BungeeAuth | BungeeCord Google Authentication | OpenSource

Notice: This plugin is no guaranty that you will be safe! It is only another fork to make your server safer against hacked team accounts! Well but enough of this lets start with the plugin.


Requirements

- BungeeCord-Server
- Database (e.g. MySQL and every other Database supporting JDBC-Driver)
- Google Authenticator (get it for iOS || get it for Android)
- Java 8 (for Java 11 see link above)
- optional Spigot (no standalone!)


Installation

1. Create a new database and a new database user e.g. bungeeAuth
2. Stop your BungeeCord-Server
3. Drop the plugin in the plugins folder of your BungeeCord installation
4. Optional put BungeeAuth in Spigot plugin folder and restart spigot
5. Start your BungeeCord-Server again wait until the config.yml was created, shutdown again and open the config.yml
6. Put this Database in the plugin folder! Otherwise it won't work!

Setting up the config

First of all you can change every message of this plugin also the help topic.
This plugin provides also some features to deal with failed logins.
I will walk with you now trough the config and explain every single point to get this plugin to work. Let's go.


versionDoNotChange:
As the name says do not change or remove this option. Just leave it!

prefix:
Here you can define a prefix for the plugin you can use it in any message with %prefix% color codes are also supported in any message!

noPerm:
Here you can define a message for people who type this command and do not have the permission to execute it!

serializerKey:
Here you can define a key wich will be used to protect your Google Authenticator Key its not stored as plain text its encrypted in the database. Please change it and don't leave it default! You can generate a secret here. I recommend at least 64 chars.

messages:
Here you will find every message that this plugin can send you feel free to change. As I said before in every message you can use color codes and the defined prefix with %prefix%.
The message line codeMessage has an extra you can use here %code%. This will display the code you need to use for Google Authenticator.

maxAttemps:
Here you can define a amount of wrong attemps that a user can have.

safetyCommands:
Here you can provide a list of commands that will be run through console if the maximum amount of login attemps is reached. e.g. '/ban %player% Safetyreasons' or '%log% %player% failed with %attemps% attemps to Login'
%player% = The players username
%log% = If a line starts with that the plugin will print a message to console
%attemps% = Amount of attemps

logonServers:
This is a list of servers that will be checked during login. Here you should define your default join server(s) or your fallback server(s). If your server isn't listed here your login won't be checked!

idleTimeInHours:
This specify the amount of time in hours when the player have login again even if the IP hasn't changed.

idleTimeForVerifyInMinutes:
This will specify after what time the player will be kicked when he didn't login.

kickMessage:
Here you can put a custom kick reason when the player didn't confirm his login in the specified time. Color codes and %prefix% is supported.

mysql:
I think I don't need to say anything about this change it to your needs and you're almost ready to go.


Features and Functions

Well now we've setup the config. You're ready to go. Startup your Bungee.

How does this work?
When you join and have the permission "network.bauth.verify" the server will check back your last login, your last IP and if you are registered. If you are not registered the plugin will ask you to register else it will compare your IP and the time to the time in the Database. If the result is still valid (based on the options in the config) it will log you in else it will ask you to login before you can do smth.
If your login time is exceeded and you try to chat, use a command or try to switch a server you'll be kicked.


Commands

/bauth reload - Command to reload the config
INFO: If you have installed BungeeAuth on your Spigot server and perform this command, the sconfig.yml of the current Spigot server where you're on will be also reloaded!

/bauth register - Command to register for bauth and get the Code for Authenticator

/bauth login <CODE> - Command to login with Authenticator code

Aliases: /auth, /bungeeauth

/checkstaff <name> - Command to see last Login location e.g. country, state etc.


Permissions

network.bauth.verify - you will be checked on logins every staff member should have this

network.bauth.auth - base permission for the /bauth command, needed to run any of the commands

network.bauth.admin - permission for the /bauth reload command (reloads the config) and needed to see the 'help1' from the messages section in the config

network.bauth.register - permission for the /bauth register command

network.bauth.login - permission for the /bauth login command

network.bauth.checkstaff - permission for /checkstaff


Issues

Issues can be reported in discussion tab or via DM here in the forum.
I will proceed them ASAP.
Please make sure you followed all the instructions given here.
I can support you in english and german as well.



Have fun with this resource, a rate would be nice and have good time.

Kind regards dmmk218