LoginSecurity

In preparation for the next breaking-change release, the updater has been changed to take supported MC versions into consideration seeing as I plan to drop support for MC 1.8-1.17 in the next major version. People on older versions of MC can continue to use the v3 versions. Changelog · Updated translations · Upgraded to new update checker system · Fix wrong message being shown when register confirmation is enabled (#327) · Fix error on login for unregistered players when inventory hiding is used (#323)

A special thanks to recent community contributions from voidpointer0x00 and Deauthorized. Changelog · Updated translations · Fixed log leak when using command shortcuts (thanks @voidpointer0x00) · Fixed session continuation not working when BungeeCord ip-forwarding is enabled · Fixed intermittent error during login timeout [Downloads]

This update contains quite a lot of fixes and improvements. It has been sitting as a dev build for a few months now with no reported issues so I am uploading it as a stable version. The api-version has been set to 1.13, but 1.8-1.20.1 should be fully supported. Although support for old MC versions (<1.16) may be dropped in version 4.0. Changelog · Fixed bug where unauthenticated players can move inventory items (thanks @Deauthorized) · Removed unused legacy hide-inventory options · Fixed bug in session module that occasionally causes players to be disconnected unjustly · Reduce TPS impact on paper servers by utilizing async teleportation (graceful fallback available for spigot servers) · Set API version to 1.13. This makes the plugin not show up as legacy on 1.13+ servers (1.8 is still supported, for now.) CI Build: #113

Changelog: · Added mechanism to detect supported MySQL driver. this should support versions 1.8 through 1.19, both of which I have tested CI: https://ci.codemc.io/job/lenis0012/job/LoginSecurity/75/

Changelog: · Added new inventory hiding mechanism using ProtocolLib that is safer and more reliable · Added a command to reload the configuration (/lac reload) · Updated translations CI: https://ci.codemc.io/job/lenis0012/job/LoginSecurity/66/

Changelog: · Made translations available offline to prevent defaulting to en_us language · Updated console filter for login commands on 1.15+ · Don't teleport dead players to spawn · Updated or added translations for es_ar, es_cl, et_ee, fr_fr, hr_hr, it_it, ko_kr, lt_ltu, ru_ru, sv_fi, vi_vn and zh_cn · Fixed #175 Error when login time is missing for players · Fixed #147 Error when setting timeout to -1 CI: https://ci.codemc.io/job/lenis0012/job/LoginSecurity/56/

Changelog: · Added missing translation for exact username matching · Fixed console error when player is disconnected during login The fan-translation are outdated, if you see english messages while using a non-english language, it is because some translations are missing. Please visit the translation wiki mentioned on the Overview page to update the translations for your language. Thanks to swordin for reporting these bugs.

This is considered to be a BETA version. it has been tested but not on large servers. Therefore, a backup is automatically created upon upgrading (mysql users will have to manually create one) New features · /unregister command · /lac changepass command · Password confirmation on /register · Import profiles to/from mysql · New internal database system, using the same file format · Migrated from mcstats to bstats for statistics · Internal changes: better performance, higher TPS · 20x smaller download Removed features · Removed AutoIn support · Removed all hashing algorithms except BCrypt (default) · Removed ebeanORM database system Fixed bugs/errors · Block opening inventories while not logged in · Force users to use the same case-sensitive name every time · Fixed console error when using NPC plugins like FakePlayers · Fixed bug where some console messages are unintentionally being hidden · Changed updater message format · Improved event handling · More small bugs and errors Credits Thanks to the following people for making this update possible · MagnusAsimov for fixing the console message bug · swordin, Tzzzt123 and more for giving feedback and reporting bugs · CodeMC team for providing a new buildserver for in-development versions · All users of LoginSecurity · You

· Updated and tested for 1.14 · Fixed captcha issue on 1.8-1.11 · Fixed /lac help formatting Currently working on a bigger update (2.2). In the mean time, here is a bugfix update. Thanks for using LoginSecurity, please let me know if you encounter bugs or have feature requests.

This is another re-upload of version 2.1.8 Version 2.1.9 will be out soon

The download URL from v2.1.7b was incorrect and pointed to a version of 2.1.6. I have resolved this, my apologies.

Yesterday, I relocated the LoginSecurity buildserver, this update corrects the download link to point to the correct file. There are no further changes in this update. version 2.2.0 is nearing completion, and it's a pretty major update.

This release contains a hotfix for 1.12 support. The jar size increased quite significantly because of spigot's decision to remove one of LoginSecurity's dependencies. In order to achieve a small file size, a reworked version (2.2.0) is in the makings, but as for now, this update will suffice.

This isn't really an update, but i moved my build server to a new machine, the old one is going down in a few days, thus the download URL has changed.

· Compiled for 1.11 · Fixed issue when interacting with NPC's/invisible players Jenkins build: #29

· Fixed losing inventory issue when MySQL is enabled · Fixed "harmless" error upon login · Fixed migration from versions 2.0-2.0.8 Build number: #26 Build server: http://ci.lenis0012.com/job/LoginSecurity 2/

· Fixed error on /lac help · Updated english language (fixed typo's) · Fixed /lac rmpass · Fixed issues with NPC plugins · Removed debug code · Improved player retrieval by name · Possibly fixed inventory related issues (needs confirmation) Please note that /lac rmpass still might not work if the player has not logged in since this update. Build number: #19 Build server: http://ci.lenis0012.com/job/LoginSecurity 2/

· Added translation support · Fixed rmpass command · Added maven repository · Side note: New jenkins url Jenkins build: #6 Build Server: http://ci.lenis0012.com/job/LoginSecurity 2/

· Added admin removepass command (rmpass) · Fixed mysql issues · Fixed login issues related to location & hide-inventory Jenkins build: #105 http://ci.lenis0012.com/job/LoginSecurity/

· Fixed inventory clearing on join · Fixed registering not working when optional · Improved performance Jenkins build: #95 This is the first "stable" build of 2.1.X If you have not yet updated from 2.0, please so so right now, there are many important security patches that you absolutely must have!

· Rewritten entirely · New action-based authentication system · Register captcha · Resetting inventory · Fixed multiple security issues · AuthMe support · AutoIn support · New hashing support for: Scrypt, SHA3_256, Whirlpool, PBKDF2 · New Developer "API"

· Fixed authList error on startup · Add config option for update channel Build Server: http://ci.lenis0012.com/job/LoginSecurity/ Build numer: #30

· Fixed security flaw

· Fixed admin command (/lac) · Fixed console filter · Fixed duplicate login/register reminder

· 1.9 support