Merge pull request #2971 from MCCTeam/copilot/modernize-authentication-module

docs/guide/README.md

@@ -39,6 +39,7 @@ It was originally made by [ORelio](https://github.com/ORelio) in 2012 on the [Mi
     -   [Get alerted on certain keywords](chat-bots.md#alerts)
     -   [Auto Respond](chat-bots.md#auto-respond)
 
+-   Microsoft account authentication with 2FA support (OAuth 2.0 device code flow)
 -   [Anti AFK](chat-bots.md#anti-afk)
 -   [Auto Relog](chat-bots.md#auto-relog)
 -   [Script Scheduler](chat-bots.md#script-scheduler)

docs/guide/configuration.md

@@ -67,17 +67,33 @@ Coordinate = { x = 145, y = 64, z = 2045 }
 
 -   **Description:**
 
-    This setting is where you need to provide your in-game name (for offline accounts) or email for Microsoft accounts (Mojang accounts do not work anymore) and your password (if using an offline account, use `-` for the password).
+    This setting is where you provide your account login information.
+
+    For **Microsoft accounts**, set `Login` to your Microsoft email. You do not need to provide a password because MCC uses the OAuth 2.0 device code flow for authentication (you sign in through your browser, with full 2FA support).
+
+    For **offline accounts**, set `Login` to your desired in-game name and `Password` to `-`.
+
+    For **Yggdrasil accounts**, set `Login` and `Password` to the credentials for your authlib server.
 
 -   **Format:**
 
-    `Account = { Login = "<email>", Password = "<password>" }`
+    `Account = { Login = "<email>" }`
 
 -   **Type:** `inline table`
 
--   **Example:**
+-   **Examples:**
 
-    `Account = { Login = "some.random.player@gmail.com", Password = "myEpicPassword123" }`
+    Microsoft account (password not needed):
+
+    ```
+    Account = { Login = "player@example.com" }
+    ```
+
+    Offline account:
+
+    ```
+    Account = { Login = "Steve", Password = "-" }
+    ```
 
 #### `Server`
 
@@ -131,7 +147,7 @@ Coordinate = { x = 145, y = 64, z = 2045 }
 
 -   **Description:**
 
-    This setting is where you define the way you will sign in with your Microsoft account, available options are `mcc` and `browser`.
+    This setting is where you define the way you will sign in with your Microsoft account, available options are `mcc` and `browser`. The `mcc` method uses the OAuth 2.0 device code flow: MCC will display a code and a URL, and you complete the sign-in (including 2FA) in your browser. The `browser` method opens a sign-in page in your browser and you paste the resulting code back into MCC.
 
 -   **Type:** `string`
 

docs/guide/usage.md

@@ -121,11 +121,20 @@ MinecraftClient.exe --section.setting=value [--other settings]
 MinecraftClient.exe <settings-file.ini> [--other settings]
 ```
 
+<div class="custom-container tip"><p class="custom-container-title">Tip</p>
+
+**Microsoft accounts use the OAuth 2.0 device code flow and do not require a password on the command line. MCC will display a code and a URL for you to sign in through your browser (with full 2FA support). You can simply omit the password or use `""` as a placeholder.**
+
+</div>
+
 Examples:
 
 ```bash
-# Logging in as a user: notch, with a password: password123 onto a server with the ip: mc.someserver.com:25565
-MinecraftClient.exe notch password123 mc.someserver.com:25565
+# Microsoft account: connect to a server (you will sign in via device code in your browser)
+MinecraftClient.exe player@example.com "" mc.someserver.com:25565
+
+# Offline account: connect with a chosen username
+MinecraftClient.exe Steve - mc.someserver.com:25565
 
 # Overriding a setting from MinecraftClient.ini using a command-line parameter
 MinecraftClient.exe --debugmessages=false
@@ -150,7 +159,7 @@ MinecraftClient.exe <login> <password> <server>
 
 -   This will automatically connect you to the chosen server.
 -   You may omit password and/or server to specify e.g. only the login
--   To specify a server but ask password interactively, use `""` as password.
+-   For Microsoft accounts, password is not required (device code flow is used). Use `""` as a placeholder if you need to specify a server.
 -   To specify offline mode with no password, use `-` as password.
 
 ```bash
@@ -165,7 +174,8 @@ MinecraftClient.exe <myconfig.ini>
 ```
 
 -   This will load the specified configuration file
--   If the file contains login / password / server ip, it will automatically connect.
+-   If the file contains login / server ip, it will automatically connect.
+-   For Microsoft accounts, authentication happens through the device code flow (no password needed in the file).
 
 ```bash
 MinecraftClient.exe --setting=value [--other settings]