Skip to content

numcraft: add Keycloak SSO via Drasl and Fjord Launcher#3

Open
zimbatm wants to merge 1 commit into
mainfrom
drasl-sso
Open

numcraft: add Keycloak SSO via Drasl and Fjord Launcher#3
zimbatm wants to merge 1 commit into
mainfrom
drasl-sso

Conversation

@zimbatm
Copy link
Copy Markdown
Member

@zimbatm zimbatm commented Mar 15, 2026

I was looking for a way to use auth.numtide.com as our SSO, and still allow third-party people.

This adds Drasl as a self-hosted Yggdrasil API server with Keycloak OIDC support.

Unfortunately I had to replace the PrismLauncher with Fjord Launcher to allow users to connect to the custom auth server instead. That makes the initial setup for non-flake users more complicated.

Server-side changes:

  • Configure Drasl service with OIDC + Mojang fallback
  • Add nginx reverse proxy for drasl.ntd.one
  • Set JVM args to redirect Minecraft auth to Drasl
  • Disable enforce-secure-profile and whitelist
  • Remove hardcoded whitelist.toml

Client-side changes:

  • Switch to Fjord Launcher with MSA gate patch
  • Show license requirement notice on launch

Replace PrismLauncher with Fjord Launcher (patched to remove the MSA
account gate) so users can add custom auth server accounts directly.

Add Drasl as a self-hosted Yggdrasil API server with Keycloak OIDC for
simplified login. Players must still own a Minecraft license -- Drasl is
configured with RegistrationExistingPlayer to import Mojang accounts,
and Mojang is set as a fallback API server.

Server-side changes:
- Configure Drasl service with OIDC + Mojang fallback
- Add nginx reverse proxy for drasl.ntd.one
- Set JVM args to redirect Minecraft auth to Drasl
- Disable enforce-secure-profile and whitelist
- Remove hardcoded whitelist.toml

Client-side changes:
- Switch to Fjord Launcher with MSA gate patch
- Show license requirement notice on launch
@zimbatm zimbatm requested a review from MagicRB March 15, 2026 21:35
@zimbatm
Copy link
Copy Markdown
Member Author

zimbatm commented Mar 15, 2026

@zimbatm
Copy link
Copy Markdown
Member Author

zimbatm commented Mar 15, 2026

Since Drasl has their own UUID mapping, all users will also be reset after the migration.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant