Перейти к содержимому
Mineforgian

ZyrenAuth

ZyrenAuth is a secure and modern authentication plugin/mod for Minecraft 1.21.1+ servers. It focuses on account security, player privacy, and a smooth login experience. Supports both Paper and Fabric servers.

Загрузки
442
Подписчики
1
Обновлён
6 февраля 2026 г.
Лицензия
MIT

Опубликован 2 декабря 2025 г.

Исходный кодСообщить об ошибке

ZyrenAuth

A modern, high-performance, and privacy-focused server-side authentication platform for Paper.

Overview

ZyrenAuth is a robust account security and cryptographic authentication lifecycle utility engineered explicitly for Paper and Spigot-compatible server environments. It intercepts player network connections to execute mandatory validation challenges, establishing a strict data barrier that protects player states, inventories, and profile configurations until verification parameters are successfully met.

Key Features

  • Reverse Word Captcha Verification — Enforces a randomized reverse-string algorithmic challenge instantly upon connection, preventing automated credential stuffing and bot injection vectors.
  • Graphical 2FA Initialization — Features an in-game GUI pipeline (/za 2fa setup) that generates and projects local 2FA secret key states and QR code URIs directly to authenticator applications.
  • Isolated Space Teleportation — Seamlessly forces unauthenticated connections onto a locked, safe void coordinate context (0.5, 0.0, 0.5), completely suppressing network world interactions and movement events until verification succeeds.
  • Persistent State Persistence — Automatically serializes and caches complete player data matrices—including inventories, vector positions, active status effects, food boundaries, and experience blocks—restoring them seamlessly upon successful lifecycle completion.
  • Intelligent Network Profiling — Dual-mode operation handling:
    • Online-Mode Pipelines: Seamlessly authenticates valid Mojang verification hashes while managing dynamic username updates.
    • Offline-Mode Fallbacks: Automates session persistence for pre-registered users while enforcing strict registration protocols for unrecognized profiles.
  • Asynchronous Release Auditing — Connects non-blockingly to Modrinth asset channels on startup to evaluate, verify, and notify console administrators of available optimization payloads.
  • Enterprise Storage Ingestion — Supports relational MySQL and MariaDB database storage engines for multi-server synchronization, complete with a structured, encrypted file-based archive fallback.

Quick Start & Deployment

  1. Deployment: Drop the compiled ZyrenAuth binary archive directly into the active server plugins/ directory.
  2. Initialization: Run the server lifecycle to instantiate the primary configuration schema at plugins/config/zyrenauth/.
  3. Configuration Extraction: Utilize the Online Configuration Generator to easily compile and modify variables within the local config.json payload.

Command Framework Syntax

User Interaction Group

  • /register <password> <confirm> — Establishes a new cryptographically hashed profile record.
  • /login <password> — Initiates a BCrypt validation challenge to unlock player interaction parameters.
  • /captcha <answer> — Supplies the response payload to the active reverse-string challenge.
  • /addemail <email> — Connects an SMTP-reachable tracking address to the profile context.
  • /emailconfirm <token> — Validates email ownership tokens.
  • /resetpassword & /resetconfirm — Handles remote recovery routines.

Administrative Controls (OP Only)

  • /za help — Maps the entire executable subcommand tree.
  • /za status — Evaluates localized storage engine metrics and performance health states.
  • /za reload — flushes and hot-reloads configuration matrix parameters directly from disk memory.
  • /za migrate <player> — Manages data profile migrations across active infrastructure contexts.
  • /za delete <player> [confirm] — Completely purges targeted user authentication blocks.

Available exclusively for the Paper and Spigot Server ecosystem.

Ченджлог

1.0.3Релиз1.21.9, 1.21.10, 1.21.11 · 6 февраля 2026 г.

================= ZyrenAuth v1.0.3 =================

Secure Player Authentication • Modern Minecraft Login Plugin

What's New in v1.0.3:

  • Reverse Word Captcha System

    • Every player must solve a reverse-word captcha on join
    • No more math or sequence captcha types—security and anti-bot protection made simpler and stronger
    • Configurable captcha timeout and attempts, with safe void spawn during the captcha phase (0.5, 0.0, 0.5)

  • Streamlined Two-Factor Authentication (2FA)

    • /za 2fa setup opens a user-friendly in-game GUI showing your secret + QR URI for easy setup in authenticator apps

  • Accurate Player State Restoration

    • The server always saves your full gamemode, inventory, health, hunger, experience, and location before auth/captcha
    • Upon successful login, you spawn back exactly where you left off
    • Newly registered players are always sent to the main world spawn, no matter where the auth area is

  • Creative/Spectator Support

    • Registration/login no longer forces players to Survival; your default world gamemode is always respected
    • Health and hunger bars are only shown when in Survival or Adventure

  • Resolved Persistent Title/Hologram

    • After registration or login, the "Registered/Logged In" title always clears immediately

  • Asynchronous Modrinth Update Checker

    • At startup, ZyrenAuth checks for new Modrinth releases and notifies you in the console if you're out of date

  • Cleaned-Up /za delete Command

    • Account deletion is now admin-only and uses a proper confirmation flow (no repeated prompts or permission leaks)

  • General Stability and Bug Fixes

    • Eliminated duplicate unfreezePlayer calls
    • Fixed inventory, health, gamemode, and title restoration issues across all flows
    • Reliable compile with all current Spigot/PaperMC versions

Links and More:

• Modrinth: https://modrinth.com/plugin/zyrenauth/versions • Docs/Help: https://zyrenauth.wuaze.com • Github: https://github.com/Hardik-Verma/ZyrenAuth

Thanks for choosing ZyrenAuth. By _Pheonix  |  https://pheonix.is-a.dev

1.0.2Релиз1.21, 1.21.1 · 17 декабря 2025 г.

✨ ZyrenAuth v1.0.2: Enhanced Security & Seamless Authentication Experience!

This update brings significant improvements to player security and the overall authentication experience, focusing on a more intuitive user interface and robust Two-Factor Authentication (2FA) capabilities.

Key Highlights:

  • Dynamic On-Screen Authentication Prompts: Clear, persistent on-screen titles and subtitles for /register and /login commands, guiding players seamlessly.
  • Optional Two-Factor Authentication (2FA) via Google Authenticator: Players can now enable 2FA for an extra layer of security; compulsory once enabled.
  • Improved Admin & Player Command Interface: Unified /za command, revamped /za help and /za status chat layouts, and integrated 2FA subcommands.
  • Streamlined Plugin File Management: All plugin files are now neatly organized under server_root/plugins/config/zyrenauth/.
  • Robust File-Based Storage Enhancements: Improved internal handling for encrypted file-based accounts, ensuring better data integrity.
  • Graceful Error Handling: Enhanced logging and clearer error messages for a smoother experience.

For a full list of changes and detailed configuration options, visit our Official Website Changelog and use the Online Config Generator.

1.0.1Релиз1.21, 1.21.1 · 7 декабря 2025 г.

ZyrenAuth 1.0.1 - Intelligent Authentication & Streamlined UX for 1.21.1+

This release significantly enhances ZyrenAuth's player authentication experience, focusing on smarter auto-login, improved data management, and a return to a concise, text-based command interface.

New Features & Improvements:

  • Intelligent Auto-Authentication Flow:
    • For Premium Servers (online-mode=true):
      • Registered Premium Players: Now automatically logged in on join.
      • Unregistered Premium Players: Are automatically registered and logged in on first join. No manual /register is required for them to play.
    • For Cracked/Offline Servers (online-mode=false):
      • Registered Players: Still benefit from automatic login (if autoLoginPremiumPlayers is true).
      • Unregistered Players: Must still register manually for security reasons.
  • Automatic Username Migration (Premium Servers): For registered players on online-mode=true servers, their Minecraft username (IGN) is automatically updated in ZyrenAuth's records if it changes (e.g., case changes, new IGN).
  • Case-Insensitive Username Validation: Prevents players from registering usernames that are only different by case, improving uniqueness and preventing confusion.
  • GUI System Removed: The /za command has been reverted to a text-based output, providing a direct and efficient command-line experience for administrators.
  • autoLoginPremiumPlayers Config Option: A new boolean option (default true) controls the intelligent auto-registration/login behavior, allowing server owners to fine-tune the experience.
  • Enhanced Console Logging: More detailed and informative logs for authentication actions and server status.

This update streamlines the player onboarding process for legitimate Minecraft accounts and simplifies the admin experience, all while maintaining robust security.

1.0.0Релиз1.21, 1.21.1 · 6 декабря 2025 г.

ZyrenAuth 1.0.0

  • First Paper release of ZyrenAuth by _Pheonix
  • Adds secure /register and /login with BCrypt-hashed passwords
  • Players join in a safe auth zone at 0,0,0 and are teleported back to their real location after logging in or registering
  • Supports both MySQL storage and file-based storage (accounts.json) so servers can run with or without a database
  • Optional email features for /addemail, /emailconfirm, /resetpassword, and /resetconfirm when SMTP + MySQL are configured
  • Includes /za help and /za status for quick overview of storage mode and feature status
  • Styled, cleaner messages and basic brute-force protection when using MySQL

Комментарии

Загружаем…