JanusMCD – Discord ↔ Minecraft Chat Bridge & Passwordless Auth.
A secure Discord ↔ Minecraft chat bridge with passwordless login, real-time chat sync, account linking, and advanced verification for Spigot, Paper, and Purpur.
Список изменений
-
Secure Legacy Linking: Verified in AccountLinkingManager. The system correctly identifies legacy accounts (no IP) and forces re-verification via code, strictly accepting only the originally linked discord_id.
-
IP Reuse Blocking: Verified in AccountLinkingManager. It blocks new links if the IP address exceeds the configured limit (getLinkCountByIp).
-
Trusted IP Bypass (24h): Verified in PlayerAuthListener. Logic exists to bypass authentication if the player joins from their linked IP within the configured auth.trusted_session.duration_hours (default 24h).
-
Join Message Suppression: Verified in JanusMCD.java (onPlayerJoin). Detailed logic suppresses the global join message until authentication is fully complete (event.setJoinMessage(null)). Discord Security Checks: Verified in AccountLinkingManager. The bot blocks linking attempts for accounts younger than minAccountAgeDays or those without a profile picture (requireAvatar).
-
Join Spam Protection: Verified via ConnectionThrottleManager. Logic exists to rate-limit connections and suppress messages for rapid join/leaves.
