COWMODSКаталог модов

FoliaLogin

Folia safe AuthMe style authentication for Folia servers.

Автор: EnXa3531обновлён 23 окт. 2026 г.
УправлениеУтилиты

Описание

FoliaLogin

FoliaLogin is an AuthMe-style authentication plugin built specifically for Folia (also runs on Paper), for Minecraft 1.20+. It provides secure account registration and login, optional two-factor authentication (2FA), and prevents players from interacting with the server until they are authenticated.


Highlights

  • Auth commands: /register, /login, /changepassword, /logout
  • Two-factor authentication (TOTP): works with Google Authenticator, Authy, Aegis, 2FAS…
  • Passwords and 2FA codes are hidden from the console
  • Blocks movement, interactions, inventory, chat, and commands until authenticated
  • IP-based sessions (optional)
  • Configurable reminders (login/register/2FA prompts)
  • BCrypt password hashing (secure storage)
  • Anti-bruteforce protection: lockouts survive reconnects, 2FA codes can't be reused
  • Max accounts per IP (configurable limit)
  • Auth spawn with /authme setspawn (saves your position and the direction you're looking)
  • Return to last location after login, or always spawn at the spawn on join
  • No-return worlds: players who log out in an event/minigame world rejoin at the spawn
  • 100% async, thread-safe database operations
    • SQLite by default
    • MySQL/MariaDB via HikariCP
  • 100% Folia-safe (no BukkitScheduler usage)
  • Fully configurable: config.yml + lang.yml. New options are added automatically on update, no need to delete your config
  • Admin tools: /authme suite + permissions
  • Optional premium/proxy mode for auto-login when UUID forwarding is enabled

Compatibility

  • Server: Folia or Paper, 1.20 – 1.20.6 (1.21 should work)
  • Java: 17 or newer (21 recommended)

Languages

  • English by default, fully translatable via lang.yml

Installation

  1. Drop the jar into /plugins
  2. Restart the server
  3. Configure:
    • config.yml
    • lang.yml
  4. /authme reload or restart after changes

Updating: just replace the jar and restart. The database and config files are upgraded automatically.


Commands

Players

  • /register <password> [password] (alias /reg)
  • /login <password> (alias /l)
  • /changepassword <old> <new> [new] (aliases /changepass, /cp)
  • /logout

Two-factor authentication (2FA)

  • /2fa add <password>: shows your secret key (click to copy) to add in your authenticator app
  • /2fa confirm <code>: enables 2FA
  • /2fa <code>: enter your code after /login
  • /2fa remove <code>: disables 2FA

Admin

  • /authme register <player> <password>
  • /authme changepassword <player> <newpass>
  • /authme unregister <player>
  • /authme reload
  • /authme status <player>
  • /authme setspawn: sets the login spawn at your position and facing direction
  • /authme resettotp <player>: removes a player's 2FA (lost phone)

Permissions

PermissionDefault
authme.player.register / login / changepassword / logouteveryone
authme.player.totp (set up 2FA)everyone
authme.admin.register / changepassword / unregister / reload / statusop
authme.admin.setspawn / authme.admin.resettotpop
authme.bypass (only if security.allowBypassPermission: true)op

Spawn options (config.yml)

spawn:
  useAuthSpawn: true          # teleport players to the spawn until they log in
  useWorldSpawn: true         # true = world spawn, false = location set with /authme setspawn
  spawnWorld: ""              # empty = main world
  returnToLastLocation: true  # after login, go back to where you logged out
  forceSpawnOnJoin: false     # always start at the spawn when joining
  noReturnWorlds: []          # e.g. ["event"]: logging out there = rejoin at the spawn

Галерея

Register / LoginCommandsYou can’t force-disconnect a player who is already logged in.

Последние версии

Все версии →
release

FoliaLogin 1.1.2

1.1.2
23 окт. 2026 г.22Minecraft: 1.20, 1.20.1, 1.20.2, 1.20.3, 1.20.4, 1.20.5, 1.20.6, 1.21, 1.21.1, 1.21.2, 1.21.3, 1.21.4, 1.21.5, 1.21.6, 1.21.7, 1.21.8, 1.21.9, 1.21.10, 1.21.11folia
Скачать
Что нового
## 1.1.2 – Security fixes Players who are not logged in yet can no longer: - use their admin's creative mode: they're put in survival until they log in (game mode restored after), and F3+F4 / game mode changes are blocked (`restrictions.lockGameMode`) - use items by right-clicking the air (ender pearls, food, potions, projectiles…), eat, or teleport with ender pearls/chorus fruit/spectator mode - take items from armor stands - hurt other players with projectiles or lingering potions - drag items in their inventory Also: - `/logout` now saves your position, so `/login` brings you back to where you logged out (no more free teleport) - Players who aren't logged in can fall instead of being frozen in the air and kicked for flying - Only one password check at a time per player (protects the server from `/login` spam) - New: players who don't log in within `security.loginTimeoutSeconds` (default 60) are kicked
release

FoliaLogin 1.1.1

1.1.1
4 окт. 2026 г.45Minecraft: 1.20, 1.20.1, 1.20.2, 1.20.3, 1.20.4, 1.20.5, 1.20.6, 1.21, 1.21.1, 1.21.2, 1.21.3, 1.21.4, 1.21.5, 1.21.6, 1.21.7, 1.21.8folia, paper
Скачать
Что нового
## 1.1.1 - **New:** `spawn.noReturnWorlds`, a list of worlds where the logout position isn't kept (event worlds, minigames…). Players who log out in one of these worlds rejoin at the spawn instead of going back there. ```yaml spawn: noReturnWorlds: ["event"]
release

FoliaLogin 1.1.0

1.1.0
2 окт. 2026 г.14Minecraft: 1.20, 1.20.1, 1.20.2, 1.20.3, 1.20.4, 1.20.5, 1.20.6, 1.21, 1.21.1, 1.21.2, 1.21.3, 1.21.4, 1.21.5, 1.21.6, 1.21.7, 1.21.8folia, paper
Скачать
Что нового
## 1.1.0 – Two-factor authentication & spawn options ### New - **Two-factor authentication (TOTP)**, works with Google Authenticator, Authy, Aegis, 2FAS… - `/2fa add <password>` shows a key (click to copy), then `/2fa confirm <code>` enables it - After `/login`, players with 2FA enter `/2fa <code>` (alias: `/totp`) - `/2fa remove <code>` to disable it, `/authme resettotp <player>` for admins (lost phone) - Brute-force protection: 5 tries, then kick + temporary lock (survives reconnects). Used codes can't be reused - **`/authme setspawn`**: saves your position *and the direction you're looking* as the login spawn - **`spawn.forceSpawnOnJoin`**: always put players at the spawn when they join - **`spawn.spawnWorld`**: choose which world's spawn is used (default: main world) ### Changes - The login spawn now uses the main world, not the world the player logged out in - Passwords and 2FA codes no longer appear in the console - Login lockouts now survive reconnects (per account + IP), and `/changepassword` is rate limited - `/authme status` now shows whether a player uses 2FA - With `premium.allowOfflineMode`, accounts that have 2FA must log in with their password + code ### Fixes - With `invalidateOnQuit` and `timeoutMinutes: 0`, a player who never logged in could get an auto-login session ### Upgrading Replace the jar and restart. The database is upgraded automatically, and new options are added to `config.yml` and `lang.yml` without touching your settings. New permissions: `authme.player.totp` (everyone), `authme.admin.setspawn` and `authme.admin.resettotp` (op).
release

FoliaLogin 1.0.0

0.1.0
21 янв. 2026 г.271Minecraft: 1.20, 1.20.1, 1.20.2, 1.20.3, 1.20.4, 1.20.5, 1.20.6, 1.21, 1.21.1, 1.21.2, 1.21.3, 1.21.4, 1.21.5, 1.21.6, 1.21.7, 1.21.8folia
Скачать