AuthPlugin

Keep your offline-mode server secure with a full login and registration system.

Features:

• Players must /register <password> <password> on first join and /login <password> on every reconnect
• Until authenticated, players are completely frozen, invisible to others, blinded, and teleported to a hidden sky position to prevent coordinate reading via mods
• Passwords are stored as BCrypt hashes — completely unreadable even by the server owner
• 60 second login timeout before automatic kick
• Fully configurable via config.json

Admin Commands

• /forcelogin <player> — force authenticate an online player
• /resetpassword <player> — wipe a player's password so they can re-register
• /authreload — reload the config without restarting

Config

{
  "login_timeout_seconds": 60,
  "timeout_kick_message_login": "You took too long to log in.",
  "timeout_kick_message_register": "You took too long to register.",
  "max_login_attempts": 5,
  "min_password_length": 6
}