Welcome to NoInvalidSessionID!

This mod removes the pesky "Invalid Session" so you never have to relaunch your game to start a new session ever again!

When you first launch with this mod, you will get a message on your multiplayer screen saying to go to an official Microsoft site to put in a code that the mod will generate. All that this does is tell Microsoft, "This is my Session ID token currently, please allow access so every time I go to the multiplayer screen, I refresh this token".

After you put in the ID ONCE, it should work forever, no additional login required after that point. This mod is designed to work forever, thouh if you unlikely experience problems after 90 days, it's recommended to log in again. The code will expire after 90 days of inactivity, so in that case, follow the on screen instructions to put the code in again. However, that is only in the case of inactivity, so if you play at any point in that time frame, your session ID will never expire.

In the Gallery tab, all screens that you should see are shown, so you know if it's right or not.

3 easy steps (once a month, or never again)

1. Open the multiplayer menu

You're gonna want to click the Green button, then the Blue button (step 2)

2. After clicking the Blue button, you'll be taken to an offical Microsoft website.

Paste the code you copied in step 1, and then hit enter.

3. Once you hit enter, you'll be taken to this screen.

you're done!, you can close it now :D

Multi-Account support (beta)

This mod now supports multi-account functionality on the same device (yay!). It just uses a simple fix: different token.enc files for each account.

Special thanks to @-------- for discovering this functionality! :D

Security & Privacy

This mod performs a Microsoft OAuth 2.0 login to refresh your session. Here is exactly what it does and does not do:

What it stores: A Microsoft refresh token, AES-256-GCM encrypted, saved to (on windows) C:/ Users/ [your username] /.noinvalidsessionid/token.enc outside your Minecraft folder. On Mac and Linux the file is additionally restricted to your OS user account only (permissions set to 600).

What it never does: The mod never stores your Microsoft password, never sends your credentials anywhere except official Microsoft and Minecraft servers, and never communicates with any third-party server.

Endpoints used:

• login.live.com — Microsoft authentication
• user.auth.xboxlive.com — Xbox Live token exchange
• xsts.auth.xboxlive.com — Xbox security token
• api.minecraftservices.com — Minecraft session token and profile verification

Open source: The full source code is available on GitHub so you can verify exactly what the mod does.

Revoking access: You can revoke access at any time by going to account.microsoft.com → Security → Connected apps and removing it, or simply deleting ~/.noinvalidsessionid/token.enc.

---

Small Note: It's recommended to restart your game every once in a while, not due to the mod, but because Minecraft can become a power user of your system RAM and CPU over time.

---

Q: Artificial Intelligence disclosure

A: This mod's core design, icon, description, and gallery images are not ai. However, I am a primitive coder, and I do use ai for tasks I do not know how to do. It simply cannot be helped (well it can, and I'm learning java, don't get me wrong, but not that fast.) I am also actively learning from ai, not plainly using it to build mods. It's taught me a lot, but not enough. The secure token storage method (the moderators wanted it) is accomplished using ai. On the other hand, all logs are human made. AI is also used for help with naming, blocking (my term for creating the blocks of code) and other parts of the code. All testing is completed extensively with human brain cells and knowledge, and so are all ideas of modification and changes.