`getTitleToken` does not work { doSisuAuth: false, authTitle: Titles.MinecraftJava, deviceType: "Win32" } about prismarine-auth

[LucienHH]

Currently, custom Azure apps aren't really supported in prismarine-auth due to some scopes not being set correctly, we'd also need to account for the fact that the majority of custom Azure apps are unable to create title tokens. We could add a flag like customAzureApp: true to the options because I'm not sure how else we'd be able to distinguish.

[extremeheat]

Why are you setting this flag? What tokens are you seeking?

[LucienHH]

Just to chime in as well /examples/xbox/sisu.js has doSisuAuth set to true as it is needed for the Java titleId

[AlphaBs]

I want to make a minecraft client that allows accounts under the age of 18 to log in and uses my azure app id.
but doSisuAuth does not work for my azure app id: docs

my real code looks like this (pseudocode):

const flow = new Authflow(id,cache, { doSisuAuth: false, authTitle: "<my-azure-app-id>", deviceType: 'Win32' })
const msaToken = loginWithMsalJs() // i used MSAL.js

userToken = flow.xbl.getUserToken(msaToken)
deviceToken = flow.xbl.getDeviceToken()
titleToken = flow.xblgetTitleToken(msaToken, deviceToken)
xstsToken = flow.xbl.getXSTSToken(userToken, deviceToken, titleToken)
mcToken = flow.mca.getAccessToken(xstsToken)

can I do like this?

[extremeheat]

The Windows app IDs and the Azure app IDs have different length (latter in UUID form) so that can be used to disambiguate. And yes, the privileges of an azure app usually means that full authentication cannot happen for XBL APIs. There is little reason to use them in favor of the current Minecraft* tokens unless you need it for some production thing. In which case we could use a PR. The only practical difference to the user is what the sign-in page lists as the app you sign in to..

[LucienHH]

Azure apps also have Windows app ids and can be substituted in and out, I think it'd be very rare to see someone use a custom Azure app with the Windows app ID but it does exist. I think it would be a useful addition as I'm sure there are a few people who use pauth just for XBL authentication and would find use in it.