ZyrenAuth

✨ ZyrenAuth v1.0.3: Secure Authentication & Streamlined Experience!

This update brings a robust new captcha system, an improved 2FA setup flow, enhanced player control during authentication, and critical stability fixes, ensuring a more secure and seamless experience for your server.

Key Features:

• Mandatory Captcha System on Join:
  • Players are now required to solve a captcha (either a math problem or an interactive item-click challenge) immediately upon joining the server, before proceeding to login or registration.
  • Configurable captcha expiry time and a maximum of 3 attempts before being kicked.
  • Players are teleported to a safe void (0.5, 5.0, 0.5) during the captcha phase to prevent interaction with the world.
• Dedicated 2FA Setup GUI:
  • The /za 2fa setup command now opens an intuitive in-game GUI that clearly displays your 2FA secret key and QR code URI, making setup with authenticator apps much easier.
• Distinct Authentication Teleportation:
  • After successfully solving the captcha, players are seamlessly teleported to a separate, safe void (0.5, 0.0, 0.5) to proceed with the /login or /register prompts.
• Comprehensive Player State Management:
  • Player's original location, inventory, gamemode, health, food, and experience are now reliably saved upon entering the authentication flow and fully restored upon successful login/registration.
• Asynchronous Modrinth Update Checker:
  • The plugin now automatically checks Modrinth for the latest release version upon startup and notifies server owners in the console if an update is available.

Bug Fixes & Improvements:

• Fixed /captcha <answer> Command: Correctly processes math captcha answers and proceeds to the login/register stage instead of opening the help menu.
• Eliminated Chat Spam: Removed repetitive "You cannot take damage while in the authentication zone" messages during the frozen state.
• Prevented Pre-Auth Death & Bypass: Players are now invulnerable to all damage while in the authentication flow, and respawning will always return them to the correct authentication stage.
• Improved Console Messaging: Enhanced clarity and consistency of console logs.
• Code Stability: Resolved numerous compilation errors related to duplicate method definitions, missing imports, and incorrect method calls across various classes, significantly improving plugin robustness.

For a full list of changes and detailed configuration options, visit our Official Modrinth Page or Official Website.

✨ ZyrenAuth v1.0.2: Enhanced Security & Seamless Authentication Experience!

This update brings significant improvements to player security and the overall authentication experience, focusing on a more intuitive user interface and robust Two-Factor Authentication (2FA) capabilities.

Key Highlights:

• Dynamic On-Screen Authentication Prompts: Clear, persistent on-screen titles and subtitles for /register and /login commands, guiding players seamlessly.
• Optional Two-Factor Authentication (2FA) via Google Authenticator: Players can now enable 2FA for an extra layer of security; compulsory once enabled.
• Improved Admin & Player Command Interface: Unified /za command, revamped /za help and /za status chat layouts, and integrated 2FA subcommands.
• Streamlined Plugin File Management: All plugin files are now neatly organized under server_root/plugins/config/zyrenauth/.
• Robust File-Based Storage Enhancements: Improved internal handling for encrypted file-based accounts, ensuring better data integrity.
• Graceful Error Handling: Enhanced logging and clearer error messages for a smoother experience.

For a full list of changes and detailed configuration options, visit our Official Website Changelog and use the Online Config Generator.

ZyrenAuth 1.0.1 - Intelligent Authentication & Streamlined UX for 1.21.1+

This release significantly enhances ZyrenAuth's player authentication experience, focusing on smarter auto-login, improved data management, and a return to a concise, text-based command interface.

New Features & Improvements:

• Intelligent Auto-Authentication Flow:
  • For Premium Servers (online-mode=true):
    • Registered Premium Players: Now automatically logged in on join.
    • Unregistered Premium Players: Are automatically registered and logged in on first join. No manual /register is required for them to play.
  • For Cracked/Offline Servers (online-mode=false):
    • Registered Players: Still benefit from automatic login (if autoLoginPremiumPlayers is true).
    • Unregistered Players: Must still register manually for security reasons.
• Automatic Username Migration (Premium Servers): For registered players on online-mode=true servers, their Minecraft username (IGN) is automatically updated in ZyrenAuth's records if it changes (e.g., case changes, new IGN).
• Case-Insensitive Username Validation: Prevents players from registering usernames that are only different by case, improving uniqueness and preventing confusion.
• GUI System Removed: The /za command has been reverted to a text-based output, providing a direct and efficient command-line experience for administrators.
• autoLoginPremiumPlayers Config Option: A new boolean option (default true) controls the intelligent auto-registration/login behavior, allowing server owners to fine-tune the experience.
• Enhanced Console Logging: More detailed and informative logs for authentication actions and server status.

This update streamlines the player onboarding process for legitimate Minecraft accounts and simplifies the admin experience, all while maintaining robust security.

ZyrenAuth 1.0.0

• First Paper release of ZyrenAuth by _Pheonix
• Adds secure /register and /login with BCrypt-hashed passwords
• Players join in a safe auth zone at 0,0,0 and are teleported back to their real location after logging in or registering
• Supports both MySQL storage and file-based storage (accounts.json) so servers can run with or without a database
• Optional email features for /addemail, /emailconfirm, /resetpassword, and /resetconfirm when SMTP + MySQL are configured
• Includes /za help and /za status for quick overview of storage mode and feature status
• Styled, cleaner messages and basic brute-force protection when using MySQL