🛡️ RayLogin v1.0.2 - The Ultimate Authentication Update

RayLogin v1.0.2 redefines server security with a complete visual overhaul, enterprise-grade protection, and seamless player experience features. This update focuses on a "Premium Feel" with gradients, animations, and smart automation.

✨ New Features

💎 Premium Auto-Login

• New Command: Added /premium <on|off>.
• Smart Sessions: Premium players (or those with valid sessions) are now automatically logged in without typing passwords.
• Session Persistence: If you rejoin quickly from the same IP, you skip the queue.

📍 Multi-Spawn System

Admins can now set specific spawn points for different login stages:

• /raylogin spawn set auth - Where players wait to login.
• /raylogin spawn set register - Where new players wait.
• /raylogin spawn set login - Where players go after logging in (e.g., Hub).
• /raylogin spawn set firstjoin - Where players go immediately after registering.

🎨 Visual & Audio Overhaul

• Clickable Chat: Login and Register messages are now clickable for faster typing.
• Cinematic Timer: Added a 5-second countdown title (5..4..3..) with ticking sounds before a timeout kick.
• Console Art: Added a stunning ASCII gradient banner on startup.
• Animations: Particle effects on login/register success and failure.

🔒 Enterprise Security

• Argon2id Hashing: Industry-standard password hashing.
• Log4j Console Filter: Strictly hides /login and /register passwords from console logs to prevent leaks.
• Tab Completion: Intelligent command suggestions based on permissions.

---

🛠️ Commands

• /login <password> - Login to the server.
• /register <password> <confirm> - Create a new account.
• /premium <on|off> - Toggle auto-login for your account.
• /raylogin spawn set <type> - (Admin) Set spawn locations.
• /raylogin help - View the interactive help menu.

---

⚙️ Installation & Update

1. Stop your server.
2. Delete your old config.yml and messages.yml (Required for new gradient settings).
3. Upload the new jar to your /plugins/ folder.
4. Start the server.

Note: You do not need to delete your raylogin.db database. Player accounts are safe.

v1.0.0 - The Ultimate Initial Release

This is the first public release of RayLogin, a powerful and feature-rich authentication plugin built from the ground up for modern servers.

✨ Player & User Experience

• Secure /register and /login system.
• Auto-Login on Register: Players are logged in instantly after registering.
• IP Session Management: Players can be automatically logged in when rejoining from the same IP address.
• Immersive UI:
  • Animated on-screen titles for login/register prompts.
  • Dynamic Boss Bar countdown timer that changes color from green to red.
  • Blindness effect applied to unauthenticated players.
• Configurable sound effects for login, registration, and failed attempts.
• A celebratory (and damage-free) firework is launched when a new player registers.
• Bedrock Edition (via GeyserMC) compatibility.
• /changepassword command for users to manage their own account.

🔒 Security Enhancements

• Guaranteed Console Privacy: Player passwords are 100% hidden from the server console using network-level packet interception (requires ProtocolLib).
• Brute-Force Protection: Automatically kicks players after multiple failed login attempts.
• Secure Hashing: All passwords are securely hashed using the industry-standard BCrypt algorithm.
• Action Blocking: Unauthenticated players are completely restricted from moving, chatting, interacting, or using commands.
• OP players are required to authenticate just like regular players.

🔧 Admin Tools

• Comprehensive /raylogin command suite (/rl).
• /rl info <player>: View detailed account information like registration date, last login, and last known IP.
• /rl spawn set: Easily set the post-login teleport location.
• /rl changepass <player> <new_password>: Change a player's password.
• /rl forcelogin <player>: Force a player to log in.
• /rl reload: Reload the plugin's configuration file.

⚙️ Backend

• Dependency: Now requires ProtocolLib to be installed for the enhanced security features.
• All features are fully configurable in a clean, well-documented config.yml.