LoginSecurity

LoginSecurity
LoginSecurity is a lightweight password authorization plugin. You can optionally set a password each time you enter the server, adding a double layer of security to your account. The password is stored inside the configuration file, nobody else except the server owner can access or modify it.
How does it work?
Install the pluign to your /plugins/ directory, then start your server.
Type /register <password>, your account is now locked with a password.
For each time you login, make sure to use /login <password>.
Features
- Register your account optional or required (change in config)
- 5 Useful commands to mangage your password
- Advanced administrative control
- Advanced documentation via wiki
- Secure password storage using BCrypt
- Secure sessions storing to improve user experience
- Customizable time-out
- Map captcha upon registration (user friendly)
- Conversion from AuthMe and xAuth (check wiki for more info)
- Premium support through AutoIn
- Automatic update with changelog overview
- Username filtering (length and characters)
- Highly detailed configuration
- Automatically updated translation manager (user-submitted)
- Prevents being kicked by orther players loging in with your name
Session login allows the user to log in right after they logged out and not have to type in their password again. (1 minute time limit of being logged out, stores IP during that time to keep everything safe)
Commands
/lac - Admin command, rmpass and reload
/register <password> - Set your password
/login <password> - Login with your password
/changepass <old> <new> - change your password
/logout - Logout
Permissions
- loginsecurity.admin - allows admin command
- loginsecurity.update - shows update notifications
Video
Thanks to ServerMiner for making this informative tutorial
Orther tutorials: German (by MineCraftler4Live)
Planned
- Add translation interface for easier language selection
- Suggestions?
Known Bugs
- Players can mount/dismount and ride on vehicles while not logged in
Disclaimer
By default, LoginSecurity will check for updates from bukkitdev every 3 hours.
This feature can be disabled by setting "update-checker" to "false"
Anyone with the permission node ls.admin will be notified of updates, and it also able to download them via /lac update.
Which again can be disabled by disabling the update-checker
This plugin utilises Hidendra's plugin metrics system, which means that the following information is collected and sent to mcstats.org:
- A unique identifier
- The server's version of Java
- Whether the server is in offline or online mode
- The plugin's version
- The server's version
- The OS version/name and architecture
- The core count for the CPU
- The number of players online
The Metrics version Opting out of this service can be done by editing plugins/Plugin Metrics/config.yml and changing opt-out to true.
Additionally, when the language setting is changed, information is retrieved from lang.lenis0012.com to aquire up to date translations.
Links
- v3.0.2 - Download (18 - 1.15)
- Source code (GitHub)
- https://github.com/lenis0012/LoginSecurity-2/wiki (Wiki)
- https://github.com/lenis0012/Translations/wiki/Contribute (Translation Contribution)
Donate
If you want to support me working on this project, please donate.
It helps me alot to keep my projects up.
Donate at the top right corner
-
View User Profile
-
Send Message
Posted Dec 1, 2013@lenis0012
@lenis0012:
It was a general question, does the plugin communicate with mojang at all? I thought this would be a nice feature to allow bypassing registration if you're already authenticated via mojangs servers.
-
View User Profile
-
Send Message
Posted Dec 1, 2013@lenis0012
Add max registered per IP
-
View User Profile
-
Send Message
Posted Nov 30, 2013Uploaded LoginSecurity v2.0.6 to BukkitDev.
Includes some important bug fixes!
-
View User Profile
-
Send Message
Posted Nov 30, 2013@lenis0012
If you install mcore and factions then you're able to chat without logging in. Please fix it.
-
View User Profile
-
Send Message
Posted Nov 30, 2013@lenis0012
I've used it still doesn't work.
-
View User Profile
-
Send Message
Posted Nov 30, 2013@XxDawnsusxX
I can add support for this :)
@Ze0KOn
Dev builds
-
View User Profile
-
Send Message
Posted Nov 29, 2013Fix your plugin you can chat without logging in Spigot 1.7.2 .
-
View User Profile
-
Send Message
Posted Nov 29, 2013Hey is there a plugin or if you can do it, that you /register (password) once, and next time you log in it registers you automatically registering you by your IP.
-
View User Profile
-
Send Message
Posted Nov 29, 2013@lenis0012
make it XAUTH encryption enabled.
-
View User Profile
-
Send Message
Posted Nov 28, 2013@xTAZZ3RZz
You cant limit acounts per ip (yet)
To tp a player to spawn on join and tp back after login you need to set "fake-location" to true in the config,
-
View User Profile
-
Send Message
Posted Nov 28, 2013How can i limit the amount of accounts PER IP.? How can i make users login at a different loction to where they logged out and once logged in they return back to their location ?
-
View User Profile
-
Send Message
Posted Nov 26, 2013Latest dev build contains movement block fix.
Use fake-location variable in config to tp player to spawn until logged in.
Have a nice day, LoginSecurity
-
View User Profile
-
Send Message
Posted Nov 26, 2013@Intercrafting
WHat version are you using?
-
View User Profile
-
Send Message
Posted Nov 26, 2013Is there a way to stop people from moving before they logged in? so they stand in one spot before being able to move and if possible to make the spot like a set location such as the spawn
-
View User Profile
-
Send Message
Posted Nov 26, 2013@Monezombie
It was removed in v2.0 and only supported UTF-8 Characters
-
View User Profile
-
Send Message
Posted Nov 25, 2013where is the language.yml? and will i be able to put some é è ê in it ?
-
View User Profile
-
Send Message
Posted Nov 24, 2013Uplaoded a new verison with a massive changelog.
More than 12 bugs were fixed thanks to Gibstick and RangerMauve
-
View User Profile
-
Send Message
Posted Nov 23, 2013Not quite sure what this is, or what caused it, but figured I should post it here for you:
12:33:15 AM [WARNING] [LoginSecurity] Task #20329 for LoginSecurity v2.0.4 generated an exception 12:33:15 AM java.util.ConcurrentModificationException 12:33:15 AM at java.util.HashMap$HashIterator.nextEntry(Unknown Source) 12:33:15 AM at java.util.HashMap$KeyIterator.next(Unknown Source) 12:33:15 AM at com.lenis0012.bukkit.ls.ThreadManager$3.run(ThreadManager.java:78) 12:33:15 AM at org.bukkit.craftbukkit.v1_6_R3.scheduler.CraftTask.run(CraftTask.java:58) 12:33:15 AM at org.bukkit.craftbukkit.v1_6_R3.scheduler.CraftScheduler.mainThreadHeartbeat(CraftScheduler.java:345) 12:33:15 AM at net.minecraft.server.v1_6_R3.MinecraftServer.t(MinecraftServer.java:520) 12:33:15 AM at net.minecraft.server.v1_6_R3.DedicatedServer.t(DedicatedServer.java:240) 12:33:15 AM at net.minecraft.server.v1_6_R3.MinecraftServer.s(MinecraftServer.java:483) 12:33:15 AM at net.minecraft.server.v1_6_R3.MinecraftServer.run(MinecraftServer.java:415) 12:33:15 AM at net.minecraft.server.v1_6_R3.ThreadServerApplication.run(SourceFile:583)
CraftBukkit version git-Spigot-1135 (MC: 1.6.4) (Implementing API version 1.6.4-R1.1-SNAPSHOT) LoginSecurity v2.0.4 for CB 1.5.2-R1.0 Jun 15, 2013 Any other relevent mod or CB information needed, just let me know.
-
View User Profile
-
Send Message
Posted Nov 22, 2013@lenis0012
It was a general question, does the plugin communicate with mojang at all? I thought this would be a nice feature to allow bypassing registration if you're already authenticated via mojangs servers.
-
View User Profile
-
Send Message
Posted Nov 18, 2013@Skyost
It used to be lightweight ;)
@AtexorCamil
1. Yes it works with 1.6.4 and 1.7 spigot hack
2. I would add support for this IF it was allowed.
But bukkit doesn't support piracy