JanusMCD – Discord ↔ Minecraft Chat Bridge & Passwordless Auth.

[0.3.3] - 2026-03-23

⚠️ Configuration Update Required ⚠️ To take advantage of the new STATIC and SLASH_ONLY Linking Modes, as well as customize Slash Command cooldown limits, please backup and delete your current plugins/JanusMCD/account-linking.yml so the server generates a fresh configuration file containing the newly implemented variables!

Added

• Linking Modes (STATIC & SLASH_ONLY): Extensively overhauled linking controls. STATIC mode explicitly requires linking codes to be posted in a configured link-channel-id. SLASH_ONLY mode fully removes chat processing for codes, moving all linked verification exclusively into Slash Commands.
• Link Slash Commands: Implemented user-facing commands /link register <code> and /link drop <IGN>. Standard users can execute these without Administrative permissions.
• Discord Drop Rate-Limiting & Auto-Complete: The /link drop command filters available accounts intelligently through Auto-Complete, exclusively proposing the Discord User's linked IGNs. Also added a 7-day configurable cooldown logic to unlinking.
• Strict Data Wipe: When players execute /link drop, their .dat Player files, statistics, and advancements are forcefully deleted from the world/playerdata/ server payload to inhibit unlinked alting.
• Secure Unlinking: The /link drop command now strictly validates that the user actually owns the account they are trying to drop, even if they manually type the name.
• Webhook Queueing Engine: Fully replaced custom HTTP webhooks with club.minnced.discord-webhooks. It natively queues operations and respects Discord API rate limits, solving out-of-order chat messages and severe CPU/Thread hogs during player bursts.
• Strict IP Validation: Added a strict mismatch detector. If a player attempts to join with a trusted session but their IP address has changed, their trusted session is wiped and they are forced to fully re-authenticate to prevent hijacking.
• Guild Security Isolation & Audit: Refactored unauthorized guild enforcement into a dedicated GuildSecurityListener. This centralizes the "allowed-guilds" logic and introduces an automated hourly "safety net" audit to ensure the bot never remains in unauthorized servers.

Fixed

• World Restoration: Fixed an issue where players were not correctly returned to their previous dimensions (Nether/End) after logging out. Location preservation is now correctly saved during PlayerQuitEvent rather than being prematurely consumed on join.
• Early-Login IP Detection: Implemented an early IP Cache in LoginProtectionListener to prevent edge-case kicks when a player's network address returns null during initial handshakes.
• Event Deprecation Warning: Bypassed Paper's PlayerSpawnLocationEvent deprecation warning by utilizing manual EventExecutor registration. This removes console spam while retaining necessary access to the Player object during spawn enforcement.