EndCore Auth

PLUGIN OVERVIEW
• Secure Authentication System – Advanced account registration and login protection designed for every player.
• MySQL & SQLite Database Support – Securely store player credentials with high-speed, reliable database handling.
• Industrial Password Encryption – Passwords are cryptographically hashed to safeguard against unauthorized account access.
• Smart Session Login – Remembers trusted IP sessions to minimize repetitive logins for active players.
• Premium & Offline Support – Seamlessly operates across online-mode, offline-mode, and hybrid server networks.
• Instant Account Registration – Fast and straightforward account creation through standard, intuitive commands.
• Authentication Timeout – Automatically disconnects players who fail to authenticate within the configured timeframe.
• Complete Pre-Login Lockdown – Restricts player movement, interaction, inventory access, chat, and command usage before verification.
• Built-in Anti-Bot Protection – Actively mitigates high-frequency automated bot connection spikes and network attacks.
• Comprehensive Anti-Alt Tracking – Detects and monitors alternate account abuse connected across identical IPs.
• Immersive Titles & Subtitles – Delivers sleek on-screen titles, subtitles, and Action Bars guiding players to log in.
• Dedicated Auth Spawnpoint – Locks unauthenticated players to a set spawn location until successfully verified.
• Advanced Admin Tooling – Full suite of control commands to force logins, reset passwords, clear records, and view user details.
• High-Performance Caching – Asynchronous querying and intelligent local memory caching for zero server tick impact.
• Paper Ready Architecture – Engineered specifically for modern Paper servers with an ultra-lightweight footprint.
• Zero Premium Dependencies – Runs standalone without requiring expensive third-party plugins or complex setups.
• Fully Configurable – Total control over messages, timeouts, security thresholds, commands, and security alerts.

COMMANDS

S.NO	Command	Description
1	/register <password> <confirmPassword>	Registers a brand new account and secures it with an encrypted password.
2	/login <password>	Authenticates an existing account and unlocks access to the server.
3	/changepassword <oldPassword> <newPassword>	Allows a player to securely update their existing account password.
4	/auth forcelogin <player>	Instantly marks a player as authenticated without requiring their password.
5	/auth forcelogout <player>	Immediately revokes a player's active session and demands re-authentication.
6	/auth info <player>	Displays comprehensive account status, IP history, and auth metadata.
7	/auth resetpassword <player> <newPassword>	Overrides and replaces a target player's password with a new one.
8	/auth unregister <player>	Permanently purges a player's registered account from the database.
9	/auth setspawn	Sets the global holding spawnpoint where unauthenticated players are held.
10	/auth reload	Hot-reloads all configurations, security rules, and locale messages instantly.
11	/auth version	Outputs the active build and release version of the EndCore Auth system.
12	/pass <player>	Administrative command used to verify the stored account password record.

PERMISSIONS

S.NO	Permission Node	Description
1	endcoreauth.player	Grants access to standard player commands (/register, /login, /changepassword).
2	endcoreauth.bypass	Bypasses all authentication restrictions, timeouts, and login locks.
3	endcoreauth.admin	Grants access to administrative commands, player inspections, and settings.
4	endcoreauth.force	Authorizes the execution of /auth forcelogin and /auth forcelogout.
5	endcoreauth.admin.alerts	Displays real-time staff alerts for suspicious bot, alt, and VPN detections.
6	endcoreauth.admin.pass	Restricted permission node to access sensitive password management commands.
7	endcoreauth.admin.spawnset	Allows setting the authentication containment spawn location.
8	endcoreauth.admin.clearalt	Allows staff to clear stored alternate account logs and links from the database.
9	endcoreauth.admin.ignorebot	Allows whitelisting a specific player account to bypass bot detection checks.
10	endcoreauth.admin.ignorealt	Allows whitelisting a player to bypass simultaneous alt-account thresholds.
11	endcoreauth.admin.ignorevpn	Allows marking a specific player to bypass active VPN/Proxy filter checks.
12	endcoreauth.admin.unignorebot	Revokes a player's whitelist exemption from the anti-bot protection module.
13	endcoreauth.admin.unignorealt	Revokes a player's whitelist exemption from alt-account limitations.
14	endcoreauth.admin.unignorevpn	Revokes a player's whitelist exemption from VPN/Proxy connection checks.
15	endcoreauth.admin.reload	Authorizes using the live in-game configuration reload command.