LoginSecurity

LoginSecurity
LoginSecurity is a lightweight password authorization plugin. You can optionally set a password each time you enter the server, adding a double layer of security to your account. The password is stored inside the configuration file, nobody else except the server owner can access or modify it.
How does it work?
Install the pluign to your /plugins/ directory, then start your server.
Type /register <password>, your account is now locked with a password.
For each time you login, make sure to use /login <password>.
Features
- Register your account optional or required (change in config)
- 5 Useful commands to mangage your password
- Advanced administrative control
- Advanced documentation via wiki
- Secure password storage using BCrypt
- Secure sessions storing to improve user experience
- Customizable time-out
- Map captcha upon registration (user friendly)
- Conversion from AuthMe and xAuth (check wiki for more info)
- Premium support through AutoIn
- Automatic update with changelog overview
- Username filtering (length and characters)
- Highly detailed configuration
- Automatically updated translation manager (user-submitted)
- Prevents being kicked by orther players loging in with your name
Session login allows the user to log in right after they logged out and not have to type in their password again. (1 minute time limit of being logged out, stores IP during that time to keep everything safe)
Commands
/lac - Admin command, rmpass and reload
/register <password> - Set your password
/login <password> - Login with your password
/changepass <old> <new> - change your password
/logout - Logout
Permissions
- loginsecurity.admin - allows admin command
- loginsecurity.update - shows update notifications
Video
Thanks to ServerMiner for making this informative tutorial
Orther tutorials: German (by MineCraftler4Live)
Planned
- Add translation interface for easier language selection
- Suggestions?
Known Bugs
- Players can mount/dismount and ride on vehicles while not logged in
Disclaimer
By default, LoginSecurity will check for updates from bukkitdev every 3 hours.
This feature can be disabled by setting "update-checker" to "false"
Anyone with the permission node ls.admin will be notified of updates, and it also able to download them via /lac update.
Which again can be disabled by disabling the update-checker
This plugin utilises Hidendra's plugin metrics system, which means that the following information is collected and sent to mcstats.org:
- A unique identifier
- The server's version of Java
- Whether the server is in offline or online mode
- The plugin's version
- The server's version
- The OS version/name and architecture
- The core count for the CPU
- The number of players online
The Metrics version Opting out of this service can be done by editing plugins/Plugin Metrics/config.yml and changing opt-out to true.
Additionally, when the language setting is changed, information is retrieved from lang.lenis0012.com to aquire up to date translations.
Links
- v3.0.2 - Download (18 - 1.15)
- Source code (GitHub)
- https://github.com/lenis0012/LoginSecurity-2/wiki (Wiki)
- https://github.com/lenis0012/Translations/wiki/Contribute (Translation Contribution)
Donate
If you want to support me working on this project, please donate.
It helps me alot to keep my projects up.
Donate at the top right corner
-
View User Profile
-
Send Message
Posted Mar 12, 2016@lenis0012
Thanks for your reply/answer, i'll will test the new build and report back asap! :-)
-
View User Profile
-
Send Message
Posted Mar 12, 2016@ThisUsernameIsMine
players are able to move vertically to prevent them form being stuck in air and getting kicked for flying.
I will write a patch for it in the next big update (2.1)
Is your issue with blindness remaining fixed in 2.0.13? let me know
-
View User Profile
-
Send Message
Posted Mar 11, 2016@lenis0012
No errors whatsoever =^/
And i've noticed something else as well (minor annoyance):
Whenever a creative (gamemode 1) player (re)joins the server whilst in mid-air, (s)he (or anyone else who enters under the same player name) can influence the player's height.
(yes, this can be done without logging in)
As soon as the player logs in, (s)he will be on the changed height.
Landing on the floor before logging out doesn't solve the problem, as long as the target (or victim) player has creative gamemode, their height can be changed by anone who sees fit.
I'm sure there are some solutions/workarounds for this but i'm currently too tired to name them ;-)
/ThisUsernameIsMine
-
View User Profile
-
Send Message
Posted Mar 9, 2016@ThisUsernameIsMine
any errors?
-
View User Profile
-
Send Message
Posted Mar 9, 2016@lenis0012
Thanks :-)
Perhaps you have an answer to the following:
It often happens that players stay stuck (aren't able to move) after logging in successfully.
For those people the slowness/blindness effect stay active and then i have to manually remove the effect
This occurs on Spigot 1.9.
-
View User Profile
-
Send Message
Posted Mar 8, 2016@ThisUsernameIsMine
@JanSGNm
fixed in 2.0.12
-
View User Profile
-
Send Message
Posted Mar 8, 2016@lenis0012
It doesn't filter them out, i also see them @ Spigot 1.9 (but don't mind it much xd)
-
View User Profile
-
Send Message
Posted Mar 8, 2016Not for me:
[14:23:54 INFO]: UUID of player Y is xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
[14:23:54 INFO]: Y[/XXX.XXX.XXX.XXX:ZZZZ] logged in blablabla
[14:24:01 INFO]: Y issued server command: /login XXXXX
[14:24:01 INFO]: [LoginSecurity] Y authenticated
Running LoginSecurity v2.0.9 for 1.7.4 May 02, 2014
[15:23:49 INFO]: This server is running CraftBukkit version git-Spigot-6d16e64-8
7b9f46 (MC: 1.8.7) (Implementing API version 1.8.7-R0.1-SNAPSHOT)
EDIT: I've updated plugin to v2.0.11 and it is still printing INFO messages with passwords upon user authentication.
-
View User Profile
-
Send Message
Posted Mar 7, 2016@JanSGNm
its suppost to filter it out. does it not?
-
View User Profile
-
Send Message
Posted Mar 7, 2016First thank you for the plugin, it's working great. But I have a question why does it output passwords to the server console when people authenticate themselves? Seems like a security flaw and unnecessary to me.
-
View User Profile
-
Send Message
Posted Mar 5, 2016@tdruzian
unfortunately i will not support unencrypted passwords.
ill check why /lac isn't working
-
View User Profile
-
Send Message
Posted Mar 5, 2016Hello! I own a small server, for a close group of friends. I had a problem that a nephew of one of the players opened minecraft (I didn`t have loginsecurity installed) and destroyed the city with TNTs). Now, I have installed the plugin and I really appreciate it! It works great. However, onother player forgot his password. I Don`t know how to reset it. I just know how to givemyself OP, but the /lac command don`t work. What do I have to do in order to change his password? Also, can I remove the encryption? This way, I open the DB file and I can send by facebook private messege, the password again.
Thank you for this great plugin! Cheers from Brazil
-
View User Profile
-
Send Message
Posted Mar 5, 2016@JanSGNm
there are files for 1.7 and 1.9
1.7 builds should work fine on 1.8 and 1.6 tho
-
View User Profile
-
Send Message
Posted Mar 5, 2016@games647
http://ci.lenis0012.com/plugin/repository/everything/
-
View User Profile
-
Send Message
Posted Mar 4, 2016Add feature to use spawn for logging and after login it will teleport you to the spawn location using spawn names
-
View User Profile
-
Send Message
Posted Mar 3, 2016Are there compiled files for versions prior to 1.9 available?
-
View User Profile
-
Send Message
Posted Mar 3, 2016@lenis0012
It looks like your artifacts in your Jenkins aren't available for maven.
-
View User Profile
-
Send Message
Posted Mar 2, 2016released 1.9 update. Awaiting approval
-
View User Profile
-
Send Message
Posted Jan 14, 2016The author is no longer updating this because it been 1 year without a new update!
-
View User Profile
-
Send Message
Posted Jan 9, 2016In configuration, what fake-location is there for?