# Wawel Auth<\/p>\n
<\/p>\n
Authentication mod for Minecraft 1.7.10. Use Microsoft or any Yggdrasil-compatible provider, or run your own auth server alongside the game server. Includes modern and HD skins, animated capes, and optional 3D skin layers.<\/p>\n
Some highlights of what **Wawel Auth** allows you to do:<\/p>\n
* Login into any Yggdrasil-compatible provider on the client (Microsoft, ely.by, drasl, …)
\n* Bind accounts to servers
\n* Host an account and skin provider directly on the game server
\n* Allow any Yggdrasil-compatible provider to join your server
\n* Modern and HD skin support
\n* Animated capes for Wawel Auth accounts
\n* 3D skin layers implementation
\n* Admin web UI for server-side management<\/p>\n
**Wawel Auth** does not need to be installed on the client, nor on the server to benefit from a lot of features.
\nYou can setup a server that allows Microsoft and ely.by users, without clients having to do anything special.
\nClients can also benefit from account management, modern skins, and 3d skin layers, even if a server doesn’t run **Wawel Auth**.<\/p>\n
<\/p>\n
\n
\n
\n
\n
\n
\n<\/p>\n
<\/p>\n
## Dependencies<\/p>\n
* UniMixins   
\n* FentLib 
\n* ModularUI2  (Client only)<\/p>\n
## Client Setup And Use<\/p>\n
**Wawel Auth** stores a small Minecraft instance-bound config file under `config\/wawelauth\/local.json`.
\nMost other settings, however, are shared across all Minecraft instances (can be disabled using `useOsConfigDir`).
\nThose settings live in files stored under the following locations:
\n* Windows: `%APPDATA%\/wawelauth\/`
\n* macOS: `~\/Library\/Application Support\/wawelauth\/`
\n* Linux: `$XDG_DATA_HOME\/wawelauth\/` or `~\/.local\/share\/wawelauth\/`<\/p>\n
The main menu is opened with the `Auth` button in the multiplayer screen.
\nFrom there, you can add auth providers, and accounts.<\/p>\n
Some things of note:
\n* Microsoft, Ely.by, and LittleSkin providers are built in.
\n* Any Yggdrasil \/ authlib-injector provider can be added by URL.
\n* The `Manage Local Auth…` button is the quickest way to use local accounts on a Wawel Auth server.
\n* Adding the same local server manually as a normal provider is also supported.
\n* Skin management buttons can be suppressed per provider through `client.json`, in the case a provider does not provide these functions. This is purely cosmetic.
\n The following options let you configure this:
\n * `disableSkinUpload`
\n * `disableCapeUpload`
\n * `disableTextureReset`<\/p>\n
The `disable*` lists are regexes matched against provider name or API root.<\/p>\n
* Animated capes are only supported by Wawel Auth servers, and are in the `minecraftcapes.net` format.<\/p>\n
> [!NOTE]
\n> You can also drag and drop skins and capes, if using Java 17+.<\/p>\n
## Server Setup And Use<\/p>\n
### Files and locations<\/p>\n
* Dedicated servers always use `config\/wawelauth\/` to store their config, and state data
\n* That state directory contains the SQLite database, generated keys, and stored textures<\/p>\n
> [!WARNING]
\n> * Your private server key is sensitive information, never share it.
\n> * It is important to not change your server keys, if not absolutely necessary. Wawel Auth client users will need to trust the key again, and authlib-injector users will refuse to connect to a server whose public key has changed.<\/p>\n
### Example local-only setup<\/p>\n
`server.json`
\n“`json
\n{
\n “wawelAuthEnabled”: true,
\n “serverName”: “My WawelAuth Server”,
\n “publicBaseUrl”: “auth.example.com:25565”,
\n “apiRoot”: “auth”,
\n “admin”: {
\n “enabled”: true,
\n “token”: “strong_password_best_if_randomly_generated”
\n }
\n}
\n“`<\/p>\n
1. set `online-mode=true` in `server.properties`
\n2. set `publicBaseUrl` to the real public base URL clients use
\n3. leave `apiRoot` as a relative path such as `auth`
\n4. set an admin token through `server.admin.token` or `WAWELAUTH_ADMIN_TOKEN`
\n5. restart the server<\/p>\n
Notes:<\/p>\n
* if `publicBaseUrl` has no scheme, Wawel Auth assumes `http:\/\/`
\n* with the example above, the auth API is published at `http:\/\/auth.example.com:25565\/auth`
\n* on dedicated servers, Wawel Auth now hard-stops before world load if `online-mode=false`, `publicBaseUrl` is missing, or `apiRoot` is configured as a full URL
\n* for CI smoke tests only, `WAWELAUTH_CI=true` or `GITHUB_ACTIONS=true` bypasses the missing-`publicBaseUrl` hard stop<\/p>\n
### Important server settings<\/p>\n
* `registration.policy`: `OPEN`, `INVITE_ONLY`, `CLOSED`
\n* `textures`: max skin \/ cape dimensions, file limits, animated cape limits
\n* `http`: same-port HTTPS enable flag, HTTP read timeout, TLS handshake timeout, and max request body size
\n* `admin`: web UI enable flag, login token, session TTL<\/p>\n
### Admin web UI<\/p>\n
If `server.admin.enabled=true`, the admin UI is available at:<\/p>\n
* `https:\/\/your-host:your-port\/admin` when `server.http.httpsEnabled=true` (default)
\n* `http:\/\/your-host:your-port\/admin` for bootstrap\/status only; login requires HTTPS<\/p>\n
It manages users, textures, invites, whitelist, ops, `server.json`, and `server.properties`.
\nSame-port HTTPS uses a self-signed certificate generated in WawelAuth’s data directory; verify the SHA-256 fingerprint printed in the server log when accepting the browser warning.<\/p>\n
### Fallback providers<\/p>\n
Fallback providers are defined in `fallback-servers.json` and checked in order.<\/p>\n
“`json
\n{
\n “fallbackServers”: [
\n …
\n ]
\n}
\n“`<\/p>\n
> [!WARNING]
\n> `name` must not contain whitespaces.<\/p>\n
> [!TIP]
\n> `name` is used in provider-scoped commands such as `\/op player@provider`.<\/p>\n
#### Microsoft fallback example<\/p>\n
“`json
\n{
\n “name”: “mojang”,
\n “sessionServerUrl”: “https:\/\/sessionserver.mojang.com”,
\n “accountUrl”: “https:\/\/authserver.mojang.com”,
\n “servicesUrl”: “https:\/\/api.minecraftservices.com”,
\n “skinDomains”: [
\n “.minecraft.net”,
\n “.mojang.com”
\n ],
\n “cacheTtlSeconds”: 300
\n}
\n“`<\/p>\n
#### Ely.by fallback example<\/p>\n
“`json
\n{
\n “name”: “ely.by”,
\n “sessionServerUrl”: “https:\/\/authserver.ely.by\/api\/authlib-injector\/sessionserver”,
\n “accountUrl”: “https:\/\/authserver.ely.by\/api”,
\n “servicesUrl”: “https:\/\/authserver.ely.by\/api\/authlib-injector\/minecraftservices”,
\n “skinDomains”: [
\n “ely.by”,
\n “.ely.by”
\n ],
\n “cacheTtlSeconds”: 300
\n}
\n“`<\/p>\n
### LittleSkin fallback example<\/p>\n
“`json
\n{
\n “enabled”: true,
\n “name”: “littleskin”,
\n “apiRoot”: “https:\/\/littleskin.cn\/api\/yggdrasil”,
\n “sessionServerUrl”: “https:\/\/littleskin.cn\/api\/yggdrasil\/sessionserver”,
\n “accountUrl”: “https:\/\/littleskin.cn\/api\/yggdrasil\/authserver”,
\n “servicesUrl”: “https:\/\/littleskin.cn\/api\/yggdrasil”,
\n “signaturePublicKeyBase64”: “”,
\n “skinDomains”: [
\n “littleskin.cn”
\n ],
\n “cacheTtlSeconds”: 300
\n}
\n“`<\/p>\n
## Commands<\/p>\n
### `\/wawelauth`<\/p>\n
* `\/wawelauth register ### Provider-qualified whitelist and op commands<\/p>\n * `\/whitelist add ` Regular whitelist and op commands are disabled.<\/p>\n > [!WARNING] ## Interoperability Notes<\/p>\n ## Building<\/p>\n ```bash ## Credits<\/p>\n * Skin layer implementation inspired by last MIT commit of 3D Skin Layers Mod ## License<\/p>\n `LGPLv3 + SNEED`<\/p>\n ## Buy me some creatine<\/p>\n * ko-fi.com <\/p>\n <\/p>\n","protected":false},"excerpt":{"rendered":" Authentication mod for Minecraft 1.7.10.<\/p>\n","protected":false},"featured_media":168977,"template":"","meta":{"_minecraft_slug":"wawel-auth","_minecraft_project_id":"LncX1fVM","_minecraft_author":"le_jack","_minecraft_license":"LicenseRef-LgplV3-SNEED","_minecraft_downloads":7,"_minecraft_follows":1,"_minecraft_client_side":"optional","_minecraft_server_side":"optional","_minecraft_storage_type":"zip","_minecraft_archive_name":"wawel-auth.zip","_minecraft_size_bytes":13026846,"_minecraft_version_count":1,"_minecraft_updated_at":"2026-05-16T12:19:32.760537Z","_minecraft_date_created":"2026-05-12T06:53:07.408148Z","_minecraft_date_modified":"2026-05-04T22:17:16.649122Z","_minecraft_project_url":"https:\/\/modrinth.com\/mod\/wawel-auth","_minecraft_icon_attachment_id":168977,"_minecraft_imported_at":"2026-06-09T19:59:18+00:00","_minecraft_import_hash":"c6214f8f8a1e3c3ceabc9a53418ad4d8","_minecraft_versions":"","_minecraft_links":"","_minecraft_gallery":"","_minecraft_api_metadata":""},"mod_category":[104,126,92],"mod_loader":[106],"minecraft_version":[21],"class_list":["post-168976","mod","type-mod","status-publish","has-post-thumbnail","hentry","mod_category-forge","mod_category-management","mod_category-utility","mod_loader-forge","minecraft_version-1-7-10"],"yoast_head":"\n
\n* `\/wawelauth invite create [uses|unlimited]`
\n* `\/wawelauth invite list`
\n* `\/wawelauth invite delete `
\n* `\/wawelauth invite purge`
\n* `\/wawelauth test`<\/p>\n
\n* `\/whitelist remove
\n* `\/op
\n* `\/deop
\n> Plain authlib-injector clients (or vanilla) can authenticate against a Wawel Auth server, but mixed-provider skin handling only works if the client and server run Wawel Auth.<\/p>\n
\n.\/gradlew build
\n```<\/p>\n
\n* Catalogue-Vintage for folder icon and system-open inspiration
\n* GT:NH buildscript
\n* Background image<\/p>\n
\n* Monero: `893tQ56jWt7czBsqAGPq8J5BDnYVCg2tvKpvwTcMY1LS79iDabopdxoUzNLEZtRTH4ewAcKLJ4DM4V41fvrJGHgeKArxwmJ`<\/p>\n