Minecraft — Server Architecture and Procedural World

architect35 min

A player launches Minecraft and authenticates through Microsoft/Xbox Live (since Mojang migrated accounts in 2023). Java Edition uses MSA (Microsoft Authentication), Bedrock uses Xbox Live. After authentication, the client receives an access token that the server validates upon connection.

Why this way?

Account migration to Microsoft unifies the ecosystem: Java + Bedrock under one account. Xbox Live provides proven infrastructure for 100M+ users, DDoS protection, and parental controls.

Anti-pattern

The old Mojang authentication was vulnerable to brute force and had no 2FA. Migration to Microsoft fixed this, but broke many third-party launchers.

Progress1 / 20

Minecraft ClientJava / Bedrock

Xbox Live / Mojang AuthMicrosoft Auth

OAuth 2.0REST

BungeeCord / VelocityReverse Proxy

Game ServerOne World Instance

JavaPaper

World GeneratorProcedural Gen

Chunk ManagerLoad / Unload

Java

Tick Engine20 TPS Game Loop

Redstone SimulatorLogic Engine

Entity SystemMobs, Items, Players

Java

World StorageAnvil / LevelDB

Player Data DBInventory & Stats

NBTLevelDB

Minecraft RealmsManaged Hosting

AzureJava

Marketplace / DLCBedrock Store

Skin / Resource CDNtextures.minecraft.net

Plugin / Mod RuntimeBukkit / Fabric

JavaBukkit API

MSA / Xbox Live: unified account, 2FA, parental controls

ArchCase

ArchCase