Версия 1.0.1 Майнкрафт Мода

Список изменений

Hardened fallback texture proxy redirects so they can't reach localhost or private network targets
Fixed trusted nginx client IP handling for join/hasJoined without trusting spoofed forwarded headers from public clients
Added app-level rate limiting for admin login and Yggdrasil auth endpoints
Removed admin session cookie auth and tightened HTTPS detection behind local proxies
Bounded public fallback profile and texture proxy caches so high-cardinality requests can't grow memory forever
Hardened animated GIF cape validation without breaking optimized GIF subframes
Added same-port HTTPS for admin login when you do not have a separate reverse proxy port
Exposed same-port HTTPS settings in the admin panel with bounded TLS handshake timeout
Hardened texture resolving and caching to avoid stale skin/cape state and race-condition bugs
Reused FentLib's shared player face renderer for client account heads
Replaced automatic orphaned local provider cleanup with an opt-in prompt on server delete to avoid wiping providers shared across Minecraft instances
Improved local Wawel Auth credential detection and added configurable credential hiding for unsupported providers
Improved the public site and admin panel
Added 67minecraft publishing and filled in Modrinth/CurseForge metadata
Moved server.dat backups to config/wawelauth/backups
Force player skull rendering to go through Wawel Auth instead of Et Futurum, when installed

Wawel Auth