ВЕРСИИ (21)

* Added early support for AlixAtaraxia * Added 26.3 support * Added ClockSkew fingerprinting (when using Ataraxia) * Fixed 2FA setup and recovery security issues * Fixed token persistence, caching, and database synchronization * Added email verification support (to Spigot) * Added panic mode commands and persistent enable/disable controls * Fixed panic mode activation and deactivation timing issues * Fixed firewall enforcement and connection rate limiting * Improved anti-bot detection using SYN fingerprints and MTU analysis * Updated PacketEvents * Fixed startup crashes on newer Paper versions * Fixed Geyser/Floodgate compatibility with newer Geyser versions * Fixed email verification vulnerabilities and added request timeouts * Fixed multiple authentication bypasses and brute-force protection issues * Fixed account recovery, email verification, and 2FA attempt limits * Fixed database persistence issues with login settings * Improved GDPR account deletion and data cleanup * Fixed several configuration-related crashes and validation issues * Fixed various concurrency issues and potential memory leaks * Improved configuration security and file permissions * Fixed message localization and translation handling * Removed unused code and improved error handling * Fixed various command permission and validation issues * Added email verification commands * Added panic mode and player help commands * Fixed unauthorized access vulnerabilities in admin commands * Fixed server shutdown crashes caused by stale connections * Fixed account recovery commands being blocked during login GUIs * Fixed excessive resource usage in captcha and connection handling

Changes since 3.10.0 (DEV-2) * Fixed a nasty issue related to partial writes on congested networks * 'allow-case-sensitive-nicknames' is now false by default * Optimized v4 ip look-ups * Properly accounted for legacy ping * Fixed improper firewalls

* Fixed non-premium players getting an invalid packet message instead of the actual packet (except the very first person) * Added a fail-safe for non-limbo after-verification packet resend

* Fixed version checker errors & offloaded it to blocking execution scheduler

* Fixed SEGFAULT upon panic mode activation (my bad bruh) * Fixed random timeouts (and possibly false firewalling) caused by a race condition * Fixed console spam caused by bots scanning the internet * Improved premium data request sources (Removed AshCon, set Mojang as primary source) * All 'matscan' scans will now be firewalled by default * Added an 'auto' option to premium-uuid * Removed obsolete Internal NIO Interceptor firewall type * Fixed empty password salt hashing issues * Fixed invalid and near-zero timeouts for all firewall entries * Modernized antibot algorithms: C1 -> C2, B2 -> B3 * Removed 'virtual-limbo-server' & '__no-premium-auth-but-keep-identity' from config.yml * Fixed premium auth disconnect errors * Fixed new bedrock players receiving "[No captcha]"

* Fixed some HAProxy set-up issues, such as indefinite waiting and pre-login checks not properly working * Fixed 'Invalid host' sometimes appearing for niche handshake formats * Fixed invalid packet disconnects at password validity feedback

* Added 26.2 support * Drastically reduced additional latency caused by Alix during join * Fixed several errors causing random disconnects to players * Enhanced bot attack & DDoS detection algorithms (Some new ones are still in production) * Optimized several critical parts of connection handling * Added automatic HAProxy support * Reduced the firewall's memory footprint & introduced time-based firewall entries * Added Panic Mode, which allows only already-registered players to join, activated whenever suspicious network activity is detected * Players will now, by default, be sent to the virtual limbo for login, if possible, in order to reduce main server pressure. If this option causes issues or isn't desired, it can be turned off at 'virtual-limbo-login' in config.yml * Enhanced automatic host recognition, now accounting for a reverse-proxy * Added the ability to configure whether users with differently-cased, but ignoring case equal nicknames, should be allowed to join * Reworked Alix's Fast Unsafe Epoll init mechanic * Added atomic file writes & graceful continues at read fail * Fixed 'Already connecting (...)' sometimes appearing for players * Premium requests are now always cached, reducing rate limits * The virtual limbo can no longer be turned off, due to the extreme optimization and functionality it provides. As such, manual visual captcha should no longer ever appear for any player * Fixed several virtual limbo issues, related to a read never completing

* Hotfix for 3.8.1, where new premium players would timeout due to a console error

+ Added 26.1 Support + Added /as rf, used for forcefully registering a player + (Hopefully) Added support for premium player renames * Fixed invalid BCrypt passwords logic

* Fixed possible random client disconnects on some linux machines due to internal flushing error and reversed compression logic * Added a few new configuration options * Changed default encoding strategy to runtime caching instead of pregenerating all * Fixed IP not updating after login

- Added DataBase sync support - Fixed deprecated buf util causing issues - Lifted password limitations: Max length 30 -> 50, Min valid ASCII char 35 -> 33, Max 382 -> No upper limit, allowed special characters - Improved password invalidity feedback - Fixed limbo "Loading terrain..." 30-second screen for 1.19.3+ clients (no idea if lower versions get it)

+ Optimized the "alix_captcha_world" + Added a fail-safe kick + Blocked command execution if anything fails + Added support for Paper's async spawn event + Added the option to set a player's password to the option specified by the command executor * Fixed hunger drop during verification * Fixed minor error message sometimes appearing during disconnect at join * Database migration now also supports MySQL * Fixed a possible in the virtual limbo during invalid packet kick * A try to fix sun.misc.Unsafe on java 25 and newer

* Spigot & forks 1.21.11 load hotfix

* Support 1.21.11 * Updated PacketEvents

* Fixed a bedrock player issue * Fixed a java client disconnect error

* Fixed the console error message (and possibly spam) during early client packet processing error * Fixed possible alix exception init spam * Fixed 'Network Protocol Error' in the automatic antibot by removing one of the logical checks * Fixed 'Network Protocol Error' during the QR code view * Added a brand new logical check for the automatic antibot * Added proper Alix API, including bukkit event invocations

* Minor fixes * PacketEvents update

+ 1.21.10 support + Added a late-override mechanic if premium-uuid is true and uuid was not set to v4 + Added an unsafe config param for very limited backend usage to support backwards compatibility + Added the ability to migrate from AuthMe * Fixed issues related to client network crashes * Fixed a security vulnerability, where the player would never undergo verification (on certain servers) * Optimized NanoLimbo

+ Added 1.21.6+ support + Added a safe-guard against giant memory allocations, resulting in an OOM, in the Virtual Server + General optimizations Also should be nearing adding the AuthMe -> Alix data migration

- Added 1.21.5 support - Hopyfully fixed join errors & random disconnects, by always re-encoding the handshake packets - Fixed other minor issues

* Fixed captcha timeout tasks never starting * Fixed errors on password resets + Added a fail-safe system for file writing