Login+ - авторизация для Minecraft-серверов

⚠️ This update is required. Version 1.0.1 and below contain a critical login bypass that lets an attacker join a registered account without its password. If your server uses premium mode, update now — leaving an older version running puts every account on your server at risk.

Hello everyone! Login+ 1.0.2 fixes that critical login bug, adds Velocity support and makes the plugin easier to set up.

Security

• Fixed a critical authentication flaw in premium mode. Under certain conditions a registered account could be joined without entering its password. Updating is a drop-in — no config or database changes are required, so there is no reason to stay on an old version.

Added

• Velocity support. Login+ now runs on the proxy as well, so players authenticate once at the entrance and stay logged in on every backend server. The plugin must be installed on the proxy and on every backend server behind it.
• Login MOTD. A welcome message of your own is sent the moment a player is authenticated.
• Login titles. A title and subtitle appear on screen after a successful login — text, colors and timings are all yours to set.

Changed

• Simpler customisation. The new MOTD and titles are edited in one place in plain text with the usual color codes, and can be disabled completely.
• Cleaner config layout. Options are grouped by feature and much easier to find. Your existing config.yml is upgraded automatically on first start and all of your own values are kept.

---

Updating from 1.0.1 is a drop-in: just replace the jar. The database and config upgrade themselves, and customized message files keep working.