LightAuth

Lightweight auth plugin for Paper/Spigot servers.

Players register and log in with passwords hashed using BCrypt. Optional 2FA with any TOTP app (Google Authenticator, Aegis, etc).

All database operations run async on SQLite.

What it does

• Password registration and login with BCrypt hashing
• Optional TOTP 2FA
• IP-based session caching with configurable timeout
• Unauthenticated players are frozen, blinded, and hidden
• Inventory and interaction protection until login

Other stuff

• Fully async SQLite storage
• Migration tool for moving from LoginSecurity
• Configurable messages and timeouts

Commands & Permissions

Command	Aliases	Permission	Description
/login <pass/code>	/l	None	Authenticate with your password or 2FA code.
/register <pass>	/r	None	Create a new account and set your password.
/2fa <setup/confirm>	/otp	None	Enable or manage 2FA.
/changepassword	/cp, /pass	None	Change your current account password.
/lightauth	/la	lightauth.admin	Administrative commands (Reload, Migration).