Перейти к содержимому
Mineforgian

tiAuth

Authorization plugin for BungeeCord, Velocity

Загрузки
663
Подписчики
5
Обновлён
21 июня 2026 г.
Лицензия
All-Rights-Reserved

Опубликован 22 сентября 2025 г.

tiAuth

Authorization plugin for BungeeCord


Features:

  • Dialog window support (1.21.6+)
    • Interactive window with a password input field
  • Premium mode
    • Allows licensed players to skip password entry by activating local online-mode true
  • Session support
    • Allows players to skip password entry for a certain period after successful authentication
  • Multiple database types support
    • Supports SQLite, H2, MySQL, PostgreSQL
  • Virtual server
    • Virtual server for auth server powered by PicoLimbo

Commands:

For players:

  • /register <password> <password> - Register an account
  • /login <password> - Log in
  • /logout - Destory session
  • /changepassword <old password> <new password> - Change password
  • /premium - Enable premium mode
  • /unregister - Delete account

For administrators:

  • /tiauth reload - Reload config
    • Permission: tiauth.admin.commands.reload
  • /tiauth unregister <player> - Delete player account
    • Permission: tiauth.admin.commands.unregister
  • /tiauth changepassword <player> <password> - Change player password
    • Permission: tiauth.admin.commands.changepassword
  • /tiauth forcelogin <player> - Force login player
    • Permission: tiauth.admin.commands.forcelogin
  • /tiauth migrate <sourceplugin> <sourcedatabase> [file] [user] [password] [host] [port] [name] - Migrate database from other plugins/database type
    • Permission: tiauth.admin.commands.migrate

Migration

Supported Plugins

  • tiAuth (for changing the database type)
  • MCAuth
  • LimboAuth
  • AuthMe

Migration Commands

Below are the commands for the default database types used by these plugins.

If you are using a file-based database (SQLite or H2):

  • Place the database file into the plugin folder.
  • For H2, do not include the .mv.db extension in the filename.
  • If there is no username or password, set both user and password to empty.

MCAuth SQLite

/tiauth migrate mcauth sqlite auth.db

LimboAuth H2

/tiauth migrate limboauth h2 limboauth-v2 empty empty

AuthMe SQLite

/tiauth migrate authme sqlite authme.db

Important — LimboAuth H2 Migration

Before migrating from LimboAuth H2 (which uses H2 as its default database):

  1. Open your config.yml.
  2. Change the version value under libraries.h-2 to 2.1.214.
  3. Delete the tiAuth database file (if you are using H2 — it’s the default).
  4. Restart your server.

This is required because LimboAuth uses an outdated version of H2 that is incompatible with the newer version used by tiAuth by default.
If you skip these steps, the plugin will throw an error during migration.


Virtual server forwarding setup (required for proper player redirection):

  1. In the plugin configuration, set servers.use-virtual-server: true and restart the server.
  2. Navigate to the virtual server configuration file: /plugins/tiAuth/picolimbo/config.toml.
  3. In the [forwarding] section, select your preferred method:
    • MODERN — for Velocity or any proxy supporting Modern forwarding. Enter your key in the secret field.
    • BUNGEE_GUARD — for BungeeGuard. Add a tokens field as an array, for example: tokens = ["123", "456", "789"].
    • LEGACY — for legacy forwarding.
  4. Restart the server.

Additional configuration: To disable the use of schematics, set schematic_file = "" in the [world.experimental] section. If you wish to use your own schematic, provide the file path (note: the file may need to be converted; check the PicoLimbo documentation for more details).

Full documentation for PicoLimbo configuration


Support

Discord Server
Telegram

Ченджлог

1.4.0Релиз26.1.1, 26.1.2, 26.2 · 21 июня 2026 г.

We have decided to replace the NanoLimbo virtual server with PicoLimbo. This change provides the following advantages:

  1. Lower server resource consumption.
  2. Support for schematics.

Changelog:

  1. Added 1.26.2 support for the virtual server.
  2. Added TOTP two-factor authentication (Google Authenticator).
  3. Added Argon2 hashing algorithm.
  4. Added plugin update checker.
  5. Fixed a potential issue with SHA256 hashing.
  6. Fixed a potential Path Traversal vulnerability.
1.3.6Релиз26.1, 26.1.1, 26.1.2 · 31 мая 2026 г.
  1. The /premium command now requires the tiauth.player.premium permission
  2. Added the ability to disable password confirmation during registration
  3. Fixed a bug that caused the process to freeze when using /unregister
1.3.5Релиз1.21.11, 26.1, 26.1.1 · 5 апреля 2026 г.
  1. Added compatibility with standard SHA256 (not AuthMe)
  2. Fixed a bug that caused the player to be redirected to the backend server on Velocity
1.3.4Релиз1.21.11, 26.1, 26.1.1 · 4 апреля 2026 г.
  1. Added support for version 26.1 of the virtual server
  2. Added display of the title after authorization
1.3.3-HOTFIXРелиз1.21.9, 1.21.10, 1.21.11 · 20 марта 2026 г.

[1] Fixed a vulnerability regarding premium mode on Velocity. I STRONGLY recommend updating if you use Velocity.

1.3.2Релиз1.21.9, 1.21.10, 1.21.11 · 18 марта 2026 г.

[1] Added Velocity support
[2] Added database migration from nLogin
[3] Added support for versions 1.21.10/11 for the virtual server
[4] Added the /auth forcepremium command to forcefully enable/disable premium mode
[5] Added a cost setting for Bcrypt hashing
[6] Fixed a bug with the popup dialog window during /changepassword
[7] Fixed a startup issue on standard BungeeCord (non-forks)
[8] Fixed an issue where the /changepassword and /unregister commands would freeze/hang if the entered password was too long
[9] Fixed the "Invalid signature for profile public key" error when changing UUIDs for premium players
[10] Fixed an issue with the max concurrent players limit per IP
[11] Fixed an issue where the proxy wouldn't shut down upon a database initialization error

And probably a few other minor things I forgot about.

1.2.1Релиз1.21.8, 1.21.9, 1.21.10 · 17 октября 2025 г.

[1] Fixed database migration from LimboAuth (see the updated migration instructions in the description)

1.2.0Релиз1.21.8, 1.21.9, 1.21.10 · 13 октября 2025 г.

[1] Now offline UUID is applied to all players (to prevent UUID changes for premium-mode players)
[2] Optimized SHA256 hashing method
[3] Other minor improvements

Комментарии

Загружаем…