AstraLogin

AstraLogin v4.6.0-beta1 - Dual Premium Backend & Auto-Updater & API Update

BETA & EXPERIMENTAL RELEASE WARNING:

This is a pre-release testing build featuring experimental features such as an in-game auto-updater, new networking libraries, and the initial AstraLogin API. Please test in isolated sandbox environments before deploying to live networks!

---

Dual Premium AutoLogin Backends (PacketEvents & ProtocolLib)

PacketEvents Engine Integration: Added native support for PacketEvents* as an alternative networking backend for Premium AutoLogin processing! Extensively Tested (1.18 – 26.3):* Both PacketEvents and legacy ProtocolLib backends have been thoroughly verified across versions 1.18 up to modern 26.3 releases. Compatibility & Engine Warning:* Edge-case network flow exceptions might occur on legacy software (such as Spigot) or outdated protocol library builds. We strongly advise using up-to-date versions of Paper, Purpur, or Folia alongside the latest builds of PacketEvents or ProtocolLib! ---

Automatic Plugin JAR Auto-Updater

In-Game Updating Command (`/astralogin update`):* Administrators can now check for the latest releases on Modrinth and download the updated .jar binary directly into the server's update directory with a single command! The server engine will automatically apply the new version upon the next reboot. Experimental Status Notice:* The auto-updater is currently in an early testing phase. Minor discrepancies in version resolution or payload downloads may occur during this RC cycle—please report any issues on GitHub or Discord! ---

AstraLogin Developer API (Early Beta)

Initial API Release:* Introduced the foundation of the official AstraLogin API! Developers can now integrate AstraLogin into their custom plugins to check player authentication states: * Check if a player is registered. * Check if a player is currently logged in. Documentation & Setup Guide:* Detailed integration guidelines and repository declarations have been added to the official project README! API Roadmap:* More administrative methods, event hooks, and player state management tools will be added in upcoming builds. ---

Dynamic Version Checker & Notification Overhaul

Contextual Update Messaging:* Reworked version check evaluation logic! Update prompts now intelligently distinguish between release channels, patches, and major builds, providing clearer admin notifications. UI Refinements in Progress:* Version resolution messaging is being continuously refined to ensure transparent, concise alerts without chat clutter. --- Thank you for testing AstraLogin pre-releases! If you encounter any bugs, API issues, or update errors, please report them on our Discord or GitHub.

AstraLogin v4.5.1 - Seasonal Events Update

Seasonal Events Engine & Spooky Atmosphere

Dynamic Seasonal Events Engine:* Introduced a flexible seasonal events framework! The plugin can now trigger special atmospheric event modes with customized messages, contextual alerts, and unique audio themes across the server. Halloween Event Theme: Debuting with full Halloween* support! During active event periods, players will experience spooky, eerie sound effects during various login/security actions alongside spooky, atmospheric system messages. Expandable Event Architecture:* Designed to seamlessly support future seasonal celebrations (such as Christmas, Easter, and other holidays) with custom themes and configurable audio-visual effects.

Technical Architecture & Code Maintenance

LoginListeners Class Refactoring:* Resolved technical debt by breaking down the massive monolithic LoginListeners class into smaller, modular event handlers. Each handler now manages its own specific logic thread independently, improving code readability, maintainability, and execution speed. Persistent Suspicious Activity Tracking:* Enhanced the security engine to write suspicious activity flags and threat history directly into the player's persistent account profile data instead of relying solely on transient runtime memory. Persistent records ensure long-term auditing and consistent admin alerts across server restarts. Persistent threat profiles survive system reboots for improved security tracking. --- Thank you for supporting AstraLogin! If you encounter any bugs or have feedback, please report them on our Discord or GitHub.

AstraLogin v4.5.0 - Data Storage Overhaul & Audio & Security Update

Complete Data Storage Architecture Overhaul

Unified Single-File Player Storage: We have eliminated file bloat! Instead of spreading player data across multiple folders and separate files, every single player now has one unified profile file*. This consolidated file safely encapsulates all essential player information in one place: * Hashed account passwords & recovery PINs * Saved inventory snapshots & equipment protection states * Teleportation & pre-login/post-login location records * Individual player settings & security flags Base64 Encoding & Footprint Minimization:* All unified player files are now encoded in Base64 format. This change drastically reduces overall disk space usage, prevents manual file corruption, speeds up read/write operations, and keeps your server folders completely clean. Centralized Global Data Repositories:* Global system records have been completely separated from individual player profiles. IP trust reputation scores, global account mappings, active login sessions, and player UUID resolution databases now live in optimized, dedicated global system files that load only essential data.

Security Enhancements & BCrypt Cost Adjustment

Increased Minimum BCrypt Cost: Raised the minimum allowed BCrypt cost limit from 8 to 10* to align with modern cryptographic security standards and protect player hashes against high-speed brute-force attacks. Advanced Password Validation System:* Implemented a new password validation engine that automatically rejects passwords containing weird symbols or emojis to prevent exploit attempts and encoding crashes. The validation pattern is fully customizable via RegEx in config.yml. Preset Password Rules:* Includes built-in configurable validation rules to enforce stronger player password choices (e.g., blocking passwords made entirely of letters or entirely of numbers).

Interactive Audio Feedback & Custom Sound Effects

Configurable Sound Triggers:* Added native sound effect triggers for key plugin actions! Players now receive distinct audio feedback for actions like successful logins, failed password entries, account registrations, session restores, and password resets. Fully Customizable:* Sound effects, pitch, and volume parameters can be fully fine-tuned or disabled directly inside config.yml.

Compatibility Fixes & Multilingual Support

AsyncPlayerPreLoginEvent & LuckPerms Fix: Fixed a critical bug in the Premium Login flow where third-party plugins (such as LuckPerms*) threw internal errors when querying player data during pre-login. Premium auto-login now interacts seamlessly with permission systems. Expanded Native Translations:* Added official translation support for Spanish (es_ES) and German (de_DE) alongside English and Polish! Folia Engine Compatibility:* Continued optimizations for multithreaded Folia servers, including tested regional player joins, teleportation tasks, and Premium Login flow. --- Thank you for supporting AstraLogin! If you encounter any bugs or have feedback, please report them on our Discord or GitHub.

AstraLogin v4.5.0-beta2 - Premium Fixes, Audio Feedback & Folia Progress Update

Critical Premium Login Fix

AsyncPlayerPreLoginEvent Compatibility: Fixed a major bug in the Premium Login flow where third-party plugins (such as LuckPerms*) threw internal errors when attempting to query player data during the pre-login sequence, ultimately denying player access. Premium auto-login now interacts seamlessly with permission systems and other event listeners.

Custom Sound Effects System

Configurable Audio Feedback:* Added native sound effect triggers for key plugin actions! Players now hear distinct audio cues for actions like successful logins, failed password attempts, successful registrations, session restores, and more. Fully Customizable:* Every sound, pitch, and volume setting can be fully customized or disabled directly inside config.yml.

Expanded Native Language Support

Spanish & German Translations:* Added native translation files for Spanish (es_ES) and German (de_DE)! Players and server administrators can now easily switch to these languages right out of the box.

Ongoing Folia Engine Support

Folia Engine Integration: Active development and compatibility testing for the multithreaded Folia* engine are underway! Tested Features:* Player join handling, teleportation logic, and the complete Premium Login flow have been thoroughly tested on Folia. Experimental Notice:* While core mechanics are working smoothly, minor thread-context exceptions may still occur in certain edge cases due to Folia's regionized tick model. We are actively refining regional scheduler tasks for upcoming builds! --- Thank you for testing AstraLogin pre-releases! If you encounter any issues or Folia edge-case bugs, please report them on our Discord or GitHub.

AstraLogin v4.5.0-beta1 - Data Storage Update

CRITICAL BETA & STORAGE WARNING:

THIS IS AN EXPERIMENTAL BETA RELEASE! DO NOT INSTALL THIS VERSION ON PUBLIC PRODUCTION SERVERS!

This update introduces a complete overhaul of the internal data architecture. Installing it on live servers may lead to data corruption, lost player states, or broken configurations. Use strictly in isolated test environments!

---

Complete Data Storage Architecture Overhaul

Unified Single-File Player Storage: We have eliminated file bloat! Instead of spreading player data across multiple folders and separate files, every single player now has one unified profile file*. This consolidated file safely encapsulates all essential player information in one place: * Hashed account passwords & recovery PINs * Saved inventory snapshots & equipment protection states * Teleportation & pre-login/post-login location records * Individual player settings & security flags Base64 Encoding & Footprint Minimization:* All unified player files are now encoded in Base64 format. This change drastically reduces overall disk space usage, prevents manual file corruption, speeds up read/write operations, and keeps your server folders completely clean. Centralized Global Data Repositories:* Global system records have been completely separated from individual player profiles. IP trust reputation scores, global account mappings, active login sessions, and player UUID resolution databases now live in optimized, dedicated global system files that load only essential data.

Advanced Password Validation & Security System

Customizable Regex & Symbol Filtering:* Implemented a new password validation engine that automatically rejects passwords containing weird symbols or emojis to prevent exploit attempts and encoding crashes. The validation pattern is fully customizable via RegEx in config.yml. Flexible Preset Restrictions:* Includes two built-in configurable validation rules out of the box to enforce stronger player password choices: Alphabet-Only Block:* Prevents players from creating passwords made entirely of letters. Digit-Only Block:* Prevents players from creating passwords made entirely of numbers. ---

Beta Testing Focus

When testing this BETA build in your dev environment, please focus on: 1. Converting existing player files from older AstraLogin versions to the new format. 2. Testing logins with Premium accounts to ensure their actual real online Mojang UUID is correctly stored in the database instead of an offline UUID. 3. Testing the password validator with various edge-case password inputs. --- Thank you for testing AstraLogin! Please report any bugs, errors, or data issues on our Discord or GitHub issue tracker.

AstraLogin v4.4.0 - FULL Premium Login & Argon2id & IPManager Update

Complete FULL Premium Login & Expanded Compatibility

Full Mojang Authentication Protocol: Full Premium Login is officially complete! The system now performs a full encryption handshake and session verification with Mojang's authentication servers, ensuring 100% legitimate authentication. Please note: This feature requires ProtocolLib* to be installed on your server. Extended Version Compatibility & Tested on 26.3: We have reworked the underlying packet handling logic. Premium login support now spans seamlessly from legacy versions (`1.18`) all the way to modern releases (`26.3`)! Full compatibility with version 26.3* has been actively tested. Due to NMS and internal protocol changes across various Minecraft releases, edge-case packet flow issues might still occur—please exercise caution when deploying on large production networks!

Argon2id Hashing Algorithm & Seamless Migration

Argon2id Hashing Support: Added native support for Argon2id*, one of the most secure and modern password hashing algorithms available today. You can fine-tune performance parameters directly in config.yml, including memory usage, iteration counts, and degree of parallelism. On-the-Fly Password Migration:* Upgrading from BCrypt to Argon2id requires zero database resets or player action! BCrypt remains fully supported. When a player logs in with an old BCrypt hash, AstraLogin verifies it using BCrypt and immediately re-hashes their password using Argon2id in real-time.

Advanced /ipmanager Command

Dynamic IP Bypass & Ban Management:* Introduced the /ipmanager administration suite, giving staff full control over player IP statuses. You can now easily grant IP bypasses for trusted users with dynamic or rotating IP addresses, preventing false positives in security checks. AstraLogin-Specific IP Unbanning: Allows administrators to inspect and unban IP addresses specifically locked by AstraLogin's internal brute-force protection. Note: /ipmanager strictly handles AstraLogin's internal security limits and does not interact with standard punishment plugins or native /ban-ip commands.*

Account Security Reminders & System Optimizations

Automated Security Prompts:* Implemented an automated notification task that periodically reminds players to strengthen their accounts. Prompts dynamically adapt to player settings—recommending 2FA setup or Recovery PIN creation if those features are currently disabled. Internal Code Base Cleanup & Performance Tweaks:* Comprehensive refactoring of event listeners, scheduler allocations, and language handling. Optimized memory usage during connection bursts and fixed minor edge-case exceptions reported during the RC testing phase. --- Thank you for using AstraLogin! If you encounter any issues or have suggestions, please report them on our Discord or GitHub.

AstraLogin v4.4.0-rc1 - FULL Premium Login & Argon2id & IPManager Update

Complete FULL Premium Login

Full Mojang Authentication: Full Premium login is now officially complete with full Mojang server authentication! Please note that this feature requires ProtocolLib* on your server. It is estimated to run most stably on Minecraft versions 1.21 - 26.2+ (version scope may vary depending on Mojang's NMS internal changes).

Argon2id Hashing & Smooth Migration

Argon2id Support:* Added the state-of-the-art Argon2id password hashing algorithm with fully customizable config parameters (memory, iterations, and parallelism). Seamless Hash Transitions:* BCrypt is still fully supported. If you switch from BCrypt to Argon2id, no database reset is needed! Passwords are verified with the old algorithm upon login and automatically re-hashed with Argon2id on the fly.

New /ipmanager Command

IP Management & Unbanning:* Added the /ipmanager command to manage IP bypasses and unban IPs specifically blocked by AstraLogin! You can grant IP bypasses for players with dynamic IP addresses. Note: This tool manages AstraLogin's IP system only and does not replace punishment plugins (it won't unban players from standard /ban commands).

Account Security Reminders

Security Tips:* Implemented an automated security reminder system that periodically prompts players to enhance their account protection by enabling 2FA or setting up a recovery PIN, based on enabled features. --- Thank you for using AstraLogin! If you encounter any issues or have suggestions, please report them on our Discord or GitHub.

AstraLogin v4.3.0 - PIN & Spigot Update

Spigot & Legacy Support

Spigot & Modded Support:* Restored support for standard Spigot server software, as well as Minecraft versions 1.18 through 1.19.3. The plugin now also runs great on the Arclight engine in modded environments! Smart Schedulers & MiniMessage:* Implemented an intelligent scheduler system that automatically activates the specific optimal scheduler available on the server's platform. Plus, the built-in MiniMessage library ensures full formatting support even on older Paper versions where it might be missing.

Full Premium Login (Experimental)

Full Premium Mode: Premium login development has been expanded! You can now select the `FULL` mode in the config and test it. Please note that this is an experimental feature, it may still contain bugs and will be patched in upcoming updates—we strongly recommend not* using the FULL mode on public production servers yet, use it for testing purposes only!

Recovery PIN System

PIN Recovery:* Added a brand new account recovery PIN system. Players can now set up a PIN to recover their forgotten password using the /forgotpass <PIN> command, or have a PIN automatically generated upon command execution depending on your configuration.

Config Converter & Fixes

Config Converter:* Added an automated configuration converter! Starting from this version, old settings will be officially migrated to the new format so you won't lose your custom configuration. Bug Fixes & Improvements:* Fixed a major issue where built-in plugin messages (such as startup logs) were locked in Polish regardless of the language configuration. Also corrected language file paths for certain messages introduced in the previous revolutionary update. --- Thank you for using AstraLogin! If you encounter any issues or have suggestions, please report them on our Discord or GitHub.

AstraLogin v4.2.0 - Premium & IP Trust Update

MINI Premium Auto Login

Premium Auto Login:* The plugin now detects players with a Premium account by querying the Mojang website. Note: This is not a full player session authentication system and requires IP Shield to be enabled in the config to prevent account theft.

IP Trust System

IP Trust System:* This is a unique IP reputation system that tracks suspicious player actions. If someone from a given IP starts spamming connections to the server or tries to hack and crack the password, their reputation will drop and over time, convenient functions such as login sessions or MINI Premium Login will be blocked on that specific IP.

Upgraded Update Checker

Update Checker:* Now Update Checker not only shows information about the new update but also divides it into separate messages about Major Minor and Patch, as well as pre-release and experimental versions.

Command /logout

New Command:* The /logout command kicks the player from the server and deletes their login session. It's a small command but it helps ensure that no one can access your account with an active login session.

Reworked language file format

Language files:* Language files have been reworked to a new, more readable format, instead of long message keys, they are now separated into sections, e.g. messages --> login --> success --- Thank you for using AstraLogin! If you encounter any issues or have suggestions, please report them on our Discord or GitHub.

Testing the new update check system, Mini Premium Login and IP Trust System

AstraLogin v4.1.1 - Hotfix spawn Update

Bug fixed

Fixed a critical bug:* Fixed a critical bug in the /loginspawn command where setspawn was performing the same logic as delspawn --- Thank you for using AstraLogin! If you encounter any issues or have suggestions, please report them on our Discord or GitHub.

AstraLogin v4.1.0 - Backup & Migration Update

Automatic Backups

Backups:* Automatic backups of AstraLogin files have been added. Now you don't have to worry about losing your configuration file, language files, or player data! The data is stored in a zip file in the backups folder. You can adjust the backup frequency and limit in the config.

Player data migration

Migration:* Using the command /moveaccount <player> you can move all AstraLogin player data from one nickname to another, e.g. Notch --> Herobrine

Commands Transfer

New command loginspawn:* Moved setspawn and delspawn from the main /astralogin command to /loginspawn

Language & Visual Improvements

Fixed:* Fixed a visual prefix issue when overwriting login spawns and improved default translations in language files

Improved navigation

Navigation:* Added hints to the register, login and changepassword commands, e.g. <password> and <repeat> --- Thank you for using AstraLogin! If you encounter any issues or have suggestions, please report them on our Discord or GitHub.

AstraLogin v4.0.1 - Hotfix Prelogin Update

Bug fixed

Fixed a critical bug:* Fixed a critical bug in the AsyncPreLoginEvent event where when someone tried to log into an active player account, an error occurred in the console, which resulted in canceling further execution of the event, which would threaten the safety of the players' accounts --- Thank you for using AstraLogin! If you encounter any issues or have suggestions, please report them on our Discord or GitHub.

AstraLogin v4.0.0 - 2FA Protection & Management system Update

Adding Two-Factor Authentication And New manage command (2FA)

New `/2fa` Command:* Using this command you can verify yourself and set up and remove 2FA. New `/reset2fa` Command:* Using this command you can remove someone's 2FA, e.g. if you know that he is a real player and he lost the app with the codes and has no backup codes New `/accountslist` Command:* Helps manage the server and lists all registered players with AstraLogin

Sessions

2FA Sessions:* A separate session system has been added for 2FA, now if the player has entered the code, they will not have to enter it for the next time specified in the config! --- Thank you for using AstraLogin! If you encounter any issues or have suggestions, please report them on our Discord or GitHub.

AstraLogin v3.3.0 - Account Management & Adventure API Update

This update introduces a brand new account and IP tracking system for server administrators, along with a complete migration to the modern Adventure API for ultimate message customization.

Advanced Account Management & Anti-Alt Tools

New `/account <player>` Command:* Added a comprehensive account statistics system. Administrators can now instantly check a player's IP address, registration date, last login date, and unique UUID. This system will be further expanded in upcoming updates! New /resetaccount <player> Command:* Command: Added a dedicated command for full account data removal. This wipes all stored player data related to AstraLogin, including the hashed password, recorded IP addresses, temporary inventory caches, and saved locations. New `/iplist` Command:* A powerful new monitoring tool that scans the database and lists all registered IP addresses along with every player account associated with them. Perfect for quickly detecting, tracking, and monitoring multi-account (alt) creation attempts!

Modern Text Formatting & Adventure API

Full Adventure API Integration:* The plugin has completely transitioned to Paper's modern Adventure API. You can now use advanced text formatting in your language files, including modern MiniMessage tags (e.g., <red>, <gradient>, <rainbow>) and full HEX color codes!

Code Cleanup & Performance

Code Optimization:* Removed old legacy methods, completely cleared internal developer warnings, and optimized database/file queries for even better server performance and lower resource usage. --- Thank you for using AstraLogin! If you encounter any issues or have suggestions, please report them on our Discord or GitHub.

AstraLogin v3.2.0 - The Security & Files Update

This update introduces an advanced event logging system, customizable visual elements, and a completely revamped config/language updater that automatically keeps your files clean.

Enhanced Security & Protection

Security Event Logging:* Added a dedicated logging system that records critical security events into separate .log files. This heavily assists in detecting and tracking unauthorized login or brute-force attempts (can be disabled in config.yml). IP Octet Verification:* Added a new option to configure IP checking from 1 to 4 octets (4 being full verification). This features works seamlessly across all security modules, including anti-alt and connection spam protection. GameMode Cache Protection:* The inventory protection system now saves and restores the player's GameMode upon login. Added new config options to toggle the entire inventory protection or just the GameMode saving feature.

Files & Configuration Management

Smart Configuration Updater:* Rewritten file updater that now automatically purges outdated messages and removed configuration sections if they no longer exist in the default plugin files, keeping your directory perfectly clean. Reorganized Configuration:* Highly expanded and reorganized config.yml into much clearer and well-segregated sections for significantly better readability and easier customization.

Visual & Cosmetic Additions

Customizable Login Timer BossBar:* You can now display a customizable BossBar for the login countdown. Easily adjust its color and style in the config, or disable it completely to stick with the classic ActionBar display. --- Thank you for using AstraLogin! If you encounter any issues or have suggestions, please report them on our Discord or GitHub.

AstraLogin v3.1.0 - The Paper Revolution Update

This version brings a massive architectural shift and significant security enhancements. Please read the "Critical Change" section before updating.

CRITICAL CHANGE: Paper API Transition

Official Drop of Spigot Support: AstraLogin has been fully refactored to utilize the Paper API. Starting from v3.1.0, the plugin requires Paper or its forks* (Purpur, etc.) to run. Asynchronous Processing: Implemented asynchronous schedulers for Bcrypt hashing* and other heavy tasks. This ensures maximum server performance and prevents main-thread lag during logins.

Enhanced Security & Anti-Brute Force

Advanced Margin System:* Added a configurable error margin in config.yml. * If margin: 0, the player is banned immediately after exceeding limits. * If margin > 0, the player will be kicked for the specified number of additional attempts before receiving a final ban. Experimental Entry Spam Protection:* New protection against connection spam. Default:* 10 connection attempts per 60 seconds per IP. RAM-Based Ban System: For maximum efficiency, temporary IP bans are stored in RAM*. AstraLogin is designed for rapid account protection and threat mitigation, not as a permanent punishment/ban management system. * Exceeding limits results in a temporary IP ban (default 15m). Event Optimization:* Blocking events (movement, chat, etc.) have been optimized to meet modern performance standards.

Sessions & Data Management

New Session Storage:* Sessions are now persistently stored in a dedicated session_data.yml file within the plugin folder. Code Refactoring:* Major internal code cleanup and optimization for better stability.

Language & Localization Improvements

Refurbished Language Files:* Both English and Polish files have been reorganized into clear sections for easier editing. Automatic Updates:* Improved the language system to support automatic updates for the en.yml file. Improved Readability:* Better formatting within localization files makes it easier for server owners to customize messages. --- Thank you for using AstraLogin! If you encounter any issues with the new Paper-specific features, please report them on our Discord or GitHub.

AstraLogin UPDATE: CRITICAL ERROR HOTFIX - v3.0.1

New Features & Improvements: Bug fix – Fixed a bug in the OnEnable section in the manager creation order that caused the plugin to crash and shut down when trying to update the config

AstraLogin UPDATE: Language Support - v3.0.0

New Features & Improvements: Added Multi-language Support - The plugin has pre-translated messages into Polish and English. Players can add their own translations by creating a language file in the languages folder, e.g. "ru.yml". You need to paste all message lines from another language file there, translate them, and then change the language setting in the config to match your filename. Fixed IP Protection and New Additions – Fixed IP protection and added a new login rate-limiter. If a player tries to log into the server X times within Y minutes, they will receive a temporary IP ban for a set time (default: 10 minutes, fully customizable). Internal Class Upgrade (NoticeManager) – All built-in messages have been moved to a separate, dedicated "NoticeManager" class for better organization and performance. Fixed Translations – Fixed some message translation issues in the IP reset section. Improved Config Readability – Added more readable sections and comments in the configuration file.

AstraLogin UPDATE Player Location Protection - v2.3.0

New Features & Improvements: Location Protection before logging in - In this version, player location protection has been introduced to prevent viewing of coordinates, e.g. bases or other hidden places of the player. In the config you can adjust whether you want the player to be teleported to his last location after logging in or to spawn after login. New spawn commands – Added new command /astralogin setspawn and delspawn which allows you to set or remove spawn before login "before_login" and spawn after login "after_login" NOTE: IF YOU SET "teleport-to-last-location" TO TRUE IN CONFIG THEN "After Login" WILL NOT WORK! Session time extended – In config now you can adjust seconds minutes and hours for session time example: session-time: "5 seconds/minutes/hours" Fixed IP protection – Fixed IP protection which had stopped working completely due to my negligence, for which I am very sorry

AstraLogin UPDATE Equipment Protection - v2.2.0

New Features & Improvements: Player Equipment Protection - Player Inventory Protection has been introduced. From now on, when a player joins, his inventory is empty, which prevents viewing his items. After logging in, the player recovers them. All player inventories are saved in the inventory_storage.yml file in the playerdata folder. Transfer of locks – Moved the non-logged-in locks to a different class to clean up the plugin (Technical Information) Information about the trial version – If you receive a version that is not yet released on the website, e.g. a test version, you will be informed in the server console Bug fix – The error regarding the limit of incorrect login attempts has been fixed.

AstraLogin UPDATE PROTECTION - v2.1.0 -

New Features & Improvements: **PASSWORD RESET REQUIRED!** New hashing algorithm - The algorithm has been changed from SHA-256 to BCrypt, from now on the old passwords will not work, to fix this, completely delete the passwords.yml file in the plugin files and allow players to register again Password masking – An option to mask the password to the logger has been added. From now on, you can set in the config whether you want to completely delete the log with the password or only mask the password with asterisks Expanding anti-multi-account protection – The option of limiting IP addresses per account has been added to the config, so you can now set an IP limit of your choice so that several accounts with the same IP can use the server, or completely disable multi-account protection. Small prefix color fix – From now on, the plugin's main HEX prefix has been changed to blue from red and a separate prefix with the default Minecraft colors has been added for console messages Protecting players console passwords – Now passwords are not loaded in the console when the player logs in. Logs are blocked using the "Log4j" logger. Currently, this cannot be disabled for password security reasons, but in the next versions of the plugin it will be possible to mask the password or completely remove the log.

AstraLogin BIG UPDATE - v2.0.0 -

**--------------------------------------------------------------------------** UNSTABLE VERSION DO NOT DOWNLOAD THIS VERSION. This version (2.0.0) is Unstable, contains serious security bugs and is unstable. Please download the latest release for the best experience, new features **--------------------------------------------------------------------------** New Features & Improvements: Support - Added support for Java 17, from now on the plugin will work from version 1.18+ Session System – From now on, you don't have to log in every time you have a power outage. You can just come back and keep playing! You can configure it your way in the config! Orderly file structure – From now on, the file with players' passwords and IP is not loosely located in the plugin folder but in the "playerdata" folder! New blocks for those not logged in – First of all, the lock for opening the inventory, eating, moving items, and not detecting the player as a target for mobs was added Protecting players console passwords – Now passwords are not loaded in the console when the player logs in. Logs are blocked using the "Log4j" logger. Currently, this cannot be disabled for password security reasons, but in the next versions of the plugin it will be possible to mask the password or completely remove the log. New extended config – Now the config has been extended with many more options such as disabling login time, limiting incorrect password attempts, multi-accounts, etc. Check it out for yourself! Protection against multi-accounts – Added protection against multi-accounts by checking the player's IP. If a player tries to join from the same IP that is already registered in the database but with a different nickname, he will be rejected.

AstraLogin Update v1.2.0

New Features & Improvements: New Command: /changepassword – Players can now securely change their passwords ingame. Update Checker – Added an automatic notification system that checks for new versions on Modrinth and provides a direct download link in the console. Auto-Config Updater – The plugin now automatically adds missing keys to your existing config.yml during updates. (Note: New keys may appear at the bottom of the file; for a clean layout, you can regenerate the file). Security Enhancement – The Blindness effect during the login process is now persistent until the user successfully authenticates. Code Optimization – Major internal cleanup and performance improvements for a faster and more stable experience.

AstraLogin Update v1.1.0

IP Protection System

IP Lock Feature:* Added a security layer that prevents users from logging in from unauthorized IP addresses. New Database:* Introduced ips.yml to store and manage player IP data separately for better performance. Admin Command:* Added /resetip <player> to clear IP locks for specific users.

Configuration & Updates

Auto-Updater:* Added a function to the config.yml that automatically adds new lines/features when the plugin is updated. Message Overhaul:* Improved and cleaned up all default messages in the configuration file for better readability.

Technical Fixes

Code Optimization:* Improved data handling to ensure smooth performance on all hosting providers. Bug Fixes:* Fixed color formatting issues in administrative commands.

**--------------------------------------------------------------------------** OUTDATED VERSION DO NOT DOWNLOAD THIS VERSION. This version (1.0.0) is outdated, contains bugs, and lacks critical security features. Please download the latest release for the best experience, new features **--------------------------------------------------------------------------** The first BETA version of AstraLogin is here! Here is what we have prepared: - Password Security: Full hashing using the SHA-256 algorithm (passwords are never stored in plain text). - YAML Database: All accounts are securely stored in a dedicated data file. - Extensive Config: Fully customizable messages and settings (time limits, password length, login attempts). - Admin System: Added a command for administrators to reset player passwords. - Session Protection: Prevents players with the same nickname from joining and features a brute-force protection system. - Dynamic Config-Updater: The plugin automatically ensures the configuration file is up to date.