AstraLogin

# 🌌 AstraLogin **A user-friendly, efficient, and reliable login system designed for modern Minecraft servers.** Created and maintained with 💻 from Poland by DawcoU 🇵🇱 AstraLogin is a modern, high-performance login plugin built specifically for newer Minecraft versions (1.18 - 26.2+). Developed in Java 17 and leveraging the Paper API for maximum efficiency, it is the perfect choice for Survival, RPG, and SMP servers. 🚀🎮 ⭐ AstraLogin supports: - Paper - Purpur - Arclight - Spigot (supported, but not recommended) 🚰⚠️ Spigot is supported, but it is not the recommended platform. Some features may behave differently or cause compatibility issues. Paper or its forks are strongly recommended for the best experience. --- ### 🚀 Key Features * **Advanced Security:** Password hashing using the **BCrypt** algorithm, ensuring no plain text is ever stored and protecting against dictionary attacks. 🛡️🔑 * **Smart Brute-Force Protection:** 🚫🤖 * Automatically kicks players after exceeding failed login attempts. * **Margin of Error:** Configure extra "mercy" chances (margin) before a final action is taken. * **Temporary IP Ban:** If the limit is reached, the user's IP is temporarily banned in RAM to prevent further attacks without bloating your database. * **Two-Factor Authentication (2FA):** Next-level account security! Players can link their accounts to authenticator apps to protect themselves from hackers. 📱🔐 * **Account Management & Statistics:** Comprehensive tracking of player data, including registration/last login dates, 2FA status, UUIDs, and more! 📊🔍 * **Session System:** Allows players to rejoin without re-typing their password within a configurable time limit (IP-based). 🕒🔄 * **Equipment Protection:** Complete concealment of player inventory and armor during the login process to prevent exploits. 🛡️🎒 * **Location Protection:** Teleports unauthorized players to a secure location (or spawn) and restores their previous position only after successful login. 📍🌍 * **Inventory Storage:** Safely caches player items in a single-file system until they are authorized. 📦💾 * **Visual Effects:** 🎨✨ * **Blindness Effect:** Keeps unauthorized players in total darkness. 🌑 * **HEX Colors:** Full support for modern HEX color codes in the prefix and all messages via MiniMessage/Legacy! 🌈 * **Admin Utilities:** 🛠️⚙️ * **Auto-Updater:** Configuration files automatically update when you install a newer plugin version. * **Update Notifications:** Notifies admins when a new version is available on Modrinth. * **AutoLogin Premium:** Automatic login if a PREMIUM (Full Authentication) or MINI account is detected AutoLogin only checks the mojang database ✅👤 * **Password recovery:** Using the PIN as a separate source of authentication confirmation, you can reset your password yourself. 🔑🔄 --- ### 🛠️ Commands & Permissions | Command | Description | Permission | |:-------------------------------------------------------------|:--------------------------------------------------------------------------------|:--------------------------------------------------------------------------------| | `/register <pass> <repeat>` | Register a new account 🔐 | *None* | | `/login <pass>` | Log into the server 🔑 | *None* | | `/logout` | Log out of the server ➡️ | *None* | | `/pin <set> <PIN/Automatically>` | Generates a random PIN or requires manual entry (Depending on configuration) ➡️ | *None* | | `/changepassword <old> <new> <repeat>` | Change your current password 🔄 | *None* | | `/2fa <setup/unsetup/code>` | Manage and verify your 2FA security 📱 | *None* | | `/forgotpass <PIN>` | Resets password using pin 🔑🔄 | *None* | | `/account <player>`