Censera's Eye

Eye is a Paper plugin for offline mode servers that keeps authentication separate from player trust.

Players who join without being trusted by the server are placed in Visitor Mode. They can register and log in, but logging in alone does not give them normal access. A player gets full access only after they have authenticated and are on the server whitelist.

Visitor Mode

Visitor Mode is intended for servers where joining the server and being trusted by the server are separate things.

!Commands

Visitors cannot:

1. use normal commands
2. interact with blocks or inventories
3. attack players or entities
4. pick up or drop items
5. leave their visitor area
6. enter the Nether or End
7. use teleports that would take them outside the allowed area

The visitor area is based on the location where the player entered Visitor Mode. Each player has their own boundary.

A player who has registered successfully but is not on the whitelist remains a visitor. A player who is on the whitelist but has not authenticated also remains a visitor.

Authentication

Censera's Eye provides account registration and login for offline mode servers.

!Login

/register <password>
/login <password> [2fa-code]

/2fa enable
/2fa confirm <code>
/2fa disable <code>

Passwords are stored using salted PBKDF2 with HMAC SHA256. TOTP can be enabled as a second authentication factor.

FastLogin can be used for premium player authentication. Floodgate can be used for Bedrock players through Geyser.

!Not whitelisted

!whitelisted

Why this approach?

Most authentication plugins focus on making sure that nobody else can use a player's name.

Censera's Eye also controls what an untrusted player can do after joining the server.

This makes it useful for servers that want to:

• run in offline mode without giving new players normal access
• use the whitelist as a real trust decision
• allow new players to connect without exposing the world to them
• support Java and Bedrock players through the same system

Administration

/eyec reload
/eyec list
/eyec kick-visitors

Visitor commands:

/guest unstuck
/guest nudge

Administrative permissions:

eyec.admin
eyec.bypass

Integrations

• FastLogin
• Floodgate
• Geyser
• ViaVersion
• ViaBackwards

Censera's Eye does not require packet hooks into these plugins.

How it works

A new player follows this path:

Join -> Visitor Mode -> Authenticate -> Whitelist -> Full access

Authentication confirms the account.

The whitelist determines whether the player is trusted.

Eye keeps those two decisions separate and enforces the restrictions between them.

!one

!two

!three

For any issues or recommendations, use GitHub Issues.