xAuth

Table of Contents

xAuth v2.6.x
Authentication plugin for bukkit powered servers

About

xAuth is a second-factor authentication plugin that can be used to secure player accounts on your server. As the plugin has been enhanced over time, the direction and main purpose have expanded to new possibilities. Let's say you run a community page. With xAuth, players can authenticate using their forum accounts or using a web-driven account management system. It is also possible to get the credentials from a foreign database.

Important Notice

Before upgrading please read xAuth Documentation (external link). I have added documenation to my Confluence instance that will be updated over time. Permissions Node changed! If you get "command is restricted" you most likely did not check the release log.

Further Instructions can be found there.

Concept

The basic idea of this protection plugin is allowing players to register an account based on their player name and a supplied password and optionally their email-address. When a registered player connects to the server, that player will be prompted to authenticate his or herself by logging in. If and only if a valid password is supplied, they will regain full control of their account until their session expires.

Permissions (READ ME)

This plugin has the ability to block almost any action (including command execution) for guests and registered xauth players. It also does not use negated permissions in order to not interfere with existing plugins. Permissions are "allowed" or "restricted".

Important-Note:
In order to restrict certain actions executed by registered xauth players you need to restrict them since xauth players are trusted. This is different from guests since the default for guests is always "restrict" if not set since a guest is an unknown state. Guest nodes can also only be set via configuration and have the last say even if you might have the right to execute any command.

Please keep in mind in order to block admin commands you need to restrict them via xauth.restrict.player.command.xauth.* or add each command to a group.

This might be confusing at first but has its cons since you always can see if a permission is restricted or allowed via permission node and not via bullet point. More details can be found on page Permission-System

Features

Before registering/logging in, players can't:
- Chat, execute commands, interact with objects (like levers or chests), move or pickup items
- Break or place blocks
- Receive or give damage, be targeted (followed) by hostile mobs
Inventory and location protection
Command TabCompletion including Configuration Node Browser!
In-depth setting and message configuration
Persistent login session through server restarts
Player name filter and password complexity configuration
Kick non-logged in (but registered) players after a configureable amount of time
Fine graded Permission System that also allows you to block interactions or commands
Permissions support (PermissionsEx, Bukkit, GroupManager)
Kick or temporarily lockout the IP address of a player who fials to log in after a configureable amount of tries
Custom, highly secure password hashing
Authenticate yourself with /login <password>
H2 / mySQL Database storage supported
Authentication over URL (AuthURL) allows for connection to forum or website databases
Auto-Updater (thanks to Gravity)

News

Checkout the News & Upcoming-Changes page for details.

Wiki

The Wiki is located on github.
Please visit the Github Project-Page and click on Wiki

Credits

All credits goes to CypherX from bukkit forums who created this plugin. Thanks for your work and long time support!

The old bukkit-thread can be found here

Contact

If you need help regarding the plugin please use the Issue Link in the navigation bar or contact me via private message.

Comments

_ForgeUser9686855
- Join Date: 9/25/2012
- Posts: 200
- Member Details
#142 _ForgeUser9686855

View User Profile

Send Message

Posted Oct 6, 2014
@luricos

Hello, is this plugin totaly working ? Is it clean ? Because AuthmeReloaded is VERY bad :( I used it for 2 years but each month there are unexpectable big bugs ...
So xAuth is efficient or I have to reconfigure it each month ?

Last edited by _ForgeUser9686855: Oct 6, 2014

Rollback Post to Revision RollBack
_ForgeUser9297499
- Join Date: 7/27/2012
- Posts: 3
- Member Details
#141 _ForgeUser9297499

View User Profile

Send Message

Posted Oct 5, 2014
Been geting some bad lag on the onlogin with spigot http://timings.aikar.co/?url=8497985

Rollback Post to Revision RollBack
_ForgeUser12768479
- Join Date: 12/7/2013
- Posts: 6
- Member Details
#140 _ForgeUser12768479

View User Profile

Send Message

Posted Aug 27, 2014
Please push out an update, that fixes this weird error with the unsafe enchantments. They all get cleared (books, coloured items, ...) and if you have showInventory on true, people can not login while having items like those in their inventory. This never happened before. Please update! (Best without UUIDs)

Rollback Post to Revision RollBack
_ForgeUser8295270
- Join Date: 1/21/2012
- Posts: 66
- Member Details
#139 _ForgeUser8295270

View User Profile

Send Message

Posted Aug 24, 2014
@EDWIN3150

Use this http://www.spigotmc.org/resources/authmebridge-for-bungeecord.574/

Rollback Post to Revision RollBack
_ForgeUser10327829
- Join Date: 1/4/2013
- Posts: 38
- Member Details
#138 _ForgeUser10327829

View User Profile

Send Message

Posted Jul 27, 2014
oh god please tell me this isnt abandoned

Rollback Post to Revision RollBack
_ForgeUser11982203
- Join Date: 8/5/2013
- Posts: 156
- Member Details
#137 _ForgeUser11982203

View User Profile

Send Message

Posted Jul 3, 2014
if someone knows how to export authme reloaded db to xauth please let me know with a private message thanks.

Rollback Post to Revision RollBack
_ForgeUser15869183
- Join Date: 6/11/2014
- Posts: 9
- Member Details
#136 _ForgeUser15869183

View User Profile

Send Message

Posted Jul 1, 2014
Hi, can I change the colors of messages.yml to the formatting codes of minecraft?

Rollback Post to Revision RollBack
edwinhughesjr
- Join Date: 3/23/2014
- Posts: 36
- Member Details
#135 edwinhughesjr

View User Profile

Send Message

Posted Jun 13, 2014
Could you add a feature to xAuth where it blocks BungeeCord commands without being logged in because players without being logged in can still do /server

Rollback Post to Revision RollBack
_ForgeUser10015813
- Join Date: 11/21/2012
- Posts: 100
- Member Details
#134 _ForgeUser10015813

View User Profile

Send Message

Posted Jun 11, 2014
@luricos

How would I do it manually, if you mean by copying and pasting, it would take a very long time because it has a couple hundred accounts.

Rollback Post to Revision RollBack
LycanDev
- Location: Düsseldorf
- Join Date: 12/6/2007
- Posts: 148
- Member Details
#133 LycanDev

View User Profile

Send Message

Posted Jun 11, 2014
@omgitsbob12

Yes, sqlite and mysql are not that different from each other in syntax.

You would have to do this manually since xAuthImporter does not know the current database layout.

If this is not urgent i recommend giving me some time to fix this so you can convert it via xAuthImporter.

Rollback Post to Revision RollBack
LycanDev
- Location: Düsseldorf
- Join Date: 12/6/2007
- Posts: 148
- Member Details
#132 LycanDev

View User Profile

Send Message

Posted Jun 11, 2014
Shit happened again :/ My system-drive died at thursday last week. Since i could not get a replacement in time and monday (9th) was holiday i need to find one this week. As soon as i can install the replacement you get a build.

Current estimate is end of the week.

@iChillings

The current version is not compatible with the latest RB since there are too many changes. I will try to get a working version out as soon as possible.

Rollback Post to Revision RollBack

_ForgeUser15829748

Join Date: 6/8/2014
Posts: 4
Member Details

#131 Posted Jun 8, 2014

Dear plugin-owner(s),

I love your plugin! I'm an happy user for 3 years, but since a few days, I get this weird and annoying error in my console (users can't login, so, my offline server won't work):

[23:33:12] [Server thread/INFO]: iChillings issued server command: /login XXXmypasswordXXX
[23:33:12] [Server thread/ERROR]: null
org.bukkit.command.CommandException: Unhandled exception executing command 'login' in plugin xAuth v2.4.4
	at org.bukkit.command.PluginCommand.execute(PluginCommand.java:46) ~[spigot.jar:git-Spigot-1463]
	at org.bukkit.command.SimpleCommandMap.dispatch(SimpleCommandMap.java:180) ~[spigot.jar:git-Spigot-1463]
	at org.bukkit.craftbukkit.v1_7_R3.CraftServer.dispatchCommand(CraftServer.java:728) ~[spigot.jar:git-Spigot-1463]
	at net.minecraft.server.v1_7_R3.PlayerConnection.handleCommand(PlayerConnection.java:985) [spigot.jar:git-Spigot-1463]
	at net.minecraft.server.v1_7_R3.PlayerConnection.a(PlayerConnection.java:830) [spigot.jar:git-Spigot-1463]
	at net.minecraft.server.v1_7_R3.PacketPlayInChat.a(PacketPlayInChat.java:28) [spigot.jar:git-Spigot-1463]
	at net.minecraft.server.v1_7_R3.PacketPlayInChat.handle(PacketPlayInChat.java:65) [spigot.jar:git-Spigot-1463]
	at net.minecraft.server.v1_7_R3.NetworkManager.a(NetworkManager.java:180) [spigot.jar:git-Spigot-1463]
	at net.minecraft.server.v1_7_R3.ServerConnection.c(ServerConnection.java:81) [spigot.jar:git-Spigot-1463]
	at net.minecraft.server.v1_7_R3.MinecraftServer.v(MinecraftServer.java:713) [spigot.jar:git-Spigot-1463]
	at net.minecraft.server.v1_7_R3.DedicatedServer.v(DedicatedServer.java:283) [spigot.jar:git-Spigot-1463]
	at net.minecraft.server.v1_7_R3.MinecraftServer.u(MinecraftServer.java:576) [spigot.jar:git-Spigot-1463]
	at net.minecraft.server.v1_7_R3.MinecraftServer.run(MinecraftServer.java:482) [spigot.jar:git-Spigot-1463]
	at net.minecraft.server.v1_7_R3.ThreadServerApplication.run(SourceFile:628) [spigot.jar:git-Spigot-1463]
Caused by: java.lang.NullPointerException
	at de.luricos.bukkit.xAuth.PlayerDataHandler.buildItemStack(PlayerDataHandler.java:190) ~[?:?]
	at de.luricos.bukkit.xAuth.PlayerDataHandler.restoreData(PlayerDataHandler.java:269) ~[?:?]
	at de.luricos.bukkit.xAuth.PlayerManager.unprotect(PlayerManager.java:275) ~[?:?]
	at de.luricos.bukkit.xAuth.PlayerManager.doLogin(PlayerManager.java:561) ~[?:?]
	at de.luricos.bukkit.xAuth.commands.LoginCommand.onCommand(LoginCommand.java:65) ~[?:?]
	at org.bukkit.command.PluginCommand.execute(PluginCommand.java:44) ~[spigot.jar:git-Spigot-1463]
	... 13 more

I hope you can help me!

~~Sorry for my bad English, i'm Dutch.~~

Last edited by _ForgeUser15829748: Jun 8, 2014

_ForgeUser10015813
- Join Date: 11/21/2012
- Posts: 100
- Member Details
#130 _ForgeUser10015813

View User Profile

Send Message

Posted Jun 6, 2014
Is it possible to convert my sqlite file to a mysql database on my website?

Rollback Post to Revision RollBack
LycanDev
- Location: Düsseldorf
- Join Date: 12/6/2007
- Posts: 148
- Member Details
#129 LycanDev

View User Profile

Send Message

Posted Jun 6, 2014
Hi,

it has come to my attention that this plugin does not work for the latest RB. A new version should be ready next week (probably before thursday) since i have some free time then.

Rollback Post to Revision RollBack
_ForgeUser9999580
- Join Date: 11/18/2012
- Posts: 1
- Member Details
#128 _ForgeUser9999580

View User Profile

Send Message

Posted Jun 3, 2014
Hello,

I have the xauth accounts set I my database and on my website I have made a login form so the players can login with they xauth accounts but the password are hashing so they cant login with the passwords how can I fix this?

Sorry for my bad english

Rollback Post to Revision RollBack
_ForgeUser15726841
- Join Date: 6/2/2014
- Posts: 1
- Member Details
#127 _ForgeUser15726841

View User Profile

Send Message

Posted Jun 2, 2014
I'm currently working on a plugin which needs to know when player logs in. I tried using xAuthLoginEvent but there's no way to get player who logged in. Any ideas how should I do this?

https://github.com/WolfNetDevelopment/xAuth/blob/master/src/main/java/de/luricos/bukkit/xAuth/events/xAuthLoginEvent.java

Last edited by _ForgeUser15726841: Jun 2, 2014

Rollback Post to Revision RollBack
edwinhughesjr
- Join Date: 3/23/2014
- Posts: 36
- Member Details
#125 edwinhughesjr

View User Profile

Send Message

Posted May 10, 2014
Update please.

Rollback Post to Revision RollBack
_ForgeUser14877225
- Join Date: 5/7/2014
- Posts: 1
- Member Details
#124 _ForgeUser14877225

View User Profile

Send Message

Posted May 7, 2014
Hello to you I have a small problem with xauth plugin. When a player deco-reco books enchanted armor and renamed it has on him (in inventory) and lose enchantments and re-named. Someone you the solution?

Rollback Post to Revision RollBack
_ForgeUser7892921
- Join Date: 11/17/2011
- Posts: 46
- Member Details
#123 _ForgeUser7892921

View User Profile

Send Message

Posted May 2, 2014
Using 1.7.9 Dev build of bukkit and xauth seems to work just fine.

Anyone else having issues double-check your config, and/or your db for corrupted data.

Also you might have other plugins that interfere with xauth.

Rollback Post to Revision RollBack
Z609
- Location: New Jersey
- Join Date: 10/5/2016
- Posts: 221
- Member Details
#122 Z609

View User Profile

Send Message

Posted May 1, 2014
Is this available for use with Bungeecord?

Rollback Post to Revision RollBack
To post a comment, please login or register a new account.

Project ID

35934
Created

Jan 23, 2012
Last Released File

Mar 19, 2015
Total Downloads

611,270
License

GNU General Public License ver...

Bukkit

xAuth

Bukkit Plugins

xAuth

Table of Contents

About

Important Notice

Concept

Permissions (READ ME)

Features

News

Wiki

Credits

Contact

Comments

About This Project

Categories

Members

Recent Files

Bukkit