feat: 添加 gitea 构建脚本

.gitea/workflows/build.yaml

@@ -0,0 +1,68 @@
+name: Build and Push Docker Image
+
+on:
+  push:
+    branches:
+      - dev
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    env:
+      CGO_ENABLED: 1
+    steps:
+      - name: Checkout codebase
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+      - name: Pre Setup NodeJS
+        uses: actions/setup-node@v4
+        with:
+          node-version: '18.x'
+      - name: For act to work
+        run: npm -g install yarn
+      - name: Setup NodeJS
+        uses: actions/setup-node@v4
+        with:
+          node-version: '18.x'
+          cache: 'yarn'
+          cache-dependency-path: frontend
+      - name: Build Frontend
+        run: |
+          make assets
+          rm -rf /host/${{ gitea.workspace }} && mkdir -p /host/${{ gitea.workspace }}
+          cp -a . /host/${{ gitea.workspace }}/
+      - name: Build Yggdrasil Server
+        uses: crazy-max/ghaction-xgo@v2
+        with:
+          xgo_version: latest
+          go_version: 1.24
+          dest: build
+          prefix: yggdrasil
+          targets: linux/amd64,linux/arm64
+          v: true
+          x: false
+          race: false
+          ldflags: -s -w -buildid=
+          tags: nomsgpack sqlite mysql
+          trimpath: true
+      - name: Store Back Binaries
+        run: |
+          cp -a /host/${{ gitea.workspace }}/build/. build
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v2
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+      - name: Login to Docker Registry
+        uses: docker/login-action@v3
+        with:
+          registry: docker.sunxinao.cn
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+      - name: Build and push
+        uses: docker/build-push-action@v3
+        with:
+          context: .
+          push: true
+          platforms: linux/amd64,linux/arm64
+          tags: docker.sunxinao.cn/gardel/yggdrasil-go:latest

.github/workflows/release.yml

@@ -52,7 +52,7 @@ jobs:
           SUFFIX="$(echo "$LINE" | grep -osE '\.\w+' || printf '')"
           cp -v "$LINE" "yggdrasil$SUFFIX"
           FILE="../$PREFIX.zip"
-          zip -9v "$FILE" "yggdrasil$SUFFIX" *.ini assets
+          zip -9rv "$FILE" "yggdrasil$SUFFIX" *.ini assets
           DGST="$FILE.dgst"
           openssl dgst -md5    "$FILE" | sed 's/([^)]*)//g' >>"$DGST"
           openssl dgst -sha1   "$FILE" | sed 's/([^)]*)//g' >>"$DGST"

Dockerfile

@@ -1,8 +1,10 @@
-FROM alpine:latest
+FROM debian:12-slim
 
 LABEL maintainer="Gardel <sunxinao@hotmail.com>"
 LABEL "Description"="Go Yggdrasil Server"
 
+RUN apt-get update && apt-get install -y ca-certificates
+RUN update-ca-certificates
 ARG TARGETOS
 ARG TARGETARCH
 RUN mkdir -p /app

README.md

@@ -16,6 +16,12 @@
 
 禁止其他违反 [EULA](https://account.mojang.com/documents/minecraft_eula) 的行为。
 
+## 准备
+
++ 运行 Linux, Windows 或 MacOS 的主机
++ SMTP 服务器和账号用于发送密码找回邮件
++ MySQL 数据库（如果使用 sqlite 则不需要）
+
 ## 用法
 
 下载或编译得到可执行文件并运行，将会自动生成所需的配置文件和数据库文件。
@@ -33,3 +39,11 @@
 ```shell
 docker run -d --name yggdrasil-go -v $(pwd)/data:/app/data -p 8080:8080 gardel/yggdrasil-go:latest
 ```
+
+## 计划
+
+- [x] 支持密码重置
+- [ ] 支持不同的数据库如 PostgreSQL 等
+- [ ] 添加选项以支持完全离线模式（不检查 Mojang 接口）
+- [ ] 添加选项以禁用邮箱验证
+- [ ] 令牌持久化防止升级和重启时令牌生效

main.go

@@ -151,6 +151,7 @@ func main() {
 	serverMeta.Meta.ImplementationVersion = meta.ImplementationVersion
 	serverMeta.Meta.FeatureNoMojangNamespace = true
 	serverMeta.Meta.FeatureEnableProfileKey = true
+	serverMeta.Meta.FeatureEnableMojangAntiFeatures = true
 	serverMeta.Meta.Links.Homepage = meta.SkinRootUrl + "/profile/"
 	serverMeta.Meta.Links.Register = meta.SkinRootUrl + "/profile/"
 	serverMeta.SkinDomains = meta.SkinDomains

router/home_router.go

@@ -1,5 +1,5 @@
 /*
- * Copyright (C) 2022-2023. Gardel <sunxinao@hotmail.com> and contributors
+ * Copyright (C) 2022-2025. Gardel <sunxinao@hotmail.com> and contributors
  *
  * This program is free software: you can redistribute it and/or modify
  * it under the terms of the GNU Affero General Public License as published by
@@ -33,10 +33,11 @@ type MetaInfo struct {
 		Homepage string `json:"homepage,omitempty"`
 		Register string `json:"register,omitempty"`
 	} `json:"links"`
-	FeatureNonEmailLogin     bool `json:"feature.non_email_login,omitempty"`
-	FeatureLegacySkinApi     bool `json:"feature.legacy_skin_api,omitempty"`
-	FeatureNoMojangNamespace bool `json:"feature.no_mojang_namespace,omitempty"`
-	FeatureEnableProfileKey  bool `json:"feature.enable_profile_key,omitempty"`
+	FeatureNonEmailLogin            bool `json:"feature.non_email_login,omitempty"`
+	FeatureLegacySkinApi            bool `json:"feature.legacy_skin_api,omitempty"`
+	FeatureNoMojangNamespace        bool `json:"feature.no_mojang_namespace,omitempty"`
+	FeatureEnableProfileKey         bool `json:"feature.enable_profile_key,omitempty"`
+	FeatureEnableMojangAntiFeatures bool `json:"feature.enable_mojang_anti_features,omitempty"`
 }
 
 type ServerMeta struct {

router/init.go

@@ -79,6 +79,7 @@ func InitRouters(router *gin.Engine, db *gorm.DB, meta *ServerMeta, smtpCfg *ser
 	}
 	minecraftservices := router.Group("/minecraftservices")
 	{
+		minecraftservices.GET("/player/attributes", userRouter.PlayerAttributes)
 		minecraftservices.POST("/player/certificates", userRouter.ProfileKey)
 		minecraftservices.GET("/publickeys", homeRouter.PublicKeys)
 		minecraftservices.GET("/minecraft/profile/lookup/:uuid", userRouter.UUIDToUUID)

router/user_router.go

@@ -38,6 +38,7 @@ type UserRouter interface {
 	UUIDToUUID(c *gin.Context)
 	QueryUUIDs(c *gin.Context)
 	QueryProfile(c *gin.Context)
+	PlayerAttributes(c *gin.Context)
 	ProfileKey(c *gin.Context)
 	SendEmail(c *gin.Context)
 	VerifyEmail(c *gin.Context)
@@ -299,6 +300,21 @@ func (u *userRouterImpl) QueryProfile(c *gin.Context) {
 	c.JSON(http.StatusOK, response)
 }
 
+func (u *userRouterImpl) PlayerAttributes(c *gin.Context) {
+	c.JSON(http.StatusOK, gin.H{
+		"privileges": gin.H{
+			"onlineChat":        true,
+			"multiplayerServer": true,
+			"multiplayerRealms": false,
+			"telemetry":         false,
+			"optionalTelemetry": false,
+		},
+		"profanityFilterPreferences": gin.H{
+			"profanityFilterOn": false,
+		},
+	})
+}
+
 func (u *userRouterImpl) ProfileKey(c *gin.Context) {
 	bearerToken := c.GetHeader("Authorization")
 	if len(bearerToken) < 8 {

service/user_service.go

@@ -398,7 +398,7 @@ func (u *userServiceImpl) ProfileKey(accessToken string) (resp *ProfileKeyRespon
 		resp = new(ProfileKeyResponse)
 		now := time.Now().UTC()
 		resp.RefreshedAfter = now
-		resp.ExpiresAt = now.Add(time.Hour * 24 * 90)
+		resp.ExpiresAt = now.Add(10 * time.Minute)
 		keyPair, err := u.getProfileKey(token.SelectedProfile.Id)
 		if err != nil {
 			return nil, err