LoginSecurity

Table of Contents

LoginSecurity

LoginSecurity is a lightweight password authorization plugin. You can optionally set a password each time you enter the server, adding a double layer of security to your account. The password is stored inside the configuration file, nobody else except the server owner can access or modify it.

How does it work?

Install the pluign to your /plugins/ directory, then start your server.
Type /register <password>, your account is now locked with a password.
For each time you login, make sure to use /login <password>.

Features

Register your account optional or required (change in config)
5 Useful commands to mangage your password
Advanced administrative control
Advanced documentation via wiki
Secure password storage using BCrypt
Secure sessions storing to improve user experience
Customizable time-out
Map captcha upon registration (user friendly)
Conversion from AuthMe and xAuth (check wiki for more info)
Premium support through AutoIn
Automatic update with changelog overview
Username filtering (length and characters)
Highly detailed configuration
Automatically updated translation manager (user-submitted)
Prevents being kicked by orther players loging in with your name

Session login allows the user to log in right after they logged out and not have to type in their password again. (1 minute time limit of being logged out, stores IP during that time to keep everything safe)

Commands

/lac - Admin command, rmpass and reload

/register <password> - Set your password

/login <password> - Login with your password

/changepass <old> <new> - change your password

/logout - Logout

Permissions

loginsecurity.admin - allows admin command
loginsecurity.update - shows update notifications

Video

Thanks to ServerMiner for making this informative tutorial
Orther tutorials: German (by MineCraftler4Live)

Planned

Add translation interface for easier language selection
Suggestions?

Known Bugs

Players can mount/dismount and ride on vehicles while not logged in

Disclaimer

By default, LoginSecurity will check for updates from bukkitdev every 3 hours.
This feature can be disabled by setting "update-checker" to "false"
Anyone with the permission node ls.admin will be notified of updates, and it also able to download them via /lac update.
Which again can be disabled by disabling the update-checker

This plugin utilises Hidendra's plugin metrics system, which means that the following information is collected and sent to mcstats.org:

A unique identifier
The server's version of Java
Whether the server is in offline or online mode
The plugin's version
The server's version
The OS version/name and architecture
The core count for the CPU
The number of players online

The Metrics version Opting out of this service can be done by editing plugins/Plugin Metrics/config.yml and changing opt-out to true.
Additionally, when the language setting is changed, information is retrieved from lang.lenis0012.com to aquire up to date translations.

Donate

If you want to support me working on this project, please donate.
It helps me alot to keep my projects up.
Donate at the top right corner

Comments

_ForgeUser10513971
- Join Date: 2/5/2013
- Posts: 11
- Member Details
#667 _ForgeUser10513971

View User Profile

Send Message

Posted Jul 31, 2013
Nevermind I have moved my server to AuthMe - 2.8b1 I can select what commands can be ran before they login

Rollback Post to Revision RollBack
_ForgeUser10513971
- Join Date: 2/5/2013
- Posts: 11
- Member Details
#666 _ForgeUser10513971

View User Profile

Send Message

Posted Jul 31, 2013
is this a bug or is this meant but before I log in I cant run normal commands but yet I can run op command and all me pex commands

Rollback Post to Revision RollBack
_ForgeUser11846473
- Join Date: 7/12/2013
- Posts: 6
- Member Details
#665 _ForgeUser11846473

View User Profile

Send Message

Posted Jul 28, 2013
my users keep making ton of accounts can i make it be 1 account per ip

Last edited by _ForgeUser11846473: Jul 28, 2013

Rollback Post to Revision RollBack

_ForgeUser7942718

Join Date: 11/24/2011
Posts: 725
Member Details

#664 Posted Jul 28, 2013

28.07 08:49:36 [Server] INFO at net.minecraft.server.v1_5_R3.ThreadServerApplication.run(SourceFile:573)
28.07 08:49:36 [Server] INFO at net.minecraft.server.v1_5_R3.MinecraftServer.run(MinecraftServer.java:410)
28.07 08:49:36 [Server] INFO at net.minecraft.server.v1_5_R3.MinecraftServer.q(MinecraftServer.java:477)
28.07 08:49:36 [Server] INFO at net.minecraft.server.v1_5_R3.DedicatedServer.r(DedicatedServer.java:226)
28.07 08:49:36 [Server] INFO at net.minecraft.server.v1_5_R3.MinecraftServer.r(MinecraftServer.java:513)
28.07 08:49:36 [Server] INFO at org.bukkit.craftbukkit.v1_5_R3.scheduler.CraftScheduler.mainThreadHeartbeat(CraftScheduler.java:345)
28.07 08:49:36 [Server] INFO at org.bukkit.craftbukkit.v1_5_R3.scheduler.CraftTask.run(CraftTask.java:53)
28.07 08:49:36 [Server] INFO at com.lenis0012.bukkit.ls.ThreadManager$3.run(ThreadManager.java:78)
28.07 08:49:36 [Server] INFO at java.util.HashMap$KeyIterator.next(HashMap.java:928)
28.07 08:49:36 [Server] INFO at java.util.HashMap$HashIterator.nextEntry(HashMap.java:894)
28.07 08:49:36 [Server] INFO java.util.ConcurrentModificationException
28.07 08:49:36 [Server] WARNING Task #41 for LoginSecurity v2.0.4 generated an exception

this lags the server. how do i fix this?

_ForgeUser1366728
- Join Date: 10/16/2008
- Posts: 2
- Member Details
#663 _ForgeUser1366728

View User Profile

Send Message

Posted Jul 28, 2013
nice plugin!

Rollback Post to Revision RollBack
Butter1484
- Location: Reinholds
- Join Date: 7/26/2013
- Posts: 3
- Member Details
#662 Butter1484

View User Profile

Send Message

Posted Jul 26, 2013
I receive this error 6:00:57 PM [WARNING] [LoginSecurity] Task #36 for LoginSecurity v2.0.4 generated an exception java.util.ConcurrentModificationException at java.util.HashMap$HashIterator.nextEntry(Unknown Source) at java.util.HashMap$KeyIterator.next(Unknown Source) at com.lenis0012.bukkit.ls.ThreadManager$3.run(ThreadManager.java:78) at org.bukkit.craftbukkit.v1_6_R2.scheduler.CraftTask.run(CraftTask.java:53) at org.bukkit.craftbukkit.v1_6_R2.scheduler.CraftScheduler.mainThreadHeartbeat(CraftScheduler.java:345) at net.minecraft.server.v1_6_R2.MinecraftServer.t(MinecraftServer.java:522) at net.minecraft.server.v1_6_R2.DedicatedServer.t(DedicatedServer.java:226) at net.minecraft.server.v1_6_R2.MinecraftServer.s(MinecraftServer.java:486) at net.minecraft.server.v1_6_R2.MinecraftServer.run(MinecraftServer.java:419) at net.minecraft.server.v1_6_R2.ThreadServerApplication.run(SourceFile:582)

Rollback Post to Revision RollBack
_ForgeUser11901475
- Join Date: 7/22/2013
- Posts: 1
- Member Details
#661 _ForgeUser11901475

View User Profile

Send Message

Posted Jul 25, 2013
this plugin works great on 1.6.2, but i would like a password reset option for ops to use to recover peoples accounts if they forgot their password..

other then that, its great

Rollback Post to Revision RollBack
_ForgeUser7569932
- Join Date: 9/18/2011
- Posts: 48
- Member Details
#660 _ForgeUser7569932

View User Profile

Send Message

Posted Jul 25, 2013
Hey lenis

What happent to the Jenkins ?

Rollback Post to Revision RollBack
_ForgeUser1366728
- Join Date: 10/16/2008
- Posts: 2
- Member Details
#659 _ForgeUser1366728

View User Profile

Send Message

Posted Jul 23, 2013
Suggestion: Block inventory open when a user is not logged in, because you can see other's players items...

Rollback Post to Revision RollBack
lenis0012
- Location: Krimpen
- Join Date: 2/11/2012
- Posts: 1,354
- Member Details
#658 lenis0012

View User Profile

Send Message

Posted Jul 23, 2013
@FrolicReams

No

@J5lx

It was removed in v2.x

@minecraftmanaic

Im slow, you gotta live with it

@Exceptions

Its been broken recently

@lenis0012

Read the config

Rollback Post to Revision RollBack
_ForgeUser11846473
- Join Date: 7/12/2013
- Posts: 6
- Member Details
#657 _ForgeUser11846473

View User Profile

Send Message

Posted Jul 22, 2013
Is there a way to decrypt the passwords?

Rollback Post to Revision RollBack
J5lx
- Join Date: 7/11/2013
- Posts: 12
- Member Details
#656 J5lx

View User Profile

Send Message

Posted Jul 20, 2013
In the to do list you mention that you've added language support, but i couldn't find out how to use this feature. Can you please help me?

Rollback Post to Revision RollBack
_ForgeUser8698888
- Join Date: 4/6/2012
- Posts: 3
- Member Details
#655 _ForgeUser8698888

View User Profile

Send Message

Posted Jul 17, 2013
@minecraftmanaic

please rspond

Rollback Post to Revision RollBack
_ForgeUser11745024
- Join Date: 6/26/2013
- Posts: 13
- Member Details
#653 _ForgeUser11745024

View User Profile

Send Message

Posted Jul 12, 2013
Prevents being kicked by orther players loging in with your name , not working , my server is using this plugin and someone stole my name to login and i got the message Login from another location .

Rollback Post to Revision RollBack
_ForgeUser8698888
- Join Date: 4/6/2012
- Posts: 3
- Member Details
#652 _ForgeUser8698888

View User Profile

Send Message

Posted Jul 12, 2013
Is there a way to so that when they get teleported to spawn and then login resumes their location. I host a raid/faction server so players can just change their name to a certain player who is at their base and get the cords.

Rollback Post to Revision RollBack
lenis0012
- Location: Krimpen
- Join Date: 2/11/2012
- Posts: 1,354
- Member Details
#651 lenis0012

View User Profile

Send Message

Posted Jul 11, 2013
@zopn333

use latest dev build

@JamiePhonic

I didn't do the invicibility. I could've improved the events indeed. But all damage is blocked, so you are health and food protected

Rollback Post to Revision RollBack
_ForgeUser7369097
- Join Date: 8/11/2011
- Posts: 19
- Member Details
#650 _ForgeUser7369097

View User Profile

Send Message

Posted Jul 10, 2013
@JamiePhonic

It's really not that bad, since he's doing rather standard things with the bukkit API. The code is much easier to understand once you get a grasp of the bukkit API.

Rollback Post to Revision RollBack
_ForgeUser7369097
- Join Date: 8/11/2011
- Posts: 19
- Member Details
#649 _ForgeUser7369097

View User Profile

Send Message

Posted Jul 10, 2013
@zopn333

The plugin currently gives a few misleading instructions. The actual usage of /rmpass is /rmpass <password>. This removes your own account.

Rollback Post to Revision RollBack
_ForgeUser9706245
- Join Date: 9/29/2012
- Posts: 18
- Member Details
#648 _ForgeUser9706245

View User Profile

Send Message

Posted Jul 10, 2013
I typed "/rmpass" but the message returned is "/rmuser <user name>" and "/rmuser" responsed nothing

Rollback Post to Revision RollBack
Forge_User_13279113
- Join Date: 7/30/2012
- Posts: 7
- Member Details
#647 Forge_User_13279113

View User Profile

Send Message

Posted Jul 9, 2013
@Anomitee

i had a look at the code, from what i can tell, players are only invincible if damaged by another player (Dev please verify). i couldn't see any code for drowning, fire or entity damage (e.g. creepers)

Note to dev: after looking at your code, i can't help but think that this was developed with no aim of having multiple people working on it with you because there are very few comments throughout the code and lots of meaningless variable names like n1 and p1.

sorry, but i was always taught to code as if the person who ends up maintaining my code is a violent psychopath who knows where i live. meaning comment like theres no tomorrow and use the most meaningful variable names you can.

sorry again, thats my little rant over :-)

Rollback Post to Revision RollBack
To post a comment, please login or register a new account.

Project ID

41702
Created

Jul 7, 2012
Last Released File

Aug 17, 2023
Total Downloads

1,054,722
License

GNU General Public License ver...

Bukkit

LoginSecurity

Bukkit Plugins

LoginSecurity

Table of Contents

LoginSecurity

LoginSecurity is a lightweight password authorization plugin. You can optionally set a password each time you enter the server, adding a double layer of security to your account. The password is stored inside the configuration file, nobody else except the server owner can access or modify it.

How does it work?

Features

Session login allows the user to log in right after they logged out and not have to type in their password again. (1 minute time limit of being logged out, stores IP during that time to keep everything safe)

Commands

/lac - Admin command, rmpass and reload

/register <password> - Set your password

/login <password> - Login with your password

/changepass <old> <new> - change your password

/logout - Logout

Permissions

Video

Planned

Known Bugs

Disclaimer

Links

Donate

Comments

About This Project

Categories

Members

Recent Files

Bukkit