Skip to content

feat: add Bedrock identity verifier API#49

Merged
robinbraemer merged 1 commit into
mainfrom
codex/bedrock-identity-verifier
Jul 5, 2026
Merged

feat: add Bedrock identity verifier API#49
robinbraemer merged 1 commit into
mainfrom
codex/bedrock-identity-verifier

Conversation

@robinbraemer

Copy link
Copy Markdown
Member

Summary

  • add a public com.minekube.connect.api.player.bedrock verifier for Moxy signed minekube:bedrock_identity envelopes
  • verify Ed25519 signatures with raw 32-byte or X.509 public keys, endpoint/session/protocol/org scope, expiry, optional policy expectation, and replay cache
  • expose verified claims for Bedrock XUID and linked-Java principals so downstream integrations can distinguish trusted Bedrock identity from Java account linking

Verification

  • ./gradlew :core:test --tests com.minekube.connect.api.player.bedrock.BedrockIdentityVerifierTest --no-daemon
  • ./gradlew build --no-daemon
  • git diff --check

Notes

This is the Connect Java consumer/verifier API slice after minekube/moxy#405. Follow-up work still needs configured enforcement/public-key discovery and rotation before this is treated as a complete production rollout.

Refs minekube/moxy#403
Refs minekube/moxy#396

@robinbraemer robinbraemer merged commit 9f059d6 into main Jul 5, 2026
1 check passed
@robinbraemer robinbraemer deleted the codex/bedrock-identity-verifier branch July 5, 2026 17:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant