SideGate 1.2.0

Release date: 2026-05-18

Added

• Runtime API service (SideGateApi) exposed through Bukkit ServicesManager for addon/plugin integration.
• Runtime reload support with /sidegate reload to re-read config and rebind listeners.
• Guest handling improvements: guest scoreboard tag, configurable join title/subtitle/messages, and guest-only chat prefix.

Changed

• ProtocolLib is now compileOnly to avoid shading/packaging ProtocolLib into SideGate and prevent classloader conflicts.
• Login-state injection path was adjusted to prefer stable accept states (READY_TO_ACCEPT, fallback ACCEPTED) to reduce non-premium login timeouts.
• Defensive ProtocolLib runtime checks were added to avoid NullPointerException when ProtocolManager is temporarily unavailable.
• Guest login injection now cancels login at START and immediately injects approved guests, with delayed fallback retained for packet-order edge cases.
• Post-auth login pipeline now supports modern GameProfile method signatures (verifyLoginAndFinishConnectionSetup, startClientVerification, finishLoginAndWaitForClient) for newer Paper builds.

Fixed

• Fixed startup failure where ProtocolLibrary.getProtocolManager() could be null and crash plugin enable/disable.
• Fixed guest login flow instability causing repeated guest injection and disconnect timeout behavior in hybrid mode.
• Fixed Invalid session/timeout on Paper 1.21.11 when guest login state advanced incompletely.

Compatibility

• Server: Paper/Spigot/Purpur (Bukkit-compatible)
• Tested: Paper 1.20.1, Spigot 1.20.1, Paper 1.21.11
• Practical compatibility range from implementation behavior: 1.20.1-1.21.11 (with ProtocolLib dev build recommended for 1.21.9+)
• Java: 17+
• Dependency: ProtocolLib 5.x+

Notes

• For hybrid guest mode operation, set enforce-secure-profile=false in server.properties.
• Keep online-mode=true; SideGate handles approved guest flow without globally switching offline mode.
• Added startup warning for Minecraft 1.21.9-26.x to recommend ProtocolLib dev build: https://github.com/dmulloy2/ProtocolLib/releases/tag/dev-build.

SideGate v1.0.1 Changelog

New Features & Enhancements

• Hybrid Auto-Detection System
  • Implemented intelligent Mojang API integration. The plugin now automatically verifies if a connecting username belongs to a paid Minecraft account.
  • Premium Players: Automatically routed through the standard secure login process (preserving skins and UUIDs).
  • Guest/Cracked Players: Automatically redirected to the guest injection protocol without manual intervention.
  • Config Option: auto-detect-premium: true (Enabled by default).
• Premium Override List
  • Added a premium-usernames configuration list.
  • Allows administrators to manually force specific usernames to be treated as Premium, bypassing the API check. This is useful for staff security or in cases of API downtime.
• Performance Optimization
  • Introduced ConcurrentHashMap caching for API results. This minimizes external HTTP requests and prevents login lag during peak traffic.
  • Added a cache cleanup mechanism to prevent memory overflow.

Bug Fixes & Stability

• UUID Handling: Refined the logic for detecting Offline UUIDs (Version 3) to ensure guest restrictions are applied correctly only to non-premium players.
• Packet Injection: Improved the stability of the Login.Client.START packet listener to reduce potential conflicts with other protocol-based plugins.

Configuration Changes

• Added auto-detect-premium (boolean) to toggle the hybrid detection system.
• Added premium-usernames (list) for manual premium overrides.
• Updated default messages to clearer, more professional wording.

Upgrade Instructions: To utilize the new features, please regenerate your config.yml or manually add the new auto-detect-premium and premium-usernames keys to your existing configuration.