238,"Message":"","Redirect":"https://start.ui.xboxlive.com/AddChildToFamily"} response. The account I used doesn't have a minecraft license attached, however that shouldn't make a difference.

Was just setting up an environment to test this when I saw your response, does this mean that there is no way to use an under-18 account with 3rd party oauth?

If that is the case, would it not be possible to authenticate the same way that the vanilla launcher does? Using the same oauth url and API endpoints, etc.

from devauth.

Was just setting up an environment to test this when I saw your response, does this mean that there is no way to use an under-18 account with 3rd party oauth?

You can authenticate an under 18 account, it just needs to be part of a family.

If that is the case, would it not be possible to authenticate the same way that the vanilla launcher does? Using the same oauth url and API endpoints, etc.

This really depends how the vanilla launcher implements it and I don't have the time or knowledge to reverse engineer/research how it does it. If someone else figured out how it worked, and it was possible to implement, I would consider implementing it.

from devauth.

Here's another reference, https://wiki.vg/Microsoft_Authentication_Scheme
It appears you need to somehow grab the minecraft launcher client id and substitute it in the url parameter.

Another rather tedious method is have the user start up a minecraft instance from the vanilla launcher and the mod can automatically grab a token from the launched java process's arguments.

from devauth.

Here's another reference, https://wiki.vg/Microsoft_Authentication_Scheme
It appears you need to somehow grab the minecraft launcher client id and substitute it in the url parameter.

Another rather tedious method is have the user start up a minecraft instance from the vanilla launcher and the mod can automatically grab a token from the launched java process's arguments.

It wouldn't even be necessary to extract the endpoints from the launcher files, as it appears that the same requests are made by the browser when logging in to https://minecraft.net. I have been using this to (manually) obtain my session token, but I'm not sure it's possible to automate due to restricted redirect URIs.

from devauth.

I already have a method for logging in on under 18 accounts, I just need to finish the implementation.

Here's another reference, https://wiki.vg/Microsoft_Authentication_Scheme
It appears you need to somehow grab the minecraft launcher client id and substitute it in the url parameter.

I already used wiki.vg a lot for this. The only thing special about the launcher client id is the minecraft themed background, its the authentication flow that matters for under 18 accounts.

from devauth.

I spent many hours working on an alternative authentication scheme, but I determined it was very complicated and too much effort for a small minority of users. I would be willing to implement it, but only if there is a significant enough demand.

from devauth.