NewLogin

🔒 Security

• SHA-256 Hash with Salt: Implemented secure hashing system with a unique salt per player

• Brute Force Protection: Temporary lockout system after multiple failed attempts

  • Configurable: max attempts and lockout duration
  • Informative messages for blocked players

• Password Validation: Configurable minimum requirements

  • Minimum password length
  • Uppercase letter requirement
  • Number requirement
  • Special character requirement

✨ New Features

• Advanced Session System

  • IP-based auto-login (configurable)
  • Configurable session timeout
  • Last activity tracking
  • Automatic cleanup of expired sessions

• Configuration Manager

  • Complete and organized config.yml file
  • All messages customizable
  • Adjustable security settings
  • Flexible session configurations

• Full Pre-Login Protection

  • Movement blocking
  • Chat blocking
  • Command blocking (except login/register)
  • Interaction blocking with blocks and entities
  • Damage blocking
  • Item drop blocking

🔄 Improvements

• LoginManager

  • Automatic migration of old passwords to the new hashing system
  • Password strength check
  • Improved login attempt system

• PlayerManager

  • Integrated session management
  • Player activity tracking
  • Automatic data cleanup

• DataManager

  • Support for new fields (salt, IP, timestamps)
  • Optimized asynchronous operations
  • Better error handling

• PlayerListener

  • Comprehensive event protection
  • Configurable reminder messages
  • Improved user experience

📝 Updated Commands

• /register: Enhanced password validation with detailed feedback
• /login: Attempt system with temporary lockout
• /changepassword: New password validation
• /resetpassword: Still available for administrators

⚙️ Configuration

• config.yml: New comprehensive configuration file

  • Security section (hashing, attempts, validation)
  • Session section (auto-login, timeout)
  • Protection section (blocked events)
  • Messages section (all customizable)

🐛 Bug Fixes

• Fixed insecure plain text password storage
• Fixed missing protection against command spam
• Fixed players being able to interact before logging in
• Fixed missing session timeout