SideGate - Velocity v1.2.2-hotfix.1

1.2.2

Release date: 2026-06-10


Added

• Premium/Guest login decisions at the Velocity proxy.
• Asynchronous Mojang profile lookup with bounded caching and request deduplication.
• Modern player-forwarding validation and safe startup diagnostics.
• Configurable Guest admission through
  Code:

  allow-all-guests

  and
  Code:

  allowed-guests

  .
• Configurable Premium overrides through
  Code:

  premium-usernames

  .
• Configurable login-decision logging.
• Configurable Premium-name conflict and Guest-denied messages.
• Custom replacement for Velocity's generic invalid-session message when a cracked client uses a Premium-registered username.
• Code:

  /sidegate reload

  and
  Code:

  /sidegate status

  .
• Public API with synchronous and asynchronous login evaluation.
• Compatibility bridge for Velocity's Netty login channel.
• Optional Floodgate and Geyser API detection without bundling either plugin.
• Bedrock login bypass so Bedrock usernames are not classified as Java Guests.
• Configurable Minecraft Java 1.20+ protocol guard and disconnect message.
• Code:

  isBedrock(Player)

  in the public API.

Changed

• Code:

  allow-all-guests

  now defaults to
  Code:

  true

  .
• Mojang API failures, invalid usernames, and unexpected responses remain on online authentication instead of granting Guest access.
• Existing deny, forced-online, and forced-offline results from Floodgate or other authentication plugins are preserved.
• SideGate now runs at the final pre-login priority so Floodgate can authenticate first.
• Floodgate-authenticated connections remain on Floodgate's offline login path.
• Guest candidates are tracked per connection with expiration.
• The distributable jar now includes
  Code:

  META-INF/LICENSE

  .

Requirements

• Java 17 or newer.
• Velocity 3.4 or newer.
• Minecraft Java 1.20 or newer.
• SideGate Bukkit 1.2.2 on every backend.
• ProtocolLib 5.x or newer on every Bukkit backend.
• Velocity
  Code:

  online-mode=true

  .
• Modern player forwarding with the same secret configured on every backend.
• Bukkit backend
  Code:

  online-mode=false

  with backend ports protected from direct access.
• Floodgate and/or Geyser on Velocity when accepting Bedrock players.

Tested

• Velocity 3.5.0-SNAPSHOT build 595.
• Paper 26.1.2 build 64 backend.
• Minecraft 26.1.2 client.

Known Limitation

Velocity can show the configured Premium-name conflict message, but encrypted-session

Code:

FALLBACK_TO_GUEST

remains available only in standalone Bukkit mode.

1.2.2

Release date: 2026-06-10


Added

• Premium/Guest login decisions at the Velocity proxy.
• Asynchronous Mojang profile lookup with bounded caching and request deduplication.
• Modern player-forwarding validation and safe startup diagnostics.
• Configurable Guest admission through
  Code:

  allow-all-guests

  and
  Code:

  allowed-guests

  .
• Configurable Premium overrides through
  Code:

  premium-usernames

  .
• Configurable login-decision logging.
• Configurable Premium-name conflict and Guest-denied messages.
• Custom replacement for Velocity's generic invalid-session message when a cracked client uses a Premium-registered username.
• Code:

  /sidegate reload

  and
  Code:

  /sidegate status

  .
• Public API with synchronous and asynchronous login evaluation.
• Compatibility bridge for Velocity's Netty login channel.

Changed

• Code:

  allow-all-guests

  now defaults to
  Code:

  true

  .
• Mojang API failures, invalid usernames, and unexpected responses remain on online authentication instead of granting Guest access.
• Existing deny, forced-online, and forced-offline results from Floodgate or other authentication plugins are preserved.
• Guest candidates are tracked per connection with expiration.
• The distributable jar now includes
  Code:

  META-INF/LICENSE

  .

Requirements

• Java 17 or newer.
• Velocity 3.4 or newer.
• SideGate Bukkit 1.2.2 on every backend.
• ProtocolLib 5.x or newer on every Bukkit backend.
• Velocity
  Code:

  online-mode=true

  .
• Modern player forwarding with the same secret configured on every backend.
• Bukkit backend
  Code:

  online-mode=false

  with backend ports protected from direct access.

Tested

• Velocity 3.5.0-SNAPSHOT build 595.
• Paper 26.1.2 build 64 backend.
• Minecraft 26.1.2 client.

Known Limitation

Velocity can show the configured Premium-name conflict message, but encrypted-session

Code:

FALLBACK_TO_GUEST

remains available only in standalone Bukkit mode.