LoginSecurity

LoginSecurity
LoginSecurity is a lightweight password authorization plugin. You can optionally set a password each time you enter the server, adding a double layer of security to your account. The password is stored inside the configuration file, nobody else except the server owner can access or modify it.
How does it work?
Install the pluign to your /plugins/ directory, then start your server.
Type /register <password>, your account is now locked with a password.
For each time you login, make sure to use /login <password>.
Features
- Register your account optional or required (change in config)
- 5 Useful commands to mangage your password
- Advanced administrative control
- Advanced documentation via wiki
- Secure password storage using BCrypt
- Secure sessions storing to improve user experience
- Customizable time-out
- Map captcha upon registration (user friendly)
- Conversion from AuthMe and xAuth (check wiki for more info)
- Premium support through AutoIn
- Automatic update with changelog overview
- Username filtering (length and characters)
- Highly detailed configuration
- Automatically updated translation manager (user-submitted)
- Prevents being kicked by orther players loging in with your name
Session login allows the user to log in right after they logged out and not have to type in their password again. (1 minute time limit of being logged out, stores IP during that time to keep everything safe)
Commands
/lac - Admin command, rmpass and reload
/register <password> - Set your password
/login <password> - Login with your password
/changepass <old> <new> - change your password
/logout - Logout
Permissions
- loginsecurity.admin - allows admin command
- loginsecurity.update - shows update notifications
Video
Thanks to ServerMiner for making this informative tutorial
Orther tutorials: German (by MineCraftler4Live)
Planned
- Add translation interface for easier language selection
- Suggestions?
Known Bugs
- Players can mount/dismount and ride on vehicles while not logged in
Disclaimer
By default, LoginSecurity will check for updates from bukkitdev every 3 hours.
This feature can be disabled by setting "update-checker" to "false"
Anyone with the permission node ls.admin will be notified of updates, and it also able to download them via /lac update.
Which again can be disabled by disabling the update-checker
This plugin utilises Hidendra's plugin metrics system, which means that the following information is collected and sent to mcstats.org:
- A unique identifier
- The server's version of Java
- Whether the server is in offline or online mode
- The plugin's version
- The server's version
- The OS version/name and architecture
- The core count for the CPU
- The number of players online
The Metrics version Opting out of this service can be done by editing plugins/Plugin Metrics/config.yml and changing opt-out to true.
Additionally, when the language setting is changed, information is retrieved from lang.lenis0012.com to aquire up to date translations.
Links
- v3.0.2 - Download (18 - 1.15)
- Source code (GitHub)
- https://github.com/lenis0012/LoginSecurity-2/wiki (Wiki)
- https://github.com/lenis0012/Translations/wiki/Contribute (Translation Contribution)
Donate
If you want to support me working on this project, please donate.
It helps me alot to keep my projects up.
Donate at the top right corner
-
View User Profile
-
Send Message
Posted Nov 18, 2013@InsomniaCraft
have you set password-required to true?
-
View User Profile
-
Send Message
Posted Nov 17, 2013Does this check for actual mojang authentication in any way? I joined a server using this plugin and it allowed me to bypass the registration from my Premium account.
-
View User Profile
-
Send Message
Posted Nov 11, 2013@lenis0012 Does this plugin protect from cracked clients for cracked servers?
-
View User Profile
-
Send Message
Posted Nov 11, 2013Hiho, I have 2 questions: 1. Is this plugin up-to-date? I mean about Minecraft 1.6.2/1.6.4/1.7.2 not 1.5.1? 2. Can plugin detects if player log in with premium/non premium account? I didn't find that. I need plugin which required for NP players to register (type password) and be neutral for Premium players.
Best regards :)
-
View User Profile
-
Send Message
Posted Nov 8, 2013I love this plugin but it is not really "lightweight" ^^
But thanks anyway for this awesome plugin ;)
-
View User Profile
-
Send Message
Posted Nov 2, 2013@InsomniaCraft
We only support convertion from xAuth currently.
What you could possibly do is switch from AuthMe to xAuth anbd then from xAuth to LoginSecurity. more info
For the register usage typo, try using dev builds.
-
View User Profile
-
Send Message
Posted Nov 1, 2013I am currently using AuthMe and actually hate it. I am using mySQL with it and already have a large player base, how can I switch to this plugin right now saving the old passwords?
By the way, if you type /register and hit enter, it says "Useage: /register <username>" which should be replaced with <password>
-
View User Profile
-
Send Message
Posted Oct 23, 2013lenis0012: Awesome, Thank You!
-
View User Profile
-
Send Message
Posted Oct 22, 2013@TheCanfield
i like that, ill work on it.
-
View User Profile
-
Send Message
Posted Oct 22, 2013@lenis0012
yeah please do
thanks!
-
View User Profile
-
Send Message
Posted Oct 22, 2013Looks like a great plugin, simple, straight forward, and effective. I have one request though: In my situation I only want to require passwords from a one group. Could you create a permission that requires login and a corresponding config entry so that not everyone on my server needs a password, only the specified group? example: Permissions: ls.require
config.yml password-required=true
Thank you!
-
View User Profile
-
Send Message
Posted Oct 21, 2013@marcuspoo
Nope! Feel free to use a SQLite database instead.
-
View User Profile
-
Send Message
Posted Oct 20, 2013Do u need a MySQL database for the plugin? @lenis0012 ?
-
View User Profile
-
Send Message
Posted Oct 20, 2013@youri12
No they dont, i can make it do that if you want
-
View User Profile
-
Send Message
Posted Oct 19, 2013when using mysql and bungeecord if i put this plugin does the player need to relogin all the time? or does the sessions get stored in mysql?
-
View User Profile
-
Send Message
Posted Oct 18, 2013@EnSabahNur2
You can't
@Ze0KOn
Im not sure why that is...
Can you send plugin list?
@sharkjaww77
/lac is nto fully working.
ive heard that from some players.
-
View User Profile
-
Send Message
Posted Oct 18, 2013How can I see my players accounts and passwords?
-
View User Profile
-
Send Message
Posted Oct 18, 2013@lenis0012
You know your latest version has a bug...Dev Version that is, people can talk without logging in...
-
View User Profile
-
Send Message
Posted Oct 17, 2013How about an admin command to change someones password? Because my people are losing passwords and i cant reset it unless they get on. Or maybe add a offline applicable /lac rmpass <username> ?
-
View User Profile
-
Send Message
Posted Oct 17, 2013@EDMAN93
nice idea