[v3] Microsoft account pool bug

[Drownek]

When i set accounts block in stand environment to:

accounts {
    microsoft {
        account("SkyGalaxis")
        cacheDir.set(layout.projectDirectory.dir("ms-cache"))
    }
}

And then run a paper server with online-mode=true in server.properties, i get following tests failed.
On the first test, it tells me to login using my microsoft account, and from that point authentication from
the first test is reused. When i run tests using predefined accounts block, all tests are passing:

accounts {
    autoRegister {
        usernamePattern.set("pw_%04d")
        password.set(secret.env("PLUGWRIGHT_BOT_PASSWORD"))
        max.set(4)
    }
}

Test: rejoin resumes the session without a prompt

[Bot] Creating bot: SkyGalaxis
[Bot SkyGalaxis] Received message: "SkyGalaxis joined the game"
[Bot] SkyGalaxis spawned successfully
[Bot] SkyGalaxis connection ended: disconnect.quitting
[Bot SkyGalaxis] Received message: "SkyGalaxis joined the game"
[Bot SkyGalaxis] Received message: "Server announcement"
[Bot] SkyGalaxis spawned successfully
[Bot SkyGalaxis] Received message: "Welcome"
[Bot SkyGalaxis] Received message: "Server announcement"
[Bot SkyGalaxis] Received message: "Please, register to the server with the command: /register <password> <ConfirmPassword>"
[Bot SkyGalaxis] Received message: "Server announcement"
    FAILED (6.4s): Expected message matching "/session reconnection/i" not received

Test: permission-restricted command

[Bot] Creating bot: SkyGalaxis
[Bot SkyGalaxis] Received message: "SkyGalaxis joined the game"
[Bot] SkyGalaxis spawned successfully
[Bot] Chatting: /admin reload
[Bot SkyGalaxis] Received message: "In order to use this command you must be authenticated!"
[Bot SkyGalaxis] Received message: "Welcome"
[Bot SkyGalaxis] Received message: "Server announcement"
[Bot SkyGalaxis] Received message: "Please, register to the server with the command: /register <password> <ConfirmPassword>"
[Bot SkyGalaxis] Received message: "Server announcement"
[Bot SkyGalaxis] Received message: "Server announcement"
    FAILED (5.6s): Expected message matching "no permission" not received

Test: admin can use restricted command

[Bot] Creating bot: SkyGalaxis
[Bot SkyGalaxis] Received message: "SkyGalaxis joined the game"
[Bot] SkyGalaxis spawned successfully
[Bot SkyGalaxis] Received message: "[Rcon: Made SkyGalaxis a server operator]"
[Bot] Chatting: /admin reload
[Bot SkyGalaxis] Received message: "In order to use this command you must be authenticated!"
[Bot SkyGalaxis] Received message: "Welcome"
[Bot SkyGalaxis] Received message: "Server announcement"
[Bot SkyGalaxis] Received message: "Please, register to the server with the command: /register <password> <ConfirmPassword>"
[Bot SkyGalaxis] Received message: "Server announcement"
    FAILED (5.7s): Expected message matching "Reloaded" not received

Failed to obtain profile data - probably a rate limit from premium auth servers?

From test beforeEach / afterEach execution order > Level 2 > Level 3 > should run four levels of beforeEach (root → L1 → L2 → L3)

I got following errors in rest of the tests

[Bot] Creating bot: SkyGalaxis
[Bot] SkyGalaxis error (1 so far): Failed to obtain profile data for SkyGalaxis, does the account own minecraft?
[Bot] bot connection error: Failed to obtain profile data for SkyGalaxis, does the account own minecraft?
    FAILED (267ms): Failed to obtain profile data for SkyGalaxis, does the account own minecraft?

[monikon22]

Thanks for the detailed report — the message log made this easy to track down.

The bug is exactly what it looks like: auth-authme-package/index.ts had if (account.auth === 'microsoft') return; in onPlayerCreate, which skipped the login/register handshake for any Microsoft account unconditionally. That assumption — "AuthMe never prompts a premium account" — isn't something the plugin can actually know. It depends on your AuthMe config (premium auto-login, forcedRegistration, etc.), and your log shows the server prompting /register for SkyGalaxis just like it would for an offline account.

Fix: added a skipOnMicrosoftAccount option, off by default. With it off (the new default), Microsoft accounts go through the same register/login/session-resumed flow as any other account — which means they now need a password too, since accounts { microsoft { ... } } never carries one (mineflayer authenticates the account itself, AuthMe is a separate wall). Set the plugin's password option for that, or skipOnMicrosoftAccount = true if you've confirmed your server really does let premium accounts straight through.

Opening a PR with this fix now.