Authiva

Authiva is a lightweight and configurable authentication plugin for Paper servers, designed to provide a simple and reliable account system for Minecraft servers.

Players can register and log in using password-based authentication, while configurable protection helps prevent unauthenticated players from interacting with the server before completing authentication.

Features

• Player registration and login
• Persistent SQLite account storage
• Secure password hashing with PBKDF2-HMAC-SHA256
• Password validation and unsafe password protection
• Configurable authentication timeout
• Configurable login attempt limits
• Movement, interaction, and attack protection
• Configurable commands available before authentication
• Password changing and account unregistration
• Administrator account management
• Administrator password management
• Administrator logout controls
• Account information and account listing
• Authentication session management
• Authentication bypass permissions
• Asynchronous authentication processing
• Automatic update checking
• Fully configurable messages and settings
• Anonymous bStats and FastStats metrics
• Server-side only
• No client-side mod required

Commands

Player Commands

/register <password> <confirmPassword>

Create a new Authiva account.

/login <password>

Authenticate with an existing account.

/logout

Log out of the current account.

/changepassword <currentPassword> <newPassword>

Change the account password.

/unregister <password>

Remove the current account.

Administrator Commands

/authiva <setpassword|unregister|delete|logout|info|list|reload|help>

Administrators can manage accounts, change player passwords, log players out, view account information, list registered accounts, reload the configuration, and access Authiva help.

Security

Authiva uses PBKDF2-HMAC-SHA256 password hashing instead of storing passwords as plain text.

Authentication security can be configured through login attempt limits, authentication timeouts, password requirements, unsafe-password protection, and pre-authentication player protection.

Configuration

Authiva provides configuration options for:

• Authentication timeout
• Password requirements
• Unsafe passwords
• Login attempt limits
• Pre-authentication commands
• Player movement and interaction protection
• Command handling
• Authentication bypass
• Plugin messages
• Other authentication settings

Metrics & Privacy

Authiva integrates bStats and FastStats for anonymous plugin and server usage statistics.

These services may collect general information such as Minecraft/server versions, Java information, operating system information, player counts, platform information, and approximate country.

Authiva does not use these metrics services to send player passwords or authentication credentials.

Server administrators can disable the respective metrics services through their configuration.

Installation

1. Download the latest Authiva release.
2. Place the .jar file into the server's plugins directory.
3. Start the server.
4. Review the generated configuration.
5. Configure Authiva to your requirements.

Players do not need to install a client-side mod.

Requirements

• Paper
• Minecraft 26.2
• Java version required by the supported Paper/Minecraft version

Status

Authiva is currently in beta and actively developed.

The 0.1.0-beta2 release expands the authentication system with improved security, account management, authentication handling, configuration, asynchronous processing, update checking, and anonymous metrics integration.

Feedback, bug reports, and suggestions are welcome.

Links

• Source Code: https://github.com/www0abdb-oss/Authiva
• Hangar: https://hangar.papermc.io/www0abdb-oss/Authiva