-
Notifications
You must be signed in to change notification settings - Fork 94
Description
Describe the bug
We noticed an issue on our server related to username changes.
When a player changes their Minecraft username (e.g., from "Hello" to "HelloWorld") and later another player joins using the old username ("Hello"), the new "Hello" player unexpectedly receives data that belongs to the original user.
This results in the original user's data resetting or shifting to the new player.
We are not certain which component is responsible, but we are reporting it here in case it is related to the authentication or session-handling flow.
To Reproduce
Steps to reproduce the behaviour:
Player A sets the username to "Hello".
Player A later changes their Mojang/Microsoft username to "HelloWorld".
A different Player B registers or logs in using the now-available username "Hello".
Player B ("Hello") receives permissions/data that previously belonged to Player A.
Player A ("HelloWorld") faces data loss or an unexpected reset.
Expected behavior
Username changes should not cause the old username to inherit the original owner’s permissions or data.
The original “HelloWorld” user should retain their full data.
A new player using the old username should start with a clean, separate profile.
Server Info
Limbo plugins versions:
LimboAPI: limboapi-1.1.27-SNAPSHOT.jar
LimboAuth: limboauth-1.1.14.jar
Additional context
We're not assuming this issue is caused by any specific plugin, but since it affects the session/login phase, we wanted to report our findings here in case it's relevant. Any guidance or clarification would be appreciated.