MaskAuth

<div align="center"> !(https://cdn.modrinth.com/data/cached_images/6ac16c384213321af4cd3054a009e7fb662f80e0.jpeg) <br> (https://img.shields.io/badge/Minecraft-1.20.x-62b47a?style=for-the-badge&logo=data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAA4AAAAOCAYAAAAfSC3RAAAACXBIWXMAAAsTAAALEwEAmpwYAAAA&logoColor=white&labelColor=1a1a2e)](https://www.spigotmc.org) (https://img.shields.io/badge/Spigot-Paper-ff6b35?style=for-the-badge&labelColor=1a1a2e)](https://papermc.io) (https://img.shields.io/badge/Java-11+-f89820?style=for-the-badge&logo=openjdk&logoColor=white&labelColor=1a1a2e)](https://adoptium.net) (https://img.shields.io/badge/License-All_Rights_Reserved-e63946?style=for-the-badge&labelColor=1a1a2e)](#-license) (https://img.shields.io/badge/Version-1.0.0-00d4ff?style=for-the-badge&labelColor=1a1a2e)](https://github.com/ALLAY-XD-20/MaskAuth/releases) <br> > **🔐 The most stylish authentication plugin for Minecraft.** > A 6-digit PIN system with a fully interactive GUI numpad, custom number-head skulls, IP tracking, BungeeCord support, and total account security — all in one. </div> --- ## 🖼️ Preview <div align="center"> | 🔐 Login GUI | 📋 Register GUI | ⚙️ Change PIN | |:---:|:---:|:---:| | *Number-head numpad with live PIN display* | *Clean 6-slot register flow* | *Two-step old → new PIN change* | </div> --- ## ✨ Features ### 🔢 GUI-Based PIN System - **Fully interactive 54-slot chest GUI** — no chat commands needed - **Custom player-head skulls** for every digit `0–9`, each with a unique number skin - **Live PIN indicator** — 6 slot display at the top fills in as you click digits (shown as `●` dots) - **Auto-confirm** when all 6 digits are entered - **Backspace** and **Confirm** skull buttons - GUI **re-opens automatically** if closed before authentication — no bypass possible ### 🛡️ Rock-Solid Security - PINs hashed with **SHA-256 + UUID salt** — never stored in plaintext - **Movement freeze** while unauthenticated - **Blindness effect** on join until authenticated - **Chat and command blocking** until login completes - **Max attempt limit** — too many wrong PINs = kick ### 🌐 IP Tracking & Control - 📍 **Full IP history** logged per player with timestamps - 🚫 **IP account limit** — configurable max accounts per IP address - 🔔 **Admin alerts** when a player logs in from a new IP - 🔍 `/maskauth ipinfo <player>` to view a player's complete IP history ### 🕹️ Legacy Player Support - Players on older clients or who prefer commands can use: - `/register <pin>` — register with a 6-digit PIN via chat - `/login <pin>` — authenticate via chat command - Fully toggleable in `config.yml` ### 🌍 Auth World - Unauthenticated players are **teleported to a designated auth world/spawn** - Configurable world name, XYZ coordinates, yaw & pitch ### 🔗 BungeeCord Integration - Designate this server as an **auth server** - Automatically **forward authenticated players** to your lobby/main server - Compatible with BungeeCord's IP forwarding ### 💬 Fully Custom Messages - Every single message is configurable in `config.yml` - Full `&` color code support - Custom prefix with color formatting --- ## 📦 Installation ``` 1. Download MaskAuth-1.0.0.jar 2. Drop it into your /plugins/ folder 3. Restart your server 4. Configure plugins/MaskAuth/config.yml 5. ✅ Done! ``` > **Requirements:** Spigot or Paper **1.20.x** · Java **11+** --- ## 🔧 Commands | Command | Description | Permission | |---------|-------------|------------| | `/register` | Open register GUI (or `/register <pin>` legacy) | — | | `/login` | Open login GUI (or `/login <pin>` legacy) | — | | `/changepin` | Change your PIN via GUI | — | | `/unregister <player>` | Delete a player's auth data | `maskauth.admin` | | `/maskauth reload` | Reload the config | `maskauth.admin` | | `/maskauth status` | View live auth status | `maskauth.admin` | | `/maskauth ipinfo <player>` | View player IP history | `maskauth.admin` | | `/maskauth info` | Plugin version info | `maskauth.admin` | --- ## 🔑 Permissions | Permission | Description | Default | |------------|-------------|---------| | `maskauth.admin` | Full admin access | OP | | `maskauth.bypass` | Skip authentication entirely | `false` | | `maskauth.ipbypass` | Bypass IP account limit | `false` | --- ## ⚙️ Configuration <details> <summary><b>📄 Click to expand config.yml</b></summary> ```yaml settings: session-timeout: 0 # Seconds to remember login (0 = off) max-attempts: 5 # Wrong PIN attempts before kick login-timeout: 60 # Seconds to authenticate before kick blind-on-join: true # Apply blindness until authenticated freeze-movement: true # Freeze player until authenticated hide-until-auth: true # Hide player from others until auth auth-world: enabled: true world: "world" spawn: { x: 0.5, y: 64.0, z: 0.5 } legacy-support: enabled: true