mojira.dev
MCL-1657

Invalid token on launcher start

Each time I start the launcher, it will get an "Invalid Token" error and I have to re-type my full username and password, incredibly annoying, the launcher should at least hold the email in there so I only need to type the password if it fails to login.

edit; current likely cause is due to 3rd party launchers being used at times, or multiple computers being used, likely causing the servers to renew the token and make the official launcher's one invalid. still yet to be confirmed however.

Occurs with the vanilla launcher, old and new. Note that some platforms do not have the new launcher either, as it's an exclusive executable to windows...

Linked issues

Attachments

Comments 50

Please attach the complete output of the "Development console" tab of the launcher.

  • Click the text, press CTRL-A to select all, then CTRL-C to copy, and CTRL-V to paste in a comment on this ticket.

oh oops, forgot to attach the log...

here's the error, cropped the log just before the download section so its not a wall of eventless library checks;

Refreshing local version list...
Launcher 1.2.5 (through bootstrap 5) started on windows...
Current time is Oct 15, 2013 5:45:00 AM
System.getProperty('os.name') == 'Windows 8'
System.getProperty('os.version') == '6.2'
System.getProperty('os.arch') == 'amd64'
System.getProperty('java.version') == '1.7.0_25'
System.getProperty('java.vendor') == 'Oracle Corporation'
System.getProperty('sun.arch.data.model') == '64'
Refreshing remote version list...
Refresh complete.
Loaded 12 profile(s); selected '1.6ForgeLiteloader'
Refreshing auth...
Logging in with access token
net.minecraft.launcher.authentication.exceptions.InvalidCredentialsException: Invalid token.
	at net.minecraft.launcher.authentication.yggdrasil.YggdrasilAuthenticationService.makeRequest(YggdrasilAuthenticationService.java:118)
	at net.minecraft.launcher.authentication.yggdrasil.YggdrasilAuthenticationService.logInWithToken(YggdrasilAuthenticationService.java:94)
	at net.minecraft.launcher.authentication.yggdrasil.YggdrasilAuthenticationService.logIn(YggdrasilAuthenticationService.java:51)
	at net.minecraft.launcher.Launcher.ensureLoggedIn(Launcher.java:213)
	at net.minecraft.launcher.Launcher$2.run(Launcher.java:182)
	at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source)
	at java.util.concurrent.FutureTask$Sync.innerRun(Unknown Source)
	at java.util.concurrent.FutureTask.run(Unknown Source)
	at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
	at java.lang.Thread.run(Unknown Source)

Logging in with access token
Delta time to compare resources: 9996 ms

And if you close the launcher at this point without starting the game and restart the launcher it will ask again for your e-mail / password ?

I have the launcher set to stay open, but I'm pretty sure if I close it before launching and re-open it doesn't hit the error, though being a student in game programming and doing an end-of-year project I haven't mad much time to really mess with it lately...

ok, re-opening multiple times after logging in has no effect, launching the game and closing also has no effect, it only occurs after a long period of time, the next morning for example.

this is both a account server issue and a major flaw in the launcher...

even in the case of a failure, it should remember your email so you don't have to re-type it every time, and what happened to the secure thing of entering your password at launcher open? that should already be in there by default...

40 more comments

eddie was wrong though, the new token system was a disaster from the beginning, and for who knows what reason the devs didn't accept this as being a bug until after it was marked 'invalid' (they finally admitted on twitter). But now because of it being ignored and subsequently forgotten, they've undone their 2013-14 fix and now the bug has returned yet again almost 5 years later...

btw, even though these are with clean launcher installs, keeping client ID's in a local file is how you create a backdoor...

Use the hardware ID instead, or TPM if available (and up-to-date).

This needs to be re-opened so mojang can actually fix it properly, and permanently this time...

I have this one too but mine's worse

I can't even log in minecraft.net because maybe my token is invalid then i was redirected to the login page with my account still showing i'm logged on

[media]

I'm having the same issue, I cannot connect to the website, and whenever I try to play the game, I get this error. I'd like to know if there is a temporary solution that would work, because I cannot play the game at all.

[media]

migrated

(Unassigned)

Unconfirmed

log-in, password, token, username

Retrieved