FAuthSec
FAuthSec
FAuthSec is a powerfull tool created to increase the security provided by the mojang's authentication system by forcing (or not) all your players to be authenticated using a second database, which may be your forum or site, it'll also hook basic features of your website like profile, online status and a few other things. What makes it different? It was designed to use external databases, dosen't matter how slow the connection between your server and the database is, your server will not freeze or lag on every login.
Pages: Permissions || Configuration || Scripts || Source
Features
- Highly Configurable
- Extremely lightweight
- Full threaded database
- Scripts for website integration.
- Disable player functions while unauthenticated
- Event and API system
- Real time queries, no cache.
- Protect the player inventory until login
- Change the login/logout messages
- more...
Permissions
Permission | Effect |
---|---|
FAuthSec.Command.Unregister.Other | Unregister other accounts |
FAuthSec.Command.Unregister | Unregister its own account |
FAuthSec.Command.Logout | Access to the /logout command |
FAuthSec.Command.Changepass | Change its own password |
FAuthSec.Command.Changepass.Others | Change other accounts password |
FAuthSec.Command.Register | Access to the /register command |
FAuthSec.Command.Login | Access to the /login command |
FAuthSec.Silenc | Do not show any login/logout messages |
Commands
- /register - Register a new account
- /login - Authenticate yourself
- /profile - Profile commands
- /logout -
- /unregister - Unregister an account
Supported Sites/Databases
Script | Type | Handle Passwords | Save Email | Track Last Login | Track Online Status | Track IP | Create Tables |
---|---|---|---|---|---|---|---|
default | basic | Y | Y | Y | N | Y | Y |
authme | basic | Y | Y | Y | N | N | Y |
xauth | basic | Y | Y | N | N | Y | Y |
xenforo | forum | Y | Y | Y | Y | Y | Y |
Want a new forum/site support? Create a ticket! For now only XenForo is supported.
Attention
This plugin is made to work with the mojang's authentication system, if you are running this in an offline server I'm not responsable for your security as nothing can be as secure as the mojang's authentication.
As for the 'hide inventory' feature, this will not change the player's real inventory in any way, it is a "visual bug" that makes the client inventory only appears as empty. It still being tested, sometimes the inventory will be revealed for no reason.
Know Bugs
- Let me know if you find any!
@euro1988
Try the latest CreativeControl (build #5) on my jenkins, the problem was with it. But the 'block place' bug still present, it appears to stay there for a few seconds and then you can place blocks again, I still not found why this happens, stick with this prevention disabled for now.
@euro1988
I will.
@FurmigaHumana
Using 1.1 already. It didn't fix it, but it fixed the bug which disabled CreativeControl.
Can you please fix it?
@euro1988
yes it does, v1.1 uploaded already, waiting for approval, should fix it :)
It causes bugs if you are using CreativeControl I think.
I have all the preventions set to true in AuthSec config except the broadcast one.
If you try to pull items from creative inventory you can't.
If you try to place blocks you can't.
But if I disable the Block Place prevention in AuthSec I can place blocks again.
All of my players are logged in when they try to place blocks and they still can't place them with that prevention.
@FurmigaHumana
Thanks. I'm waiting.
Sweet! Ill keep an eye on this.
@MegaFlary
you should be able to ignore this, I'll fix today.
You need to use MySQL to hook it up.
I cant use AuthMe script.
WoW, it looks pretty nice ;o