AuthCore

<div align="center"> # 🏰🔐 AuthCore **The Fortress Framework for Minecraft Servers**, login & security for offline-mode servers, one codebase for **Minecraft 1.16.0 → 26.1-26.2** on Fabric/Forge/NeoForge, servers AND clients. <p align="center" style="font-family: 'Clash of Clans', 'Comic Sans MS', 'Comic Sans', cursive; font-size: 1.15em; color: #c678dd;"> ⚔️ 🔥 🏰 🔥 ⚔️<br/> <em>"No bots, no griefers, no password guessers, only real players."</em> </p> <div align="center" style="padding: 22px 28px 24px; border-radius: 22px; margin: 14px 0 18px; background: radial-gradient(1100px 320px at 50% -60%, rgba(59, 130, 246, 0.16) 0%, rgba(59, 130, 246, 0) 65%), linear-gradient(140deg, #030508 0%, #0a1128 42%, #0d2a5e 100%); border: 1px solid rgba(59, 130, 246, 0.35); box-shadow: 0 0 0 1px rgba(37, 99, 235, 0.10), 0 12px 44px rgba(0, 0, 0, 0.55), 0 0 64px rgba(37, 99, 235, 0.22), inset 0 1px 0 rgba(255, 255, 255, 0.08);"> <a href="https://modrinth.com/mod/authCore" title="Modrinth downloads"> <img src="https://shieldcn.dev/modrinth/qs5rvacf.svg?size=lg&amp;mode=dark&amp;font=inter&amp;gradient=050505,0d2a5e,2563eb,135" alt="Modrinth downloads" style="height: 40px; margin: 6px 8px; border-radius: 10px; box-shadow: 0 4px 18px rgba(0, 0, 0, 0.55), 0 0 24px rgba(59, 130, 246, 0.35); vertical-align: middle;" /> </a> <a href="https://github.com/DawnOfDedSec/AuthCore/actions" title="CI build status"> <img src="https://shieldcn.dev/github/ci/DawnOfDedSec/AuthCore.svg?size=lg&amp;mode=dark&amp;font=inter&amp;gradient=050505,0d2a5e,2563eb,135&amp;statusDot=true&amp;animate=glow" alt="CI build status" style="height: 40px; margin: 6px 8px; border-radius: 10px; box-shadow: 0 4px 18px rgba(0, 0, 0, 0.55), 0 0 24px rgba(59, 130, 246, 0.35), 0 0 34px rgba(34, 197, 94, 0.18); vertical-align: middle;" /> </a> <a href="https://github.com/DawnOfDedSec/AuthCore/stargazers" title="GitHub stars"> <img src="https://shieldcn.dev/github/stars/DawnOfDedSec/AuthCore.svg?size=lg&amp;mode=dark&amp;font=inter&amp;gradient=050505,0d2a5e,2563eb,135" alt="GitHub stars" style="height: 40px; margin: 6px 8px; border-radius: 10px; box-shadow: 0 4px 18px rgba(0, 0, 0, 0.55), 0 0 24px rgba(59, 130, 246, 0.35); vertical-align: middle;" /> </a> <a href="https://github.com/DawnOfDedSec/AuthCore/blob/main/LICENSE" title="License"> <img src="https://shieldcn.dev/github/license/DawnOfDedSec/AuthCore.svg?size=lg&amp;mode=dark&amp;font=inter&amp;gradient=050505,0d2a5e,2563eb,135" alt="License" style="height: 40px; margin: 6px 8px; border-radius: 10px; box-shadow: 0 4px 18px rgba(0, 0, 0, 0.55), 0 0 24px rgba(59, 130, 246, 0.35); vertical-align: middle;" /> </a> </div> </div> --- > ✅ **One codebase, every Minecraft version & every loader**, **1.16.0 → 26.1-26.2**, on > servers AND clients, behind Velocity/BungeeCord or standalone, on **Fabric / Forge / > NeoForge** (see > (https://github.com/DawnOfDedSec/AuthCore/blob/main/README.md#-multi-version--multi-loader-compatibility)). > > 🧭 **New here?** Start with the (https://potenfyr-studios.github.io/AuthCore/docs/1.0.0/guide.html), jar selection, > install, config walkthrough, auth flows, commands and troubleshooting, plus a **learning > path** that maps every topic to the deeper docs (CONFIG / PROXY / WEBPANEL / SECURITY / > DEVELOPMENT) so you can go from zero to expert step by step. All docs are also hosted as a > styled site: (https://authcore.potenfyr.in). --- ## 🔥 Highlights | | | |:--|:--| | 📖 | **Newbie-friendly setup**, runs out of the box (SQLite default), every option optional ((https://potenfyr-studios.github.io/AuthCore/docs/1.0.0/guide.html)) | | 🔑 | **Premium auto-login**, Mojang API outage-proof detection, cracked fallback | | 🔐 | **2FA / MFA**, TOTP authenticator codes, single-use recovery codes, email OTP, MFA step-up for sensitive actions | | 🕸️ | **Network SSO**, Redis-backed single sign-on across your server network | | 🚪 | **Locked-down login lobby**, invisible limbo, no movement/block/chat until verified | | 🛡️ | **Anti-abuse**, brute-force lockout, CAPTCHA (TPS-adaptive), rate limits, IP rules, honeypot | | 🤖 | **ClientGuard**, ghost-client / macro / packet-flood detection, companion attestation, risk-score decision matrix | | 🧠 | **Login intelligence**, risk scores, device fingerprint, new-IP/new-country alerts | | 🔔 | **Discord / webhooks / email**, alerts for every security event; SMTP recovery codes | | 🗄️ | **SQLite / MySQL / PostgreSQL** + **Redis** session & ban sync, cross-server event bus | | 🌐 | **Web admin panel**, dashboard with token auth (full + read-only), HTTPS, brute-force lockout | | 👥 | **Discord account linking**, `/discord link` code flow (Redis + panel API; the bot never touches the database) | | 🔁 | **Proxy-ready**, BungeeCord/Velocity forwarding auto-detect, Velocity modern identity (HMAC), interop with other auth mods | | 🌍 | **7 built-in loc