Перейти к содержимому
Mineforgian

xLogin

Professional and super secure login system.

Загрузки
4K
Подписчики
10
Обновлён
22 марта 2026 г.
Лицензия
MIT

Опубликован 18 сентября 2025 г.

Сообщить об ошибке

🛡️ xLogin – Simple, Lightweight & Powerful Authentication

banner-es

xLogin is an all-in-one authentication system designed for servers that want maximum security without the bloat. Forget about complex external database setups; xLogin is optimized to work locally, fast, and secure out of the box, whether you run a standalone server or a massive Proxy network.

Note: /premium is only available for networks and proxies. Compatible with Bungeecord, Velocity, Waterfall, and others. How do I activate proxy mode? Go to config.yml and enable proxy mode, then download and install the add-on for your proxy, and you're all set!

🚀 Key Features

  • 🌐 Smart Network & Proxy Ready: Fully compatible with BungeeCord and Velocity. Features auto-detection to enable secure UUID verification and includes an automatic Auth-Lobby redirect system to send players to a specific server upon successful login.
  • 📦 Local-First Storage & Backups: High-performance, thread-safe H2 database system (data.mv.db). No need for MySQL to get professional network-level performance. Easily create instant database backups via in-game commands!
  • 💎 Smart Premium System: Using an official Minecraft account? Players can use /premium to enable auto-login. The plugin uses real Mojang validation (via your Proxy) to ensure nobody can steal a premium identity.
  • 🧠 Industrial-Grade Security:
    • BCrypt Hashing: Passwords are encrypted with the industry standard, making them virtually impossible to crack.
    • Premium Name Impersonation Protection: Automatically kicks non-premium players trying to join with the username of an official purchased account.
    • Anti-Bot Captcha: A visual verification system during registration to stop bot attacks in their tracks.
    • Total Protection: Blindness, immobilization, and block/damage protection until the user is authenticated.
    • Asynchronous Logging: Keeps a silent, detailed history of logins, registrations, and admin actions.
  • 🖼️ Ultimate Admin Control: Manage everything from the console or in-game. Features an intuitive visual GUI menu with player heads, plus a massive arsenal of commands to purge inactive users, force logins, change UUIDs, and more.
  • 📱 Bedrock Support (Geyser): Fully compatible with console and mobile players via Floodgate integration. Bedrock players authenticated via Xbox Live can automatically bypass the login screen (100% configurable).
  • ⚡ Performance Optimized: Fully asynchronous database operations ensure your TPS stays at 20.0, no matter how many players are joining.

🛠️ Commands & Permissions

Player Commands

Command Description Permission
/login <pass> Log in to your account. None
/register <pass> <pass> Create a new account with captcha. None
/premium [confirm] Toggle Auto-login (Premium Mode). None
/changepassword <old> <new> Securely change your current password. None
/captcha <code> Solve the registration captcha. None

Admin Commands (xlogin.admin)

Command Description
/xlogin gui Open the visual administration menu.
/xlogin backup Create an instant backup of the database.
/xlogin purge <days> Delete all accounts inactive for <days>.
/xlogin verify <user> View a player's UUID, IP, Premium status, & last login.
/xlogin forcelogin <user> Forcefully log a player into the server.
/xlogin setspawn / spawn Set or teleport to the login spawn location.
/xlogin changepass <user> <pass> Forcefully change a player's password.
/xlogin changeuuid <user> <uuid> Manually update a player's registered UUID.
/xlogin unpremium <user> Remove the premium auto-login status from an account.
/xlogin unban <ip> Remove an IP from the registration blacklist.
/xlogin unregister <user> Completely delete a player's account.
/xlogin reload Reload the plugin configuration and messages.

⚙️ Simplified Configuration

We've stripped the config down to the essentials so you don't waste time, while giving you absolute control over your network.

config.yml

# -------------------------------------------------------
#           __             _
#   __  __ / /  ___   __ _(_)_ __
#   \ \/ // /  / _ \ / _` | | '_ \   Made by xPlugins
#    >  </ /__| (_) | (_| | | | | |     Fork: Paper
#   /_/\_\____/\___/ \__, |_|_| |_|
#                  |___/ Release v1.0.6
#
#        Wiki: [https://xplugins.es/xlogin](https://xplugins.es/xlogin)
#    24/7 Support: [https://discord.gg/AH5k9YE78b](https://discord.gg/AH5k9YE78b)
# -------------------------------------------------------

settings:
  # The default language (es, en). It will load messages_es.yml or messages_en.yml
  language: "en"

protection:
  # Block everything before logging in (movement, chat, etc.)
  general-protection: true

  # Visual effects upon joining the server
  effects:
    blindness: true

security:
  # Auto-register premium users detected by the proxy (Requires BungeeCord/Velocity)
  auto-premium-registration: false
  # Prevents Non-Premium players from using premium account names (Requires BungeeCord/Velocity)
  prevent-premium-name-impersonation: false

  # Allowed commands BEFORE logging in
  allowed-commands-before-login:
    - "/help"
    - "/rules"
    - "/discord"

passwords:
  size:
    min: 6
    max: 20

#      ___          _                _
#   / __\ ___  __| |_ __ ___   ___| | __
#  /__\/// _ \/ _` | '__/ _ \ / __| |/ /
# / \/  \  __/ (_| | | | (_) | (__|   <
# \_____/\___|\__,_|_|  \___/ \___|_|\_\
geyser-support:
  # If true, Bedrock players (Floodgate) join without needing to login.
  auto-login-bedrock: true

#      __     _                      _
#   /\ \ \___| |___      _____  _ __| | __
#  /  \/ / _ \ __\ \ /\ / / _ \| '__| |/ /
# / /\  /  __/ |_ \ V  V / (_) | |  |   < 
# \_\ \/ \___|\__| \_/\_/ \___/|_|  |_|\_\
proxy-redirect:
  # Send the player to the target server after a successful login (ideal for Auth&Lobby)
  enabled: false
  target-server: "Lobby"

captcha:
  enabled: true
  timeout-seconds: 120

ui:
  titles:
    before-login:
      title: '&#A9DFBFWelcome!'
      subtitle: '&fUse /login <password>'
    before-register:
      title: '&#FAD7A0Register!'
      subtitle: '&fUse /register <password> <password>'
    after-login:
      title: '&#A9DFBFSuccess!'
      subtitle: '&fEnjoy your stay'
    incorrect-password:
      title: '&#F1948AIncorrect Password!'
      subtitle: '&7Please try again'

logging:
  enabled: true
  log-successful-logins: true
  log-registrations: true
  log-failed-attempts: true
  log-admin-actions: true

Ченджлог

v1.0.7Релиз1.21.9, 1.21.10, 1.21.11 · 22 марта 2026 г.

We have patched minor bugs and ensured that users are no longer prompted to log in when returning to the hub from other game modes.

v1.0.7-PreБета1.21.9, 1.21.10, 1.21.11 · 21 марта 2026 г.

🚀 xLogin v1.0.7 - The Ultimate Optimization & Bedrock Update

This update focuses on making xLogin incredibly smart, lightweight, and 100% dynamic. We rewrote the core security system, perfected Bedrock support, and made sure you never have to restart your server to apply config changes again!

📱 Flawless Bedrock Support (Geyser/Floodgate)

  • Triple-Layer Detection: The Bedrock auto-login system has been completely rewritten. It now uses a mathematical UUID version 0 check combined with the Floodgate API, ensuring Bedrock players bypass the login screen instantly and securely.
  • Dynamic Toggle: The geyser-support.auto-login-bedrock option is now checked in real-time. You can enable or disable Bedrock auto-login on the fly without restarting!

🛡️ Unified & Dynamic Security System

  • Master Protection Check: We removed redundant code and created a centralized isProtected() method. Performance is better than ever!
  • Ultimate Interaction Blocker: Unregistered players are now strictly prevented from opening physical menus (chests, crafting tables) or using items in their hands (like lobby compasses/clocks).
  • Toggleable Blindness: The blindness effect upon joining is now fully customizable. You can turn it on or off dynamically via protection.effects.blindness in the config.yml.
  • Dynamic Captcha: The Captcha system now correctly reads the captcha.enabled option from your config in real-time.

🌐 Smart Proxy & Network Handling

  • Real-Time Proxy Detection: The plugin no longer locks the proxy state on startup. You can now toggle proxy-mode: true/false in your config, use /xlogin reload, and the /premium command will instantly enable or disable itself!
  • Smart IP Tracking: Removed the strict "Kick on different IP" feature that punished players with dynamic internet providers. Now, if a player's IP changes, they just need to enter their password normally, and the plugin will silently update their new IP in the database.

⚙️ Administration & Quality of Life

  • Auto-Spawn Teleport: Players are now automatically teleported to the designated login spawn (/xlogin setspawn) the exact millisecond they join the server, preventing them from falling into the void or glitching out.
  • Fixed /xlogin reload: The reload command now properly reloads both your config.yml and your language file (messages_es.yml / messages_en.yml) at the same time.
  • Fixed Account Deletion: Fixed an SQL parameter error when admins used /xlogin unregister <player>.
  • Player Self-Unregister: Added the /unregister command so regular non-premium players can delete their own accounts using their password.

⚠️ Note for Server Admins: Thanks to the new dynamic core, you can now change almost any setting in your config.yml and simply type /xlogin reload in the console to apply it instantly!

1.0.6-VРелиз1.21.9, 1.21.10, 1.21.11 · 19 марта 2026 г.

Addon for Velocity

  • It is mandatory to download the normal version to your auth/lobby and configure it.
v1.0.6Релиз1.21.9, 1.21.10, 1.21.11 · 19 марта 2026 г.

We've fixed several issues and improved the /premium system for proxy networks and Bedrock players.

1.0.6-BРелиз1.21.9, 1.21.10, 1.21.11 · 19 марта 2026 г.

Addon for BungeeCord = WaterFall

  • It is mandatory to download the normal version to your auth/lobby and configure it.
1.0.5Релиз1.21.9, 1.21.10, 1.21.11 · 19 марта 2026 г.

Addon for Velocity (Required for /premium)

v1.0.4Бета1.21.9, 1.21.10, 1.21.11 · 19 марта 2026 г.

🚀 xLogin v1.0.4 - The Ultimate Network & Security Update

We are thrilled to announce the biggest update to xLogin yet! This version brings massive improvements to server security, full proxy network support, Bedrock edition compatibility, and an entirely new suite of administration tools.

Here is everything new in v1.0.4:

🌐 Smart Network & Proxy Integration (BungeeCord / Velocity)

  • Smart Proxy Detection: xLogin now automatically detects if it is running on a standalone server or behind a Proxy (BungeeCord/Velocity).
  • Network-Only Premium Mode: The /premium auto-login system now dynamically enables itself only on proxy networks (to ensure 100% secure UUID verification) and safely disables itself on standalone servers.
  • Auth-Lobby Redirection: Added proxy-redirect to config.yml. You can now automatically send players to a target server (e.g., "Lobby") immediately after a successful login.

📱 Bedrock Edition Support (Floodgate / Geyser)

  • Bedrock Auto-Login: Added native support for GeyserMC/Floodgate. Bedrock players authenticated via Xbox Live can now automatically bypass the login screen.
  • Fully Configurable: The Bedrock bypass can be easily toggled on or off using the new geyser-support.auto-login-bedrock option in your config.yml.

🛡️ Advanced Security & Asynchronous Logging

  • New Logging System: Added a fully asynchronous LogManager. All successful logins, new registrations, failed password attempts, and admin actions are now safely recorded in plugins/xLogin/logs/security.log.
  • Premium Name Protection: Added prevent-premium-name-impersonation to the config. If a non-premium player tries to join using the username of an official Premium account, the plugin will automatically kick them to protect the account's identity.
  • Thread-Safe Database: Rewritten H2 database connection handling to prevent memory leaks and database corruption during high-traffic logins.

⚙️ Massive Admin Command Expansion

We have completely revamped the /xlogin administration system! Admins now have ultimate control over the database directly from the game or console:

  • + /xlogin backup: Safely creates an instant backup of your database inside the /backups folder.
  • + /xlogin purge <days>: Cleans your database by deleting accounts inactive for a specified amount of days.
  • + /xlogin forcelogin <user>: Instantly forces a pending player into a logged-in state.
  • + /xlogin changeuuid <user> <uuid>: Easily update a player's UUID.
  • + /xlogin changepass <user> <pass>: Forcefully change a player's password.
  • + /xlogin verify <user>: Displays a detailed profile of a player (UUID, IP, Premium status, and Last Login).
  • + /xlogin unpremium <user>: Removes the premium status from a player's account.
  • + Dynamic Help Menu: The /xlogin help command now reads directly from your messages_en.yml or messages_es.yml, allowing you to translate or customize the admin help page!

🛠️ General Fixes & Optimizations

  • Updated pom.xml dependencies to the latest secure versions (MySQL Connector, BungeeCord Chat API).
  • Fixed movement glitching/stuttering for unregistered players in version 1.8.x.
  • Fixed an issue where the GUI Admin panel arrows would not paginate correctly.

⚠️ Important Note for Server Admins: Please make sure to regenerate or update your config.yml, messages_es.yml, and messages_en.yml files to access all the new features and translations included in this release!

v1.0.3Бета1.21.9, 1.21.10, 1.21.11 · 12 февраля 2026 г.

📦 v1.0.3 - The "Clean & Secure" Update

The biggest update yet! We have rebuilt the plugin's core to be lighter, removing unnecessary dependencies and improving global compatibility from 1.8.8 to 1.20.1+.

🚀 New Features

  • 💎 Smart Premium System: Added the /premium command with a confirmation system. Users can toggle their original Mojang status for automatic login (Auto-login).
  • 🔐 Secure Password Change: New /changepassword command using BCrypt encryption to update passwords securely.
  • 🌈 Dynamic Hex Color Support: Smart system that detects your server version. Use Hex colors (&#RRGGBB) on 1.16+ while maintaining classic compatibility on 1.8.8.
  • 📂 100% Editable Messaging: All messages are now organized by categories in messages_en.yml for full customization.

🛠️ Improvements & Optimization

  • 📦 Migration to Local H2: Heavy MySQL and Email dependencies have been removed. The plugin is now "Plug & Play", storing everything in an ultra-fast local data.db database.
  • ⚡ Asynchronous Performance: All save and load operations are now asynchronous to ensure your server's TPS stays at 20.0.
  • 🛡️ Hardened Security:
    • Improved Blindness and movement lock upon joining.
    • Password change protection for premium users.
    • Status validation to prevent duplicate messages in commands.

🐛 Bug Fixes

  • ✅ 1.8.8 Compatibility: Fixed material errors (SKULL_ITEM vs PLAYER_HEAD) and sound issues that prevented the plugin from loading on older versions.
  • ✅ Database Fix: Optimized the connection to prevent H2 file corruption during server shutdowns.
  • ✅ GUI Fix: The admin panel now correctly displays player heads across all versions.

Made with ❤️ by xPlugins .

Комментарии

Загружаем…