SecPlayer

SecPlayer adds **registration and login** to your Minecraft server. Players must register once (or log in on later joins) before they can move or play. The mod provides a Terms of Service and age-confirmation screen, optional forgot-password emails, IP and geolocation logging, a custom login-screen logo, an OP-only admin panel (with optional **approval mode** for new registrations, **timezone grouping**, and approve/deny), and a **player profile** where users can change their password, update their email, or delete their account (with an email notification and disconnect). --- ## What This Mod Does - **Registration:** New players see a TOS screen, then a registration form. The full-name field is **pre-filled with your Minecraft username** and cannot be edited. You also enter email, optional display name, and password. A **"Terms of Service & Privacy"** button opens a scrollable data/privacy policy (from `config/secplayer_privacy.txt` on the client). Passwords are masked. One "I agree to the Terms of Service" checkbox confirms age (minimum configurable). - **Login:** Returning players enter their password on join. Optional "Remember me" stores the password securely per server for auto-login next time. "Forgot password?" sends a reset code by email (when SMTP is configured). An **"Enter reset code"** button lets you open the code + new password screen without requesting another email (e.g. if you closed the menu or reopened the game). - **Player profile:** Run **`/secplayer info`** to open a profile screen. You can view your info (username, masked email, alternative name), **change password**, **update email**, or **delete your account**. Deleting your account removes all data, sends you a confirmation email (including the server name), and disconnects you; re-joining requires registering again. - **TOS text:** Server operators can edit the exact Terms of Service in `config/secplayer_tos.txt` (file is created on server start if missing). - **IP & geolocation:** The mod records IP, country, region, city, and optionally ISP (ASN) on registration and login. Uses GeoLite2 database files in `config/` (you place the files manually; obtain them from a free MaxMind account). In the **admin player detail**, only **country** and **last login** (timezone-formatted) are shown; full geo data is still stored in the database until the account is deleted. - **Admin panel:** OPs run `/secplayer admin` to open a list of registered players **grouped by timezone** (search by player or timezone; players with no timezone appear under "Local"). Open a player to view details (username, UUID, masked email, alternative name, birth year, status, country, last login), **ban/unban** (Minecraft's ban list), **reset password**, set alternative username, **approve/deny** (when approval mode is on), or **delete the player** (sends them an email and removes the account). All scrollbars support click-and-drag. - **Approval mode:** Set **`requireApproval=true`** in config so new registrations are "pending" until an admin approves. Use the **Pending** filter in the admin list, or **Approve** / **Deny** in player detail, or **`/secplayer approve <player>`** / **`/secplayer deny <player>`**. Deny adds the player to the ban list; optional email when approved (if SMTP is configured). - **Display names:** Players can choose an optional "alternative username" and use it as their in-game name (chat, tab list). Use **`/secplayer setAlt <name>`** to set or clear it; setting a non-empty name **automatically enables** "use as in-game name," so you don't need to have checked the box at registration. - **Login logo:** You can show a custom logo on the login screen. The server can send one image to all clients (no per-client config), or clients can use a local image. Logo is scaled to fit the panel. - **Data storage:** All account data is stored in a **SQLite database** on the server. No separate database server is required. The file **`config/secplayer.db`** is created on first run and holds accounts, login history (IP, geolocation, timestamps), and password-reset tokens. You can back up or inspect it with any SQLite tool. --- ## Installation 1. Install (https://files.minecraftforge.net/) for Minecraft 1.18.2. 2. Place the mod JAR in the `mods/` folder on **both** the server and every client. Registration and login only run on **dedicated servers**. Single-player / integrated server does not use the registration flow. --- ## How to Use (Players) - **First time:** On join you see the TOS screen. Check the agreement box and click **Continue to Registration**. Your name is pre-filled with your Minecraft username. Fill in email, optional display name, and password, then submit. Use **Disconnect** to leave without registering. - **Later joins:** Enter your password on the login screen. Optionally check **Remember me** for auto-login next time. Use **Forgot password?** to receive a reset code by email (if the server has SMTP configured). You can a