COWMODSКаталог модов

peyaj's Auth [Paper/Velocity]

Authentication plugin with auto-login feature for premium users and more. No /premium needed.

Автор: peyaj2,1 тыс.5обновлён 26 окт. 2026 г.
Скачать 1.7.3Все версии (32)

Описание

peyajAuth

A lightweight, secure, and modern authentication plugin for Minecraft servers (Paper 1.21+) and Velocity proxy networks.

Java Platform Version bStats Paper bStats Velocity

[!IMPORTANT] Setup Requirement: Set online-mode=false in server.properties (or velocity.toml). peyajAuth automatically validates official Mojang accounts while protecting offline/cracked players with passwords.

Features

  • Auto-Login for Premium: Official Minecraft accounts log in instantly with zero commands.
  • Password Protection: Offline/cracked accounts register and log in with Argon2/BCrypt hashing.
  • Built-in Limbo Void: Velocity proxies get an embedded virtual void world without needing an extra lobby server.
  • Bedrock & Geyser: Seamless Floodgate support with Bedrock player auto-detection.
  • Account Safety: 2FA (Google Authenticator), email recovery, anti-bot captchas, and brute-force lockouts.
  • Discord Alerts: Real-time webhook notifications for registrations, logins, lockouts, and staff actions.
  • AuthMe Migration: One-command database importer (/auth import <file.db>).

Quick Setup

Paper

  1. Drop peyajAuth-Paper-1.7.0.jar into your plugins/ folder.
  2. Ensure online-mode=false in server.properties.
  3. Restart your server.

Velocity Proxy

  1. Drop peyajAuth-Velocity-1.7.0.jar into your proxy plugins/ folder.
  2. Ensure online-mode=false in velocity.toml.
  3. Restart Velocity.

Commands

CommandDescriptionPermission
/register <password> <confirm>Register an accountEveryone
/login <password>Log into your accountEveryone
/changepassword <old> <new>Change account passwordEveryone
/2fa <setup|confirm|disable>Manage Google AuthenticatorEveryone
/email <add|confirm>Manage recovery emailEveryone
/auth reloadReload configuration filesOP / Admin
/auth force <player>Force-authenticate a playerOP / Admin
/auth unregister <player>Unregister a player accountOP / Admin
/auth guiOpen in-game admin menuOP / Admin

For developer API, configuration guide, and full documentation, visit the Wiki.

Последние версии

Все версии →
release

peyaj's Auth [Velocity] 1.7.3

1.7.3
26 окт. 2026 г.20Minecraft: 1.21, 1.21.1, 1.21.2, 1.21.3, 1.21.4, 1.21.5, 1.21.6, 1.21.7, 1.21.8, 1.21.9, 1.21.10, 1.21.11, 26.1, 26.1.1, 26.1.2, 26.2, 26.3velocity
Скачать
Что нового
version parity to paper, no changes.
release

peyaj's Auth [Paper] 1.7.3

1.7.3
26 окт. 2026 г.72Minecraft: 1.21, 1.21.1, 1.21.2, 1.21.3, 1.21.4, 1.21.5, 1.21.6, 1.21.7, 1.21.8, 1.21.9, 1.21.10, 1.21.11, 26.1, 26.1.1, 26.1.2, 26.2, 26.3folia, paper, purpur
Скачать
Что нового
just a few bug fixes on spawn related issues
release

peyaj's Auth [Velocity] 1.7.2

1.7.2
23 окт. 2026 г.52Minecraft: 1.21, 1.21.1, 1.21.2, 1.21.3, 1.21.4, 1.21.5, 1.21.6, 1.21.7, 1.21.8, 1.21.9, 1.21.10, 1.21.11, 26.1, 26.1.1, 26.1.2, 26.2, 26.3velocity
Скачать
Что нового
### Improvements * Added `/auth changepassword <player> <newPassword>` and `/auth setpassword <player> <newPassword>` to proxy commands, allowing network staff to reset player passwords directly with real-time notification to the player if online. * Added `peyajauth.changepassword.admin` check alongside `peyajauth.admin`, allowing server owners to grant password management privileges to moderators without giving full root admin permissions. * Added configurable password complexity requirements (`password.require-number`, `password.require-uppercase`, and `password.require-lowercase`) across `/register`, `/changepassword`, and `/auth changepassword` to match Paper parity. * Resetting a password administratively now invalidates stored session tokens and expiry dates so players are forced to log in with their new credentials.
release

peyaj's Auth [Paper] 1.7.2

1.7.2
23 окт. 2026 г.112Minecraft: 1.21, 1.21.1, 1.21.2, 1.21.3, 1.21.4, 1.21.5, 1.21.6, 1.21.7, 1.21.8, 1.21.9, 1.21.10, 1.21.11, 26.1, 26.1.1, 26.1.2, 26.2, 26.3folia, paper, purpur
Скачать
Что нового
### Improvements * Added `/auth changepassword <player> <newPassword>` and `/auth setpassword <player> <newPassword>` for server administrators. Staff can now reset player passwords directly from the console or in-game without needing the previous password. * Resetting a player's password now immediately clears active session tokens and expiration timers, preventing compromised sessions from staying auto-logged in. * Enhanced login spawn handling to dismount players from vehicles and wake sleeping players prior to auth teleportation, avoiding vehicle duplication or position desyncs.
release

peyaj's Auth [Velocity] 1.7.1

1.7.1
16 окт. 2026 г.48Minecraft: 1.21, 1.21.1, 1.21.2, 1.21.3, 1.21.4, 1.21.5, 1.21.6, 1.21.7, 1.21.8, 1.21.9, 1.21.10, 1.21.11, 26.1, 26.1.1, 26.1.2, 26.2, 26.3velocity
Скачать
Что нового
### Fixes - Fixed Floodgate Bedrock checks to use official API validation, preventing prefix spoofing and account takeovers. - Fixed database error handling across proxy auth commands so database outages fail safely. - Fixed two-factor authentication on Velocity proxies so 2FA codes are verified directly during proxy login. - Fixed logout command to de-authenticate players on backend servers and return them to the limbo waiting room. - Fixed brute-force protection to track failed attempts and disconnect players who exceed limits. - Fixed duplicate listeners to resolve command conflicts and allow disconnect for unauthenticated players. - Fixed title display timings so fade-in, stay, and fade-out durations are properly applied. - Fixed prompt spam by removing redundant limbo auth reminders and accurately distinguishing premium accounts. ### Improvements - Added support for session duration and remember-login settings from proxy configuration. - Added startup warnings when the auth bridge secret is left empty. - Improved login command concurrency to prevent race conditions during rapid authentication attempts. - Improved captcha generation by using a cryptographically secure random generator.
release

peyaj's Auth [Paper] 1.7.1

1.7.1
16 окт. 2026 г.124Minecraft: 1.21, 1.21.1, 1.21.2, 1.21.3, 1.21.4, 1.21.5, 1.21.6, 1.21.7, 1.21.8, 1.21.9, 1.21.10, 1.21.11, 26.1, 26.1.1, 26.1.2, 26.2, 26.3folia, paper, purpur
Скачать
Что нового
### Fixes - Fixed database error handling across all auth commands so database connection drops fail safely instead of allowing unauthenticated access. - Fixed database upsert queries to properly save offline UUID bindings during account updates. - Fixed two-factor setup to keep secrets strictly local rather than sending them to third-party QR generators. - Fixed Argon2 password verification to read algorithm parameters directly from stored hashes. - Fixed LuckPerms permission cloning between offline and online accounts by using public API interfaces. - Fixed console logging for sensitive commands to strip passwords cleanly without causing logger recursion crashes. - Fixed Bedrock and Java name collisions to protect registered Java accounts from unauthenticated Bedrock takeovers. - Fixed placeholder requests so they read from local memory caches rather than performing blocking database reads on the main thread. ### Improvements - Improved Folia support (it was half baked last time, not really reliable) - Improved database lookup performance with case-insensitive indexing and automatic migration for existing SQLite databases. - Added startup warnings when the auth bridge secret is left empty. - Improved console logging to show clear success messages only when players successfully log in or register.
release

peyaj's Auth [Velocity] 1.7.0

1.7.0
14 окт. 2026 г.28Minecraft: 1.21, 1.21.1, 1.21.2, 1.21.3, 1.21.4, 1.21.5, 1.21.6, 1.21.7, 1.21.8, 1.21.9, 1.21.10, 1.21.11, 26.1, 26.1.1, 26.1.2, 26.2, 26.3velocity
Скачать
Что нового
### Changes * discord webhook notifications across your proxy for registrations, logins, failed attempts, brute-force lockouts, password changes, 2FA setup, and admin commands. * performance improvements * some bug fixes on importing data from other auth plugin
release

peyaj's Auth [Paper] 1.7.0

1.7.0
14 окт. 2026 г.34Minecraft: 1.21, 1.21.1, 1.21.2, 1.21.3, 1.21.4, 1.21.5, 1.21.6, 1.21.7, 1.21.8, 1.21.9, 1.21.10, 1.21.11, 26.1, 26.1.1, 26.1.2, 26.2, 26.3folia, paper, purpur
Скачать
Что нового
### Changes * discord webhook notifications for player registrations, logins, failed attempts, brute-force lockouts, password changes, 2FA setup, and admin commands. * performance improvements * fixed some bugs on importing data from other auth plugins
release

peyaj's Auth [Velocity] 1.6.9

1.6.9
25 сент. 2026 г.107Minecraft: 1.21, 1.21.1, 1.21.2, 1.21.3, 1.21.4, 1.21.5, 1.21.6, 1.21.7, 1.21.8, 1.21.9, 1.21.10, 1.21.11, 26.1, 26.1.1, 26.1.2, 26.2, 26.3velocity
Скачать
Что нового
### Connection Fixes * Verified premium (online-mode) players now bypass the internal Limbo server. * Added active server connection deduplication in redirect routines to prevent redundant server switch requests. * Fixed an issue where players with an existing premium account were blocked by `/premiumverify` with an incorrect password prompt. * Minecraft 26.3 Support ### Security Hardening * Intercepted incoming PluginMessageEvent to drop any client-injected packets from cheat clients, preventing forged proxy authentication bypasses. * Added HMAC-SHA256 signatures with timestamp expiration to proxy-to-server auth sync packets. * Removed unsafe auto-authentication of offline-mode players in Limbo when matching a premium username. Offline players attempting to access premium accounts are strictly required to verify ownership via `/premiumverify`. * Denied Bedrock auto-bypass if an existing account exists in the database with a non-matching UUID, protecting both premium and cracked accounts from being hijacked.
release

peyaj's Auth [Paper] 1.6.9

1.6.9
25 сент. 2026 г.285Minecraft: 1.21, 1.21.1, 1.21.2, 1.21.3, 1.21.4, 1.21.5, 1.21.6, 1.21.7, 1.21.8, 1.21.9, 1.21.10, 1.21.11, 26.1, 26.1.1, 26.1.2, 26.2, 26.3folia, paper, purpur
Скачать
Что нового
### Dependencies & Version * Updated PacketEvents to 2.14.0 * Minecrart 26.3 Support ### Security Improvements * Implemented HMAC-SHA256 signature checks on incoming proxy auth bridge packets. Forged packets from cheat clients are rejected and logged. * Enforced player connection matching on incoming bridge packets to ensure a client connection cannot forge authentication for a different player. ### Bedrock & Floodgate Fixes * Added UUID bitmask checks so Floodgate players are detected even if Geyser's username prefix is empty (""). * Prevented authentic Mojang UUIDs from ever being overwritten by Bedrock UUIDs during name collisions. ### Network * Mojang API timeouts now display a clean, informative single-line warning instead of dumping long Java SSL stack traces when server hosts experience outbound network latency. * Prevented ghost packet handler errors when players disconnect while waiting for slow upstream API lookups. ### Fixes * If an admin runs `/auth unregister` on a premium or Bedrock account, the plugin cleanly recreates the account and auto-logs them in on their next join.