Update Gradle boilerplate

[Protonull]

• Moves the Mojang mappings to the subprojects block in the root build.gradle.

• Updates the "dev.architectury.loom" plugin to 0.12.0-SNAPSHOT.

• Updates "com.github.johnrengelman.shadow" plugin to 7.1.2.

• Updates the Fabric Loader version from 0.13.3 to 0.14.9.

• Updates the Fabric API version from 0.51.1 to 0.58.0.

• Updates the Forge version from 40.1.19 to 40.1.73.

[Gjum]

A few questions. Overall LGTM

[Gjum]

After further thought, I really don't like the introduction of the Architectory API dependency. We don't use any of its features (it seems more geared towards modifying the base game by adding blocks etc.) and it requires users installing another jar.

[Protonull]

I'm happy to remove the Architectury API, but I would like some brainstorming on how we can assert that a development environment is a development environment. Spamming Mojang with authentication requests is not great.

[Huskydog9988]

Is the disable auth option not sufficient, also I was under the impression you wanted to use architectury for its other features too.

[Protonull]

Is the disable auth option not sufficient

Nope. The server sends the EncryptionRequest packet which includes the server's public key. Once received, the mod will generate a 16-byte secret and digests it in combination with the server's public key and then initiates a authentication check with Mojang. When the server receives the EncryptionResponse packet, which includes the mod's secret, the server will likewise digest it in combination with its public key and query Mojang.

Your DISABLE_AUTH is strictly server-side, ie, the server will not attempt to validate whether a client is authenticated with Mojang, but this doesn't stop the client from authenticating. This is a commit from my fork which demonstrates the usefulness of this distinction since dev clients will almost never be authenticated. And since MapSync clients will continually attempt to reconnect to a server every 5 seconds or so, you're effectively spamming Mojang's authentication servers.