nwLogin | Login and Register and Forgot PW using UI Dialogs / 1.21.7 - 26.2+ and Folia Support

##########################################################################
#
#                         nwLogin - Login and Register using UI Dialogs!
#      Created By Discord NN#7999 (Newworld Server)
#     Default Config nwLogin
#
##########################################################################

#Contact&Support: https://discord.gg/gwXcr7c6Gq

dialog:
  canCloseWithEscape : false
  columns : 2

# Rules
join-confirmation:
  enabled : false
  timeout : 60 # Timeout in seconds (default: 60 seconds = 1 minute)
  cancel_button:
    enabled : true
    label : "<red>Cancel</red>"

# Second layer of protection: server-side enforcement so that a player who
# closes/ignores the login dialog (e.g. via a modified client) still cannot
# move, chat, fight, build, or touch inventories until AuthMe confirms login.
security:
  restrict-unauthenticated : true
  # Commands allowed while not authenticated (leading slash, case-insensitive)
  allowed-commands :
   - "/login"
    - "/l"
    - "/register"
    - "/reg"
    - "/nwlogin"
    - "/nwlog"
    - "/email"
  # Re-show the login/register dialog every N seconds of inactivity (0 = disabled).
  # Resets on every real dialog click, so it never interrupts an in-progress
  # multi-step flow (register with email, forgot password) - it only fires
  # once a player has gone idle for this long.
  redialog-interval : 40
  # Kick the player if still not authenticated after N seconds of inactivity
  # (0 = disabled). Also resets on every dialog click, same as above.
  kick-timeout : 300 # 5 minutes


login:
  title : "<white> <shift:30><glyph:server_icon_11>"
  body :
   - "<b><gradient:#128BDE:#128BDE>ɴᴇᴡᴡᴏʀʟᴅ ꜱ</gradient><gradient:#128BDE:#60C6FF>ᴇʀᴠᴇʀ</gradient></b>"
    - "<gradient:#C7E7FD:#C7E7FD>Adventure in New</gradient><gradient:#C7E7FD:#B5D9EE>World</gradient>"
  width : 150
  submitButton : "<green>Login"
  actions:
    - type : "submit"
      label : "<green>Login</green>"

register:
  email_input:
    enabled : true
    label : "Email"
  title : "<white> <shift:30><glyph:server_icon_11>"
  body :
   - "<b><gradient:#128BDE:#128BDE>ɴᴇᴡᴡᴏʀʟᴅ ꜱ</gradient><gradient:#128BDE:#60C6FF>ᴇʀᴠᴇʀ</gradient></b>"
    - "<gradient:#C7E7FD:#C7E7FD>Adventure in New</gradient><gradient:#C7E7FD:#B5D9EE>World</gradient>"
  submitButton : "<green>Register"
  width : 150
  actions:
    - type : "submit"
      label : "<green>Register</green>"
     
rule:
  agree:
    enabled : true
    key : "agree"
    label : "<gray>I agree to the server rules</gray>"
  title : "<white> Server Rules"
  body :
   - "<gray>1) No cheating or using unfair advantages</gray>"
    - "<gray>2) No advertising or trolling</gray>"
    - "<gray>3) Respect other players</gray>"
    - "<gray>Click <green>Confirm</green> to accept the rules and proceed to registration</gray>"
  confirmButton : "<green>Confirm"

# "Forgot Password?" flow - fully dialog-driven, using AuthMe's own real OTP
# recovery system underneath (same as its "/email recover" + "/email code"):
#   1) email_step asks for the email on file; checked against the account's
#      registered email (register.email_input) directly through AuthMe's API.
#   2) Only if it matches, AuthMe generates and emails a real recovery code,
#      and code_step asks the player to enter it (wrong attempts show the
#      remaining tries, exactly like AuthMe's own "/email code").
#   3) Only if the code is correct, reset_step asks for a new password and
#      applies it immediately, then logs the player in with it.
# Cancel at any step always returns to the login dialog - it never lets the
# player through without logging in.
# Requires AuthMe's Email.mailAccount/mailPassword and Security.recoveryCode.length
# (> 0) to be configured - otherwise the email step shows an error and stops there.
recovery:
  enabled : true
  button : "<yellow>Forgot Password?</yellow>" # shown on the login dialog
  title : "<white> Recover Password"
  width : 150
  cancelButton : "<red>Back to Login</red>"
  # Minimum seconds between recovery-code sends (initial send and every resend).
  # Prevents spamming AuthMe's mail server / the player's inbox.
  resend_cooldown_seconds : 60
  email_step:
    body :
     - "<gray>Enter the email address linked to your account.</gray>"
      - "<gray>A recovery code will be emailed to you.</gray>"
    email_label : "Email"
    submitButton : "<green>Continue</green>"
  code_step:
    body :
     - "<gray>Enter the recovery code sent to your email.</gray>"
      - "<gray>Didn't get it? Use Resend Code below.</gray>"
    code_label : "Recovery Code"
    submitButton : "<green>Verify</green>"
    resendButton : "<aqua>Resend Code</aqua>"
  reset_step:
    body :
     - "<gray>Enter a new password for your account.</gray>"
    password_label : "New Password"
    confirm_label : "Confirm Password"
    submitButton : "<green>Reset Password</green>"

messages:
  login:
    button_password : "Password"
    empty_password : "<red>Please enter your password</red>"
    wrong_password : "<red>Incorrect password</red>"
    need_register : "<yellow>No account found. Please register</yellow>"
    cancelled : "<red>You cancelled the login process.</red>"

  register:
    button_password : "Password"
    confirm_password : "Confirm Password"
    need_both : "<red>Please enter both password and confirmation</red>"
    mismatch : "<red>Passwords do not match</red>"
    too_short : "<red>Password must be at least <white>%min%</white> characters long</red>"
    too_long : "<red>Password must not exceed <white>%max%</white> characters</red>"
    invalid : "<red>Invalid password</red>"
    already : "<yellow>You are already registered. Please login</yellow>"
    failed : "<red>Registration failed. Please try again</red>"
    email_required : "<red>Please enter your email address</red>"
    email_invalid : "<red>Invalid email address, try again!</red>"
    email_already_used : "<red>This email is already registered</red>"
    cancelled : "<red>You cancelled the registration process.</red>"

  security:
    action_blocked : "<red>You must login or register first!</red>"
    kick_timeout : "<red>You took too long to login/register.</red>"

  recovery:
    email_required : "<red>Please enter your email address</red>"
    no_email_on_file : "<red>No email is registered to this account.</red>"
    email_mismatch : "<red>This email does not match our records</red>"
    recovery_unavailable : "<red>Password recovery is not available on this server. Contact an admin.</red>"
    code_sent : "<green>A recovery code has been sent to your email.</green>"
    resend_cooldown : "<red>Please wait <white>%seconds%</white>s before requesting another code.</red>"
    code_required : "<red>Please enter the recovery code</red>"
    code_incorrect : "<red>Incorrect code. <white>%tries%</white> tries remaining.</red>"
    code_no_tries_left : "<red>Too many incorrect attempts. Please request a new code.</red>"
    need_both : "<red>Please enter both password and confirmation</red>"
    mismatch : "<red>Passwords do not match</red>"
    too_short : "<red>Password must be at least <white>%min%</white> characters long</red>"
    too_long : "<red>Password must not exceed <white>%max%</white> characters</red>"
    failed : "<red>Could not reset password. Please try again.</red>"
    success : "<green>Password reset! Please login with your new password.</green>"