AuthMe ForceLogin

# 🎨 Can You Draw It? !(https://img.shields.io/badge/Minecraft-1.18+-animate?style=for-the-badge&color=darkgreen) !(https://img.shields.io/badge/Loader-Paper-animate?style=for-the-badge&color=orange) !(https://img.shields.io/badge/Loader-Purpur-animate?style=for-the-badge&color=orange) !(https://img.shields.io/badge/Loader-Spigot-animate?style=for-the-badge&color=orange) !(https://img.shields.io/badge/Loader-Bukkit-animate?style=for-the-badge&color=orange) # 🔐 PremiumAuthBypass **PremiumAuthBypass** is a Bukkit/Spigot plugin designed to streamline authentication for premium Minecraft players by allowing automatic login based on trusted IP addresses. It integrates with **AuthMe Reloaded** and securely links player accounts to their IPs using AES encryption. --- ## ⚠️ **SECURITY WARNING, PLEASE READ THIS:** Proxy Configuration (Velocity / BungeeCord) If your server runs behind a proxy like **Velocity**, you must properly configure **IP Forwarding**. Otherwise, the plugin will detect the proxy's IP address (`127.0.0.1`) instead of the player's real IP, which will break the IP linking system and create a security risk. Make sure to set up the forwarding mode in your `velocity.toml` AND on your backend servers (Spigot/Paper): * **Modern Mode (Recommended):** * Velocity: `player-info-forwarding-mode = "modern"` * Paper: Enable `velocity-support` in `paper-global.yml`. * **BungeeGuard Mode:** * Velocity: `player-info-forwarding-mode = "bungeeguard"` * Spigot/Paper: Install the `BungeeGuard` plugin. * **Legacy Mode:** * Velocity: `player-info-forwarding-mode = "legacy"` * Spigot: Set `bungeecord: true` in `spigot.yml`. --- ## ✨ Features - 🔓 **Automatic Login** - Instantly logs in players if they connect from a trusted IP. - 🔗 **Premium Account Verification** - Checks usernames against Mojang API to ensure they are premium accounts. - 🌐 **IP Linking System** - Players can link their IP to their account for future automatic authentication. - 🔐 **AES Encryption** - All stored IP addresses are encrypted (AES-128) for security. - ⚡ **Async Operations** - Network requests and file saves are handled asynchronously to avoid server lag. - 🧠 **Smart AuthMe Integration** - Uses reflection to support multiple versions of AuthMe. - 💬 **Fully Configurable Messages** - Customize all plugin messages via config. --- ## 📦 Requirements - Java 8+ - Bukkit / Spigot / Paper server - **AuthMe Reloaded** (recommended for full functionality) --- ## ⚙️ How It Works 1. When a player joins: - The plugin checks if their IP is already linked. - If yes → automatic login via AuthMe. 2. If not linked: - The plugin verifies if the account is **premium**. - Prompts the player to link their IP. 3. Once linked: - Future logins from that IP are automatic. --- ## 🔧 Commands | Command | Description | |--------|-------------| | `/premium accept` | Link your current IP to your account | | `/premium revoke` | Remove your current IP | | `/premium revoke all` | Remove all linked IPs | | `/premium list` | Show linked IPs (confirmation required) | | `/premium about` | Show plugin info | --- ## 📁 Configuration Files ### `config.yml` - Enable/disable plugin - Customize messages - Control join behavior ### `linked.yml` - Stores encrypted IPs per player - Automatically managed by the plugin --- ## 🔒 Security - Uses **AES-128 encryption** for IP storage - Fallback to Base64 if encryption fails - No plain IPs stored in files --- ## 🔄 Compatibility The plugin dynamically detects AuthMe API using: - `fr.xephi.authme.api.v3.AuthMeApi` - `fr.xephi.authme.api.API` - Legacy `AuthMe` API --- ## 🌍 External API - Uses Mojang endpoint: https://api.mojang.com/users/profiles/minecraft/{username} to verify premium accounts. --- ## ⚠️ Notes - Requires AuthMe to force login players. - Without AuthMe, the plugin still runs but cannot auto-login users. - IP-based login assumes stable player IPs. - **Security Warning:** If running behind a proxy (Velocity/BungeeCord), you **must** configure IP forwarding properly. If the plugin detects `127.0.0.1` as the player's IP, automatic login will fail or risk bypassing security for all local connections. --- ## 🧩 Example Use Case > A premium player joins your server regularly from the same location. ✔ First login → manually authenticate ✔ Accept IP linking via `/premium accept` ✔ Next logins → instant automatic login 🚀