Configuring Auth Me's Multiplayer Button, Login Methods, and OAuth2 Endpoints

Auth Me is a Minecraft utility mod whose interface and hotkeys let you adjust how account authentication works, from the multiplayer screen's login button to the login methods offered and the OAuth2 and API URLs behind Microsoft sign-in.

Multiplayer Button Behavior

One setting governs what the authentication button on the multiplayer screen does. Its description states that it controls the behaviour of that button. How the button responds — including whether it acts immediately or opens further choices — depends on how you configure this option.

Login Method Options

Another setting controls the behaviour of the available login methods. When you open the login method picker, the screen is titled Pick a login method, and the choices include Mojang (or legacy) alongside Microsoft sign-in. A separate setting controls the behaviour of the offline login method, and an option labelled Last Used Username stores the username from your previous offline login.

Microsoft Login Flow

Choosing the Microsoft route brings up a screen titled Login via Microsoft. During this process you will see progress messages in sequence: Acquiring Microsoft access token..., then Acquiring Xbox access token..., then Acquiring Xbox XSTS token..., then Acquiring Minecraft access token..., and finally Fetching your Minecraft profile....

While your browser handles part of the sign-in, the screen shows Please check your browser.... Once that part finishes, it displays You may now close this window and return to Minecraft!.

Several error messages can appear instead. generic means something went wrong, and you should go back and try again. notPurchased means the account does not own Minecraft. timeout means the attempt ran out of time, and again you should go back and retry.

If non-default options are in use for Microsoft authentication, a warning screen appears. Its title is Warning! Non-default options for Microsoft authentication, and its body explains that if you did not make the change, your account token could be exposed, then asks whether you want to proceed. The button I know what I'm doing accepts the risk and continues.

Mojang (Legacy) Login

The Mojang (legacy) path has its own screen titled Login via Mojang (Legacy). Its description tells you to authenticate yourself in Minecraft and re-validate your session. This route is presented as the legacy alternative to Microsoft sign-in.

OAuth2 and API Endpoint URLs

The Microsoft login method's settings include fields for the endpoint addresses used during authentication. OAuth2 Authorization Url and OAuth2 Access Token Url cover the OAuth2 authorization and token steps. Xbox Authentication Url and Xbox XSTS Authorization Url cover the Xbox authentication and XSTS authorization steps. Minecraft Authentication Url and Minecraft Profile Url cover Minecraft authentication and profile retrieval.

A related option, OAuth2 Callback Url Port, sets the port used for the OAuth2 callback. Changing any of these from their defaults is what triggers the non-default options warning described above.

Interaction Prompt and Account Selection

An Interaction Prompt option is available among the settings, and Can Drag? appears as a related control. When choosing an account, Ctrl + click selects it. An entry marked Unavailable, click to learn more can be clicked for additional information.

Using These Settings

Open the mod's interface to reach these options, and use the corresponding hotkey (set it in the controls menu) to bring up the relevant screen. From there you can adjust the multiplayer button's behaviour, choose which login methods appear, configure the Microsoft flow, and edit the OAuth2 and API endpoint URLs. If you change any endpoint away from its default, expect the warning screen and confirm with I know what I'm doing only when you understand the change.