MaxAuth ( !BETA! )

This update improves Floodgate/Geyser Bedrock compatibility, especially for servers using linked Bedrock-Java accounts. Changes · Added new nested Floodgate configuration: Code (YAML): floodgateSupport: enabled : false useApiVerification : true · Added backwards compatibility for the old floodgateSupport: true/false option. · Restored JPremium-style Floodgate handling, so Floodgate Bedrock players are handled before Mojang premium detection. · Added optional Floodgate API detection for more accurate Bedrock detection, including linked accounts. · Prevented MaxAuth from incorrectly treating linked Bedrock players as Java premium players. · Improved Velocity GameProfile handling for Floodgate players. · Updated documentation and example configuration. Recommended config for Floodgate/Geyser servers: Code (YAML): floodgateSupport: enabled : true useApiVerification : true If Floodgate API is not available, MaxAuth will fall back to basic Floodgate UUID/offline-mode detection. Just replace old: Code (YAML): floodgateSupport : true with new one: Code (YAML): floodgateSupport: enabled : true useApiVerification : true

This update adds expanded password hash compatibility and migration support. Recommended for new passwords: · ARGON2ID · BCRYPT Other configurable algorithms: · PBKDF2_SHA256 · PBKDF2_SHA512 · SALTEDSHA512 · SHA256 - MaxAuth salted SHA-256 same like JPremium SHA256 · SHA512 - MaxAuth salted SHA-512 same like JPremium SHA512 Migration-only hashes accepted from the database: · SALTEDSHA256 · DOUBLE_SHA512 · AUTHME_SHA256 · AUTHME_SHA · PBKDF2 · CSHA256 - classic unsalted SHA-256 · CSHA512 - classic unsalted SHA-512 · MD5VB · IPB3 · IPB4 · JOOMLA · MYBB · PHPBB · PHPFUSION · SMF · WBB3 · WBB4 · XFBCRYPT · ROYALAUTH · MD5 · SHA1 · DOUBLE_MD5 · DOUBLE_SHA1 · BCRYPT2Y When rehashPasswordWhenUsingDifferentAlgorithm is enabled, passwords using legacy or different algorithms are automatically upgraded after successful login. New password configuration: Code (YAML): #+------------------------------------------------------------------------------------------------------+ #| PASSWORDS | #+------------------------------------------------------------------------------------------------------+ # Password hashing algorithm for new cracked-player passwords. # Recommended values: ARGON2ID, BCRYPT. # Other configurable values: PBKDF2_SHA256, PBKDF2_SHA512, SALTEDSHA512, SHA256, SHA512. # SHA256 and SHA512 are MaxAuth salted hashes. Classic unsalted SHA hashes are migration-only as CSHA256 and CSHA512. passwordHashingAlgorithm : ARGON2ID # Re-hash a password on login when it uses a different algorithm than configured above. # Useful when migrating from legacy algorithms to ARGON2ID or BCRYPT. # Migration-only hashes accepted from the database include: # SALTEDSHA256, DOUBLE_SHA512, AUTHME_SHA256, AUTHME_SHA, PBKDF2, CSHA256, CSHA512, # MD5VB, IPB3, IPB4, JOOMLA, MYBB, PHPBB, PHPFUSION, SMF, WBB3, WBB4, XFBCRYPT, # ROYALAUTH, MD5, SHA1, DOUBLE_MD5, DOUBLE_SHA1, BCRYPT2Y. rehashPasswordWhenUsingDifferentAlgorithm : true # Regular expression that cracked-player passwords must match. # Default: 6-25 non-whitespace characters. safePasswordPattern : ' [\S ] {6,25 }' Note: Legacy hash support is intended for migration only. For new installations, ARGON2ID or BCRYPT is recommended.

Fixed compatibility issues with newer Paper builds, including Paper 1.21.11 plugin remapping. Changes: · Fixed Paper remapper crash. · Fixed bStats initialization warning Recommended update for all servers, especially Paper 1.21.11 and newer.