baltica 0.1.24 → 0.1.26

package/README.md

@@ -32,6 +32,7 @@ Complete rewrite, from the ground up! Here's what makes it awesome:
 
 `0.1.13` → Minecraft Bedrock `1.21.113`
 
+`0.1.26` → Minecraft Bedrock `1.21.130` & `1.21.132`
 
 *Note: We dropped multi-version support because honestly, it was more trouble than it was worth. One version, done right.*
 

package/dist/shared/auth/authentication.js

@@ -231,9 +231,10 @@ async function getMicrosoftAccessToken(email, password, proxiedFetch) {
     });
     // Check for access token in redirect
     let location = loginResp.headers.get("location") || "";
+    const allCookies = `${cookies}; ${extractCookies(loginResp.headers)}`;
     // Follow redirects manually to find the access token
     let attempts = 0;
-    while (attempts < 5 && !location.includes("access_token=")) {
+    while (attempts < 10 && !location.includes("access_token=")) {
         if (!location) {
             // Check if we got an error page
             const responseText = await loginResp.text();
@@ -245,12 +246,28 @@ async function getMicrosoftAccessToken(email, password, proxiedFetch) {
                 responseText.includes("idA_PWD_SwitchToCredPicker")) {
                 throw new Error("2FA is enabled on this account. Direct login requires 2FA to be disabled.");
             }
+            if (responseText.includes("identity/confirm")) {
+                throw new Error("Microsoft requires identity confirmation. Please log in via browser first.");
+            }
+            if (responseText.includes("recover?") ||
+                responseText.includes("account.live.com/recover")) {
+                throw new Error("Microsoft requires account recovery. Please verify your account via browser.");
+            }
             // Try to extract access token from response body (some flows embed it)
             const tokenMatch = responseText.match(/access_token=([^&"']+)/);
             if (tokenMatch) {
                 return decodeURIComponent(tokenMatch[1]);
             }
-            throw new Error("Failed to get redirect URL from login response");
+            // Check for urlPost redirect in response (sometimes login returns another form)
+            const urlPostMatch = responseText.match(/urlPost:\s*'([^']+)'/);
+            if (urlPostMatch) {
+                location = urlPostMatch[1];
+                attempts++;
+                continue;
+            }
+            throw new Error("Failed to get redirect URL from login response. " +
+                "This can happen due to rate limiting, CAPTCHA, or security challenges. " +
+                "Try again in a few minutes or log in via browser first.");
         }
         if (location.includes("access_token=")) {
             break;
@@ -258,11 +275,20 @@ async function getMicrosoftAccessToken(email, password, proxiedFetch) {
         const redirectResp = await proxiedFetch(location, {
             headers: {
                 "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36",
-                Cookie: cookies,
+                Cookie: allCookies,
             },
             redirect: "manual",
         });
-        location = redirectResp.headers.get("location") || "";
+        // Check response body for token if no redirect
+        const newLocation = redirectResp.headers.get("location") || "";
+        if (!newLocation && !newLocation.includes("access_token=")) {
+            const body = await redirectResp.text();
+            const tokenMatch = body.match(/access_token=([^&"']+)/);
+            if (tokenMatch) {
+                return decodeURIComponent(tokenMatch[1]);
+            }
+        }
+        location = newLocation;
         attempts++;
     }
     // Extract access token from URL fragment

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "baltica",
   "description": "Library for Minecraft Bedrock Edition community developers.",
-  "version": "0.1.24",
+  "version": "0.1.26",
   "minecraft": "1.21.130",
   "main": "dist/index.js",
   "license": "MIT",
@@ -21,13 +21,13 @@
     }
   ],
   "dependencies": {
-    "@sanctumterra/raknet": "^1.4.11",
+    "@sanctumterra/raknet": "latest",
     "@serenityjs/binarystream": "^3.0.10",
     "@serenityjs/protocol": "^0.8.17",
     "fetch-socks": "^1.3.2",
     "jose": "^5.10.0",
     "prismarine-auth": "^2.7.0",
-    "undici": "^7.18.2",
+    "undici": "^7.19.0",
     "uuid-1345": "^1.0.2"
   },
   "devDependencies": {