[1.21.*] ✅ EzAuth ✅ Login - 2FA - Email verification - Link

• Perfect for single-server setups that don't need a database. Accounts are saved to disk and BCrypt keeps passwords safe.

# Use the lightweight YAML storage backend.
storage-type: yml
account-identifier: uuid
yaml-file: registrations.yml
integration:
  mode: none

# Stick with secure BCrypt hashing.
algorithm: bcrypt
bcrypt:
  rounds: 10

# Default login flow with optional particles disabled for quieter servers.
authentication-type: login
particles-enabled: false
sounds-enabled: false

• Stores players in EzAuth's MySQL schema while retaining the classic `/register` + `/login` experience.

storage-type: mysql
account-identifier: uuid
host: localhost
port: 3306
name: ezauth
username: ezauth
password: changeme
jdbc-parameters: useSSL=false&allowPublicKeyRetrieval=true&serverTimezone=UTC
integration:
  mode: none

algorithm: bcrypt
bcrypt:
  rounds: 12

authentication-type: login
session:
  timeout-minutes: 15
particles-enabled: true
sounds-enabled: true

• Pair EzAuth with another authentication plugin and only use it for `/2fa` management.

storage-type: mysql
account-identifier: uuid
host: localhost
port: 3306
name: ezauth
username: ezauth
password: changeme
jdbc-parameters: useSSL=false&allowPublicKeyRetrieval=true&serverTimezone=UTC
integration:
  mode: none

# Hashing is unused in standalone 2FA mode but keep defaults for compatibility.
algorithm: bcrypt
bcrypt:
  rounds: 10

authentication-type: two_factor
two-factor:
  standalone-mode: true
  enforce-on-join: true
session:
  timeout-minutes: 10

• Connect Minecraft logins to your existing WordPress site and sync optional two-factor status.

storage-type: mysql
account-identifier: username
host: localhost
port: 3306
name: wordpress
username: wp_user
password: supersecret
jdbc-parameters: useSSL=false&characterEncoding=UTF-8
integration:
  mode: wordpress
  wordpress:
    table-prefix: wp_
    users-table: wp_users
    user-meta-table: wp_usermeta
    username-column: user_login
    email-column: user_email
    password-column: user_pass
    uuid-meta-key: minecraft_uuid
    two-factor-secret-meta-key: ezauth_2fa_secret
    two-factor-confirmed-meta-key: ezauth_2fa_confirmed

algorithm: wordpress

authentication-type: login
two-factor:
  optional: true
locale:
  default-language: en_US

# EzAuth Storage Configuration
# Choose how player registrations are stored. Supported values are `yml` and `mysql`.
storage-type: yml

# Controls how player accounts are looked up. Supported values are `uuid` and `username`.
account-identifier: uuid

# Configuration for the YAML storage backend.
yaml-file: registrations.yml

# MySQL connection details (only used when storage-type is `mysql`).
host: localhost
port: 3306
name: ezauth
username: root
password: password
# Additional JDBC parameters appended to the JDBC URL.
jdbc-parameters: useSSL=false&allowPublicKeyRetrieval=true&serverTimezone=UTC
pool:
  maximum-pool-size: 10
  minimum-idle: 2
  connection-timeout: 30000
  idle-timeout: 600000
  max-lifetime: 1800000
  data-source-properties:
    cachePrepStmts: "true"
    prepStmtCacheSize: "250"
    prepStmtCacheSqlLimit: "2048"

# Integration options are only used when storage-type is `mysql`. Configure EzAuth to reuse
# existing authentication tables from popular web frameworks or set the mode to `none` to
# manage accounts with EzAuth's own schema.
integration:
  # Supported values: none, laravel, wordpress, xenforo
  mode: none
  laravel:
    table: users
    uuid-column: uuid
    username-column: name
    email-column: email
    password-column: password
    two-factor-secret-column: two_factor_secret
    two-factor-confirmed-column: two_factor_confirmed
    created-at-column: created_at
    updated-at-column: updated_at
    remember-token-column: remember_token
  wordpress:
    table-prefix: wp_
    users-table: wp_users
    user-meta-table: wp_usermeta
    username-column: user_login
    email-column: user_email
    password-column: user_pass
    created-at-column: user_registered
    uuid-meta-key: minecraft_uuid
    two-factor-secret-meta-key: ezauth_two_factor_secret
    two-factor-confirmed-meta-key: ezauth_two_factor_confirmed
  xenforo:
    table-prefix: xf_
    user-table: xf_user
    user-auth-table: xf_user_authenticate
    user-field-value-table: xf_user_field_value
    user-profile-table: xf_user_profile
    username-column: username
    email-column: email
    created-at-column: register_date
    uuid-field-id: minecraft_uuid
    two-factor-secret-field-id: ezauth_two_factor_secret
    two-factor-confirmed-field-id: ezauth_two_factor_confirmed

Schema::table('users', function (Blueprint $table) {
    $table->uuid('uuid')->unique()->after('id');
    $table->text('two_factor_secret')->nullable()->after('password');
    $table->boolean('two_factor_confirmed')->default(false)->after('two_factor_secret');
});

# EzAuth Hashing Configuration
# Configure the password hashing algorithm and its options.
# Supported algorithms: BCRYPT, SHA256, WORDPRESS_PHPASS
algorithm: BCRYPT
bcrypt:
  rounds: 10
sha256:
  pepper: ""

# EzAuth Security Configuration
# Configure registration, login, and two-factor authentication behaviour.
require-email-validation: true
min-password-length: 8
session-timeout-seconds: 300
login-enabled: true
register-enabled: true
bypass-enabled: true
login:
  cooldown:
    enabled: true
    stages:
      - attempts: 3
        cooldown-seconds: 10
      - attempts: 5
        cooldown-seconds: 60
two-factor:
  enabled: false
  issuer: EzAuth
  required-for-login: false
  # Optional messages sent to players after they successfully secure their account with 2FA.
  # Supports either a single string or a list of lines. Set to an empty list ([]) to disable.
  secure-account-welcome-message:
    - "%prefix%&aTwo-factor authentication is now enabled for your account, %player%!"
allowed-commands-while-unauthenticated:
  - login
  - register
  - 2fa
  - twofactor
visual-effects:
  enabled: true
  login:
    enabled: true
    particle: VILLAGER_HAPPY
    particle-count: 30
    particle-offset-x: 0.0
    particle-offset-y: 1.0
    particle-offset-z: 0.0
    particle-spread-x: 0.25
    particle-spread-y: 0.35
    particle-spread-z: 0.25
    sound: ENTITY_PLAYER_LEVELUP
    sound-volume: 1.0
    sound-pitch: 1.2
  register:
    enabled: true
    particle: FIREWORKS_SPARK
    particle-count: 50
    particle-offset-x: 0.0
    particle-offset-y: 1.0
    particle-offset-z: 0.0
    particle-spread-x: 0.4
    particle-spread-y: 0.6
    particle-spread-z: 0.4
    sound: UI_TOAST_CHALLENGE_COMPLETE
    sound-volume: 1.0
    sound-pitch: 1.0

# EzAuth Security Configuration (2FA-only mode)
# Disable password registration/login while keeping Two-Factor Authentication available as an opt-in layer.
# Also removes the bypass permission so every player must authenticate with 2FA once enrolled.
require-email-validation: false
min-password-length: 8
session-timeout-seconds: 0
login-enabled: false
register-enabled: false
bypass-enabled: false
login:
  cooldown:
    enabled: false
    stages: []
two-factor:
  enabled: true
  issuer: EzAuth
  required-for-login: false
  secure-account-welcome-message:
    - "%prefix%&aTwo-factor authentication is now enabled for your account, %player%!"
allowed-commands-while-unauthenticated:
  - 2fa
  - twofactor
visual-effects:
  enabled: false

# EzAuth Email Configuration
# Configure optional SMTP settings for outbound email integrations.
# Set enabled to true and provide the remaining settings to allow EzAuth to
# connect to your mail provider. Leave disabled to skip email setup entirely.
enabled: false
host: localhost
port: 587
username: ''
password: ''
use-tls: true
use-ssl: false
from-address: [email protected]
from-name: EzAuth
# Additional mail session properties may be configured below. For example:
# properties:
#   mail.debug: 'true'
properties: {}