ULTIMATE AUTH

# UltimateAuth **UltimateAuth is a secure, performance‑first authentication plugin for offline‑mode servers (Spigot, Bukkit, Paper, Purpur 1.21+). It delivers a clean login/register experience while completely locking down unauthenticated players to prevent impersonation, grief, and unauthorized access.** **Whether you run a small SMP or a large network, UltimateAuth ensures every player verifies before they can move, interact, or play — and everything is fully configurable with full Hex and Legacy Color support.** --- # 🌐 Check It Yourself You can experience **Modern Auction** exactly as intended by joining **HYDRAZ Network**. | Server Address | |---------| | **play.hydraz.online** | --- ## Features ### ✔ Full Authentication Lockdown Unauthenticated players cannot: - Move or rotate their aim - Use commands (except `/register`, `/login`) - Break or place blocks - Interact with the world or drop/pickup items - Chat **Optional protections:** - Auth timeout with automatic kick - Persistent Title and Action bar prompts during auth ### ✔ Advanced Ban System UltimateAuth includes a built-in moderation system specifically designed to handle rule-breakers efficiently: - Issue permanent bans with custom reasons. - Issue temporary bans with exact durations (days, months, years). - Easily revoke bans. ### ✔ Security & Anti‑Abuse Tools - **IP‑Based Registration Limits:** Prevent players from registering too many accounts from a single IP. - **Join Rate Limiting:** Built-in join throttling to prevent bot attacks. - **Brute‑Force Protection:** Limits maximum failed login/register attempts before kicking the user to prevent password guessing. - **BCrypt Hashing:** All passwords are securely hashed using jBcrypt. ### ✔ Fully Configurable Every major feature, string, and layout can be toggled and tuned: - `config.yml` - Configure timeouts, IP limits, and database settings (SQLite supported). - `messages.yml` - Customize every single message, title, and kick screen using either modern **MiniMessage formatting** (e.g., `<red>`, `<gradient>`) or **Legacy/Hex Color Codes** (e.g., `&a`, `&#00fbff`). --- ## Commands & Permissions ### Player Commands | Command | Description | Permission | | --- | --- | --- | | `/register <password> <password>` | Register a new authentication account. | None | | `/login <password>` | Login to your authentication account. | None | | `/changepassword <old> <new>` | Change your authentication password. | `ultimateauth.auth.use` | | `/logout` | Logout from your current session. | `ultimateauth.auth.use` | ### Admin Commands | Command | Description | Permission | | --- | --- | --- | | `/auth reload` | Reload the plugin configuration files. | `ultimateauth.auth.admin` | | `/auth reset <player>` | Reset a player's session. | `ultimateauth.auth.admin` | | `/auth unregister <player>` | Unregister a player's account. | `ultimateauth.auth.admin` | | `/tempban <reason> <player> <days>` | Temporarily ban a player. | `ultimateauth.ban.admin` | | `/permanentban <reason> <player>` | Permanently ban a player. | `ultimateauth.ban.admin` | | `/unban <player>` | Remove an active ban from a player. | `ultimateauth.ban.admin` | --- ### Server Ip | Ultimate Auth Plugin | Server | | --- | --- | | This Plugin is available in this server | `play.hydraz.online` |