Implement password method

[LucienHH]

This PR clears up #9 and implements the password method directly within pauth with the added benefit of more descriptive errors i.e. if an account has 2FA enabled. With this change password auth can now do user, device and title authentication enabling developers to use password auth and join servers requiring title auth.

This is a breaking change due to live/sisu flow option needing to be set for password auth to work, it will not work with msal flow.

[socket-security]

Removed dependencies detected. Learn more about Socket for GitHub ↗︎

🚮 Removed packages: @xboxreplay/[email protected]

[extremeheat]

I'm not convinced this is a good or reliable idea, this is some really hacky code that would need to remain maintained over long periods of time.

[LucienHH]

I'm not convinced this is a good or reliable idea, this is some really hacky code that would need to remain maintained over long periods of time.

Is the alternative to remove altogether or continue to rely on the dependency? I do agree it could be tricky to maintain but this solution has remained the same for many years and with it in the repo we can better support those who do use it with more informative errors/docs.

[extremeheat]

Since this really is a hack, it's not something I think is appropriate to merge. If it's in some other package dependency we can kind of absolve responsibility for issues here, but putting it into an official PrismarineJS project creates responsibility on us for the creation of and maintenance of this code. If there is a documented and official way to do this, we could merge this, but at present I am not a fan of lowering the code standards to do hacky stuff like this (as in emulating login pages, scraping content, regex, etc). It's not illegal but still not good.

[LucienHH]

Understood. Unfortunately ROPC isn't supported for non org accounts so I'll close this up.