<p align="center"> <img src="https://craftersdevelopment.pages.dev/crafterslogin-banner.png" alt="CraftersLogin Banner"/> </p> <h1 align="center">CraftersLogin</h1> <p align="center"><i>The Ultimate Authentication System for Minecraft Networks</i></p> <p align="center">Paper & Spigot <b>1.13 – 1.21.x</b> · Java <b>17+</b> · Requires <b>ProtocolLib 5.x</b></p> --- ## What is CraftersLogin? CraftersLogin is a **professional, production-grade authentication plugin** for Minecraft servers. It covers the full authentication lifecycle — from first registration to premium auto-login, 2FA for staff, and cross-proxy session synchronization — all inside a single JAR. Whether you run a solo cracked survival server or a large network with BungeeCord/Velocity, CraftersLogin adapts automatically, requires **zero configuration** to detect your proxy setup, and scales from a lightweight H2 local database to a full MySQL + Redis cluster. --- ## ★ Core Features ### 🔐 Authentication Modes CraftersLogin provides two distinct authentication interfaces, selectable via `authentication.type` in `config.yml`: - **CHAT** — Classic mode. Players type `/login <password>` or `/register <password> <confirm>` in chat. Works with all clients, no dependencies required. - **SIGN** — A native Minecraft Sign editor opens when the player runs `/login` or `/register`. Powered by **ProtocolLib** — the sign is never actually placed in the world. The player types their full alphanumeric password using the keyboard and clicks *Done*. This **completely bypasses chat**, making chat-logger hacked clients useless. On registration, the sign opens twice for password confirmation. ### 🌐 Smart Proxy Auto-Detection The plugin **automatically detects** whether it is running as Standalone, behind BungeeCord/Waterfall, or behind Velocity — by silently reading `paper-global.yml` and `spigot.yml` at startup. No manual proxy configuration is needed. The plugin adapts its networking and session behavior on its own. - **Velocity** (3.x+) — Full support with dedicated plugin-channel communication. - **BungeeCord / Waterfall** — Full support via `BungeeCord` and `bungeecord:main` channels. - **Standalone** — Works out of the box with no proxy configuration. ### ⛏️ Bedrock / GeyserMC Support CraftersLogin detects GeyserMC using **silent Reflection** instead of a hard `floodgate-api` dependency. Bedrock players are detected and handled without any dependency conflicts or NoClassDefFoundError errors. ### 🏠 Spawn Management System A dedicated spawn management system with **five independent spawn types**: | Type | When it triggers | |---|---| | `auth` | When an unauthenticated player joins | | `register` | When a new unregistered player joins | | `join` | After any player successfully logs in | | `firstjoin` | After a player's very first successful registration | | `respawn` | When a player respawns after death | Spawn points are saved in `spawns.yml` and managed via `/cl spawn set <type>`. ### 📧 Self-Service Password Recovery Players can recover their accounts **without staff intervention**: - `/recovery set <email>` — Link a recovery email to your account. - `/recovery request` — Request a 6-digit PIN sent to your email via SMTP. - `/recovery confirm <pin> <newpassword>` — Verify the PIN and set a new password. Powered by an embedded **JavaMail / SMTP** mailer. Compatible with Gmail, Outlook, and any custom SMTP server. ### 🔄 Cross-Server Session Synchronization Players authenticated on one backend server stay authenticated when switching to another — no re-login required. - **MEMORY** — Default. Fast, zero-dependency, works for single-proxy setups. - **REDIS** — Session state persisted in Redis using `SETEX` with configurable TTL. Required for high-availability multi-proxy networks. Automatically falls back to MEMORY if Redis is unavailable. ### 🗄️ Database Import — Migration from Other Plugins The `/cl import <plugin> <jdbc-url>` command **streams accounts directly** from another plugin's database into CraftersLogin: - **AuthMe** — Full account import from SQLite or MySQL. - **nLogin** — Full account import from SQLite or MySQL. - **BCrypt passwords** migrate 1:1 with no re-hashing required. - **SHA-based passwords** import safely and are flagged for automatic upgrade upon the player's next login. ### 👻 Player Isolation During Authentication Until a player authenticates, they are fully sandboxed from the rest of the server: - Chat and most commands are blocked. - Movement is restricted. - The player is **invisible** to all authenticated players. - The player's **inventory is cleared and securely stored**. It is fully restored upon login. All isolation features are individually configurable in `config.yml`. ### 📊 PlaceholderAPI Integration Full PAPI expansion registered under `%crafterslogin_*%`. Exposes registration status, last IP, login count, 2FA status, session data and more to scoreboards, chat plugins, and any PAPI-co