LoginSecurity

LoginSecurity
LoginSecurity is a lightweight password authorization plugin. You can optionally set a password each time you enter the server, adding a double layer of security to your account. The password is stored inside the configuration file, nobody else except the server owner can access or modify it.
How does it work?
Install the pluign to your /plugins/ directory, then start your server.
Type /register <password>, your account is now locked with a password.
For each time you login, make sure to use /login <password>.
Features
- Register your account optional or required (change in config)
- 5 Useful commands to mangage your password
- Advanced administrative control
- Advanced documentation via wiki
- Secure password storage using BCrypt
- Secure sessions storing to improve user experience
- Customizable time-out
- Map captcha upon registration (user friendly)
- Conversion from AuthMe and xAuth (check wiki for more info)
- Premium support through AutoIn
- Automatic update with changelog overview
- Username filtering (length and characters)
- Highly detailed configuration
- Automatically updated translation manager (user-submitted)
- Prevents being kicked by orther players loging in with your name
Session login allows the user to log in right after they logged out and not have to type in their password again. (1 minute time limit of being logged out, stores IP during that time to keep everything safe)
Commands
/lac - Admin command, rmpass and reload
/register <password> - Set your password
/login <password> - Login with your password
/changepass <old> <new> - change your password
/logout - Logout
Permissions
- loginsecurity.admin - allows admin command
- loginsecurity.update - shows update notifications
Video
Thanks to ServerMiner for making this informative tutorial
Orther tutorials: German (by MineCraftler4Live)
Planned
- Add translation interface for easier language selection
- Suggestions?
Known Bugs
- Players can mount/dismount and ride on vehicles while not logged in
Disclaimer
By default, LoginSecurity will check for updates from bukkitdev every 3 hours.
This feature can be disabled by setting "update-checker" to "false"
Anyone with the permission node ls.admin will be notified of updates, and it also able to download them via /lac update.
Which again can be disabled by disabling the update-checker
This plugin utilises Hidendra's plugin metrics system, which means that the following information is collected and sent to mcstats.org:
- A unique identifier
- The server's version of Java
- Whether the server is in offline or online mode
- The plugin's version
- The server's version
- The OS version/name and architecture
- The core count for the CPU
- The number of players online
The Metrics version Opting out of this service can be done by editing plugins/Plugin Metrics/config.yml and changing opt-out to true.
Additionally, when the language setting is changed, information is retrieved from lang.lenis0012.com to aquire up to date translations.
Links
- v3.0.2 - Download (18 - 1.15)
- Source code (GitHub)
- https://github.com/lenis0012/LoginSecurity-2/wiki (Wiki)
- https://github.com/lenis0012/Translations/wiki/Contribute (Translation Contribution)
Donate
If you want to support me working on this project, please donate.
It helps me alot to keep my projects up.
Donate at the top right corner
-
View User Profile
-
Send Message
Posted Nov 18, 2012I miss a permission where i can disable user from creating a password,for default player it would be very usefull.
-
View User Profile
-
Send Message
Posted Nov 18, 2012I think that you should have an option where you can't do anything until you login. Maybe you could set it up with the permissions file so that they would be set in a room where you couldn't get out until you type in your password.
-
View User Profile
-
Send Message
Posted Nov 18, 2012released v1.6.4
Check ChangeLog for major changes
-
View User Profile
-
Send Message
Posted Nov 16, 2012@Egghead1019
Get v1.6.3
-
View User Profile
-
Send Message
Posted Nov 16, 2012I loved this plugin until I found out you don't have to be logged in to do /setpass. Kind of defeats the purpose :( Please update!
-
View User Profile
-
Send Message
Posted Nov 16, 2012Add one way to block certain caracters on Nicknames.
-
View User Profile
-
Send Message
Posted Nov 16, 2012Hi, last time i checked the server log and there i noticed, that i can read the passwords from the users. So ok only admins can read this, but i think it would be better if those passwords would be secret for all (also for the log). Don't know if that is possible, but can you make that the command "/login pw" would be not shown in the server log? Do't think that this is possible, but maybe.. )
All in All nice plugin. Thx! kind regards Robben
-
View User Profile
-
Send Message
Posted Nov 15, 2012How about a /resetpass cmd? i have a bit of trouble with someone getting on my account lately. and apparently i can change my own password while not logged in or on the terminal.
so maybe a cmd for only terminal resetpass <player name> too
-
View User Profile
-
Send Message
Posted Nov 15, 2012@Mad_Murdock
might do that
-
View User Profile
-
Send Message
Posted Nov 15, 2012nice plugin, I have a few Suggestions.
could you please add an option to set the max number of connections from a single IP: with an option for admin or console to bypass it something like.
options
connections per ip: 1
perms
loginsecurity.adduser
/lsa (username) (password) adds a user to login security (bypasses connections per ip)
loginsecurity.removeuser
/lsr (username) removes user from login security database.
possibly add user/ip listing
loginsecurity.list
/lsl (username) lists all users on players IP: online or offline.
-
View User Profile
-
Send Message
Posted Nov 12, 2012Released v1.6.3
Fixed password required not working correctly.
-
View User Profile
-
Send Message
Posted Nov 12, 2012By far the best login plugin, thanks man, keep up the good work!
-
View User Profile
-
Send Message
Posted Nov 12, 2012@adamwbb
ho it cant
it should check if you have a password already
@goakiller900
im working on a fix but this school week is terrible hard for me.
and yes im going to add admin commands
-
View User Profile
-
Send Message
Posted Nov 12, 2012@Najumicom
use v1.6
it works in there
-
View User Profile
-
Send Message
Posted Nov 12, 2012i tried crazylogin which didn't work... i tried xauth which hasn't been updated and it doesn't work for me... authme hasn't been updated... i cant get loginsecurity to force users to register...
so are there other plugins?
-
View User Profile
-
Send Message
Posted Nov 12, 2012its not forcing everyone to set a password and i have:
password-required: true
-
View User Profile
-
Send Message
Posted Nov 12, 2012major flaw login can be bypassed with /setpass its no good.
-
View User Profile
-
Send Message
Posted Nov 12, 2012@lenis0012
any idea when this is going to be fixed ??
and admins commands are very desired :P
-
View User Profile
-
Send Message
Posted Nov 12, 2012Edit:For that matter what is blindness?
I use this plugin for when the Minecraft session servers are down, can you add an option that blocks players from joining if they haven't set a password?
-
View User Profile
-
Send Message
Posted Nov 12, 2012@wizzard
you cant get hirt while logging in
smart eh?