Lunnara login

<div align="center"> # ✦ LunnaraLogin ✦ **Authentication plugin for Lunnara Network** Spigot · Paper · Purpur · All Forks · 1.21.x · Secure BCrypt · MiniMessage Styled --- </div> ## Supported Platforms | Platform | Status | |---|---| | **Paper** 1.21.x | ✔ Fully supported (native Adventure) | | **Spigot** 1.21.x | ✔ Fully supported (shaded Adventure) | | **Purpur** 1.21.x | ✔ Fully supported | | **Pufferfish** 1.21.x | ✔ Fully supported | | **Any Spigot/Paper fork** | ✔ Should work out of the box | > Requires **Java 21** or higher. ## Features - **BCrypt Password Hashing** — Passwords are securely salted & hashed, never stored in plain text - **MiniMessage Support** — All messages fully customizable with gradients, colors & formatting - **Full Lockdown** — Players can't move, chat, interact, build, or take damage until authenticated - **Blindness Effect** — Optional blindness + slowness applied before login - **Auto Kick** — Players who don't authenticate within the timeout get kicked - **Login Reminders** — Periodic messages reminding players to `/login` or `/register` - **JSON Storage** — Per-player data files, no database needed - **Async Operations** — Password hashing runs off the main thread, zero lag --- ## Commands ### Player Commands | Command | Aliases | Description | |---|---|---| | `/register <password> <password>` | `/reg` | Register a new account (first join) | | `/login <password>` | `/l` | Log in to your account | | `/changepass <old> <new>` | `/changepassword` | Change your own password | ### Admin Commands All admin commands use `/lunaralogin` (aliases: `/ll`, `/llogin`) | Command | Permission | Description | |---|---|---| | `/ll changepass <player> <newpass>` | `lunaralogin.admin.changepass` | Force-change a player's password | | `/ll delacc <player>` | `lunaralogin.admin.delacc` | Delete a player's account (kicks if online) | | `/ll forcelogin <player>` | `lunaralogin.admin.forcelogin` | Force-login an online player without a password | | `/ll status <player>` | `lunaralogin.admin.status` | Check if a player is registered / logged in | | `/ll reload` | `lunaralogin.admin.reload` | Reload config & messages | --- ## Permissions | Permission | Default | Description | |---|---|---| | `lunaralogin.admin` | OP | Access to admin help | | `lunaralogin.admin.changepass` | OP | Change another player's password | | `lunaralogin.admin.delacc` | OP | Delete a player's account | | `lunaralogin.admin.forcelogin` | OP | Force-login a player | | `lunaralogin.admin.status` | OP | View player auth status | | `lunaralogin.admin.reload` | OP | Reload configuration | --- ## Configuration ### config.yml | Option | Default | Description | |---|---|---| | `session-timeout` | `60` | Session duration in minutes | | `login-timeout` | `120` | Seconds before unauthenticated players are kicked | | `max-login-attempts` | `5` | Failed login attempts before kick | | `min-password-length` | `6` | Minimum password length | | `max-password-length` | `32` | Maximum password length | | `allow-movement-before-auth` | `false` | Allow movement before logging in | | `blind-before-auth` | `true` | Apply blindness + slowness before auth | | `reminder-interval` | `5` | Seconds between login/register reminders | | `allowed-commands` | `/login, /register, /l, /reg` | Commands usable before authenticating | ### messages.yml All messages use **MiniMessage** formatting. Supports gradients, hex colors, bold, etc. Example from the default config: ``` login-success: "<color:#ff7ae6>✔ <color:#ffffff>Logged in successfully! <color:#aaaaaa>Welcome back." ``` --- ## Installation 1. Build the plugin: ```bash cd LunnaraLogin && ./gradlew build ``` 2. Copy `build/libs/LunnaraLogin-1.0.0.jar` to your server's `plugins/` folder 3. Start the server — config files will be generated 4. Edit `config.yml` and `messages.yml` to your liking 5. Run `/ll reload` to apply changes --- ## How It Works 1. **First join** — Player is frozen & blinded, prompted to `/register <password> <password>` 2. **Return visit** — Player is frozen & blinded, prompted to `/login <password>` 3. **On success** — Effects removed, full server access granted 4. **Too slow?** — Kicked after `login-timeout` seconds 5. **Wrong password?** — Kicked after `max-login-attempts` failed tries Player data is stored in `plugins/LunnaraLogin/playerdata/<uuid>.json`. --- <div align="center"> **Lunnara Network** · Spigot / Paper / Purpur · 1.21.x · Java 21 </div>