⚡ LiteAuth

The Next-Generation, Ultra-Fast Authentication Plugin for Minecraft Networks & Standalone Servers.
Fully supports Folia, Paper, Spigot, Velocity, and BungeeCord with seamless hybrid Mojang Premium auto-login and zero-database proxy architecture.

---

🌟 Why LiteAuth?

Traditional authentication plugins are often sluggish, lack true multi-threaded region support for modern software like Folia, and require cumbersome SQL drivers on proxies.

LiteAuth redefines Minecraft network security. Built from the ground up for extreme performance, it provides seamless Mojang encryption auto-login for official accounts, bank-grade password hashing for offline players, and a dedicated internal Bridge Socket that lets players execute /changepassword, /premium, and /cracked from any server on your network without installing database drivers on your proxy!

---

✨ Key Features

💎 Hybrid Mojang Premium & Cracked Auto-Login

• Instant Mojang Encryption: Official Minecraft account holders join with native Mojang encryption—no /login password prompt, no delays, and no interruptions!
• Self-Service Mode Switching: Players can convert their account to Premium mode using /premium <password> confirm or revert with /cracked.
• Smart Lobby Routing: Premium players can be routed directly to your lobbies, bypassing the auth server completely, or remain on their current server if configured (Send-After-Login: none).

⚡ True Folia & Modern Paper Native

• Region-Aware Threading: Uses an intelligent Universal Scheduler that leverages Folia's RegionScheduler and Paper's asynchronous task workers.
• Zero Main-Thread Locking: Database operations, password hashing, and Mojang API validations never stall your server's TPS.

🌐 Secure LiteAuth Bridge (Zero Proxy Database)

• No SQL Drivers on Velocity / BungeeCord: Proxies remain featherlight.
• Network-Wide Multi-Commands: Players in Bedwars, Skyblock, or Survival can change their password or toggle premium status instantly via our secure internal TCP bridge.

🛡️ Hardened Security & Anti-BruteForce

• Intelligent IP Lockout: Automatically locks out IPs with excessive failed password attempts.
• Console Log Protection: Sensitive passwords in /login and /register commands are filtered and scrubbed from server logs and disk.
• Strict Pre-Auth Freeze: Freezes XYZ player movement while still allowing smooth head/camera rotation; blocks chat, inventory, interactions, and unauthorized commands until logged in.
• Password Policies: Enforces customizable minimum/maximum length and blacklists unsafe passwords (e.g., 123456, password).

🎨 Complete Localization (100% Configurable)

• Dual translation files: messages.yml (Backend) and proxy-messages.yml (Velocity & BungeeCord).
• Full support for legacy Minecraft color codes (&a, &b, &c) and modern RGB HEX color codes (&#RRGGBB).

---

🖥️ Supported Platforms

Platform	Supported Versions	Notes
Folia	1.19.x - 1.21.x+	Native region-scheduler support
Paper / Purpur	1.8 - 26.x+	Fully asynchronous & optimized
Spigot	1.8 - 26.x+	Backward compatible
Velocity	3.3.x - 3.4.x+	Native proxy encryption & commands
BungeeCord / Waterfall	1.20+	Multi-Command bridge supported

---

🛡️ Best Practices for Server Administrators

To ensure maximum security and protect your server network, follow these essential guidelines:

1. Set a Strong, Random Secret Token
   In both proxy-config.yml (proxy) and config.yml (backend), always set proxy-bridge.secret-token to a long, unpredictable cryptographic passphrase (at least 32 characters, using mixed case, numbers, and symbols).

   Never use default or simple passwords like secret123.

2. Firewall Your Internal Bridge Port
   The LiteAuth Bridge communicates over an internal TCP port (default 25577).

   • Make sure this port is firewalled from the public internet (using ufw, iptables, or your host's firewall).
   • Only allow connections between your Proxy and Backend machines.

3. Backend enforce-secure-profile Setting
   When running behind Velocity or BungeeCord, ensure enforce-secure-profile=false is set in your backend server.properties to prevent Mojang public key signature kicks.

4. Database Security
   If you use MySQL or MariaDB, configure your database user with only the necessary privileges (SELECT, INSERT, UPDATE, DELETE) restricted to your backend IP.

---

🚀 Quick Setup Guide

Standalone Server (Paper / Folia / Spigot)

1. Drop LiteAuth-1.0.0.jar into your server's plugins/ directory.
2. Start the server to generate config.yml and messages.yml.
3. Select your database type (H2, SQLite, MySQL, or MariaDB) in config.yml.
4. Customize spawn locations using /setauthspawn.

Proxy Network (Velocity or BungeeCord + Backends)

1. Place LiteAuth-1.0.0.jar in your Proxy's plugins/ folder and in your Auth backend's plugins/ folder.
2. In the Proxy's proxy-config.yml:
   • Set Auth-Servers (e.g., [auth]).
   • Set Lobby-Servers (e.g., [lobby] or none).
   • Set a strong secret-token under bridge.
3. In the Backend's config.yml:
   • Set Enable-Proxy: true.
   • Under proxy-bridge, enter your proxy's internal host/port and the exact same secret-token.
4. Restart your Proxy and Backend. LiteAuth will establish the secure bridge automatically!

---

🎮 Commands & Permissions

Player Commands

Command	Aliases	Description
/register <pass> <repeat>	/reg	Register a new account
/login <password>	/log	Log in to an existing account
/changepassword <curr> <new> <repeat>	/changepass	Change account password (works network-wide)
/premium <password> confirm	—	Convert account to official Mojang Premium mode
/cracked	—	Revert account back to cracked password authentication

Administrator Commands

Command	Permission	Description
/liteauth reload	liteauth.admin	Reload configuration, messages, and security policies
/liteauth version	liteauth.admin	Check plugin version and environment
/setauthspawn	liteauth.admin	Set the unauthenticated player spawn point
/forcelogin <player>	Console / liteauth.admin	Force-authenticate an online player
/forceunregister <player>	liteauth.admin	Delete and unregister a player account

---

💬 Placeholders & Customization

All messages in messages.yml and proxy-messages.yml support dynamic contextual placeholders:

• %player%: Player's username
• %min% / %max%: Password length limits
• %server% / %world%: Destination server or world name
• %attempt%: Current failed login attempt number
• %version%: LiteAuth plugin version

---

❌ Bukkit is not supported

Our plugin does not support Bukkit because of security But plugin supports: Folia, Spigot, Paper, Spigot Forks, Folia Forks, Paper Forks

📄 License & Credits

Developed with ❤️ by mehradmgm.
Licensed under the MIT License.