rAuth - 3.0.0

Console password masking is now always enabled.
- Passwords entered through the console are automatically masked using both Log4j and JUL.
- The mask-console-passwords configuration option has been removed.
- Console password masking is now installed automatically when rAuth starts, providing permanent protection against accidentally exposing passwords in console logs.
Added Universal Database Support with 6 database engines.
- rAuth now supports:
  - FlatFile
  - MySQL
  - MariaDB
  - PostgreSQL
  - SQLite
  - H2
- Database connections now use HikariCP connection pooling where applicable.
- Added automatic database migration support, including automatic schema updates when required.

database:
  type: flatfile
  # Supported:
  # flatfile
  # mysql
  # mariadb
  # postgresql
  # sqlite
  # h2

Added Forum & Web Database Synchronization.
- rAuth can now synchronize player authentication data with external forum and website databases.
- Supported platforms include:
  - XenForo
  - MyBB
  - phpBB
  - WordPress
  - WBB
  - and other compatible systems
- Added support for 15 password hash types:
  - BCRYPT
  - BCRYPT2Y
  - MD5
  - SHA1
  - SHA256
  - SHA512
  - DOUBLE_MD5
  - SALTED_SHA512
  - MYBB
  - PHPBB
  - WORDPRESS
  - XENFORO
  - WBB4_BCRYPT
  - ARGON2
  - PLAIN
- Added multiple synchronization modes including:
  - Write-through on registration
  - Write-through on password change
  - Primary authentication
  - Import-on-join

forum-sync:
  enabled: false
  # Configure your external forum/web database here.

Added Krsna AI Assistant.
- rAuth now includes a built-in AI assistant accessible through:
  - /rauthai
  - /krsna
- Added support for 17 AI providers, including:
  - Gemini
  - OpenRouter
  - OpenAI
  - Cloudflare
  - Groq
  - Anthropic
  - Fireworks
  - Mistral
  - Together
  - Cerebras
  - Braintrust
  - HuggingFace
  - Anyscale
  - DeepInfra
  - Lepton
  - Replicate
  - DeepSeek
- Added built-in API keys for supported providers.
- Added a local knowledge.yml knowledge base using RAG.
- AI-generated configuration changes require [Apply] confirmation before being applied.
- Added per-user AI rate limiting.
- Added automatic idle disabling to prevent unnecessary API usage.

ai:
  enabled: true
  # Configure your preferred AI provider here.

Added Rejoin Grace Period.
- Players can now receive a one-time grace period when reconnecting from the same IP.
- A player who reconnects within the configured period can skip the password prompt.
- Default grace period: 5 minutes.

rejoin-grace:
  enabled: true
  minutes: 5

Added Auto-Login Quick Reconnect.
- Players can automatically restore their authenticated state when quickly reconnecting from the same IP.
- Default duration: 60 minutes.
- This is separate from the normal Session Login system.

auto-login:
  enabled: true
  timeout-minutes: 60

Added Discord Password Recovery.
- Players can now recover their account through Discord using verification codes.
- Added commands for setting up and verifying Discord recovery:
  - /forgotpass setdiscord
  - /forgotpass verifydiscord
  - /forgotpass discord
  - /forgotpass discordcode
- Discord recovery works independently from regular Discord webhook notifications.
Added Standalone Anti-VPN Protection.
- rAuth can now detect VPN, proxy, and hosting connections without requiring another external plugin.
- Added automatic provider selection with:
  - auto
  - external
  - standalone
- Added separate proxy and hosting detection options.
- Detection results are cached for 12 hours to reduce unnecessary API requests.

anti-vpn:
  enabled: true
  provider: auto
  check-proxy: true
  check-hosting: true
  cache-hours: 12

Added Live Config Editing.
- Administrators can now view and modify configuration values directly in-game without manually opening config.yml.

/rauth config get <path>
/rauth config set <path> <value>
/rauth config list

Added tab completion for configuration paths and commands.
Improved Bot Protection.
- Added a configurable bot-question repeat interval.
- Bot verification questions can now automatically repeat while the challenge is active, ensuring that the verification challenge does not disappear before the player completes it.

bot-protection:
  repeat-interval-seconds: 5

Expanded Admin Commands.
- Added new administration commands and management options for:
  - Login history
  - Account unregistering
  - IP unblocking
  - Server stop/restart
  - Authentication spawns
  - Password resets
  - Session management
  - Session clearing
  - Account transfer
  - AI model switching
- New session management commands:

/rauth sessions
/rauth clearsessions

/rauth transfer

/rauth model current
/rauth model change

Improved overall security, authentication and configuration architecture.
- Expanded database compatibility.
- Improved external authentication synchronization.
- Improved password security.
- Improved reconnect handling.
- Improved bot protection.
- Added AI-powered assistance and configuration management.
- Added more administrative controls.
- Continued the goal of making every major part of rAuth highly configurable.

Join our Discord to report bugs, request features, or get support.

rAuth