UltimateAuth

UltimateAuth is a secure, performance‑first authentication plugin for offline‑mode servers (Spigot, Bukkit, Paper, Purpur 1.21+). It delivers a clean login/register experience while completely locking down unauthenticated players to prevent impersonation, grief, and unauthorized access.

Whether you run a small SMP or a large network, UltimateAuth ensures every player verifies before they can move, interact, or play — and everything is fully configurable with full Hex and Legacy Color support.

---

🌐 Check It Yourself

You can experience Modern Auction exactly as intended by joining HYDRAZ Network.

Server Address
play.hydraz.online

---

Features

✔ Full Authentication Lockdown

Unauthenticated players cannot:

• Move or rotate their aim
• Use commands (except /register, /login)
• Break or place blocks
• Interact with the world or drop/pickup items
• Chat

Optional protections:

• Auth timeout with automatic kick
• Persistent Title and Action bar prompts during auth

✔ Advanced Ban System

UltimateAuth includes a built-in moderation system specifically designed to handle rule-breakers efficiently:

• Issue permanent bans with custom reasons.
• Issue temporary bans with exact durations (days, months, years).
• Easily revoke bans.

✔ Security & Anti‑Abuse Tools

• IP‑Based Registration Limits: Prevent players from registering too many accounts from a single IP.
• Join Rate Limiting: Built-in join throttling to prevent bot attacks.
• Brute‑Force Protection: Limits maximum failed login/register attempts before kicking the user to prevent password guessing.
• BCrypt Hashing: All passwords are securely hashed using jBcrypt.

✔ Fully Configurable

Every major feature, string, and layout can be toggled and tuned:

• config.yml - Configure timeouts, IP limits, and database settings (SQLite supported).
• messages.yml - Customize every single message, title, and kick screen using either modern MiniMessage formatting (e.g., <red>, <gradient>) or Legacy/Hex Color Codes (e.g., &a, &#00fbff).

---

Commands & Permissions

Player Commands

Command	Description	Permission
/register <password> <password>	Register a new authentication account.	None
/login <password>	Login to your authentication account.	None
/changepassword <old> <new>	Change your authentication password.	ultimateauth.auth.use
/logout	Logout from your current session.	ultimateauth.auth.use

Admin Commands

Command	Description	Permission
/auth reload	Reload the plugin configuration files.	ultimateauth.auth.admin
/auth reset <player>	Reset a player's session.	ultimateauth.auth.admin
/auth unregister <player>	Unregister a player's account.	ultimateauth.auth.admin
/tempban <reason> <player> <days>	Temporarily ban a player.	ultimateauth.ban.admin
/permanentban <reason> <player>	Permanently ban a player.	ultimateauth.ban.admin
/unban <player>	Remove an active ban from a player.	ultimateauth.ban.admin

---

Server Ip

Ultimate Auth Plugin	Server
This Plugin is available in this server	play.hydraz.online