![MaskAuth](https://cdn.modrinth.com/data/cached_images/6ac16c384213321af4cd3054a009e7fb662f80e0.jpeg)
[![Minecraft](https://img.shields.io/badge/Minecraft-1.20.x-62b47a?style=for-the-badge&logo=data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAA4AAAAOCAYAAAAfSC3RAAAACXBIWXMAAAsTAAALEwEAmpwYAAAA&logoColor=white&labelColor=1a1a2e)](https://www.spigotmc.org) [![Spigot](https://img.shields.io/badge/Spigot-Paper-ff6b35?style=for-the-badge&labelColor=1a1a2e)](https://papermc.io) [![Java](https://img.shields.io/badge/Java-11+-f89820?style=for-the-badge&logo=openjdk&logoColor=white&labelColor=1a1a2e)](https://adoptium.net) [![License](https://img.shields.io/badge/License-All_Rights_Reserved-e63946?style=for-the-badge&labelColor=1a1a2e)](#-license) [![Version](https://img.shields.io/badge/Version-1.0.0-00d4ff?style=for-the-badge&labelColor=1a1a2e)](https://github.com/ALLAY-XD-20/MaskAuth/releases)
> **🔐 The most stylish authentication plugin for Minecraft.** > A 6-digit PIN system with a fully interactive GUI numpad, custom number-head skulls, IP tracking, BungeeCord support, and total account security — all in one.

--- ## 🖼️ Preview

--- ## ✨ Features ### 🔢 GUI-Based PIN System - **Fully interactive 54-slot chest GUI** — no chat commands needed - **Custom player-head skulls** for every digit `0–9`, each with a unique number skin - **Live PIN indicator** — 6 slot display at the top fills in as you click digits (shown as `●` dots) - **Auto-confirm** when all 6 digits are entered - **Backspace** and **Confirm** skull buttons - GUI **re-opens automatically** if closed before authentication — no bypass possible ### 🛡️ Rock-Solid Security - PINs hashed with **SHA-256 + UUID salt** — never stored in plaintext - **Movement freeze** while unauthenticated - **Blindness effect** on join until authenticated - **Chat and command blocking** until login completes - **Max attempt limit** — too many wrong PINs = kick ### 🌐 IP Tracking & Control - 📍 **Full IP history** logged per player with timestamps - 🚫 **IP account limit** — configurable max accounts per IP address - 🔔 **Admin alerts** when a player logs in from a new IP - 🔍 `/maskauth ipinfo ` to view a player's complete IP history ### 🕹️ Legacy Player Support - Players on older clients or who prefer commands can use: - `/register ` — register with a 6-digit PIN via chat - `/login ` — authenticate via chat command - Fully toggleable in `config.yml` ### 🌍 Auth World - Unauthenticated players are **teleported to a designated auth world/spawn** - Configurable world name, XYZ coordinates, yaw & pitch ### 🔗 BungeeCord Integration - Designate this server as an **auth server** - Automatically **forward authenticated players** to your lobby/main server - Compatible with BungeeCord's IP forwarding ### 💬 Fully Custom Messages - Every single message is configurable in `config.yml` - Full `&` color code support - Custom prefix with color formatting --- ## 📦 Installation ``` 1. Download MaskAuth-1.0.0.jar 2. Drop it into your /plugins/ folder 3. Restart your server 4. Configure plugins/MaskAuth/config.yml 5. ✅ Done! ``` > **Requirements:** Spigot or Paper **1.20.x** · Java **11+** --- ## 🔧 Commands | Command | Description | Permission | |---------|-------------|------------| | `/register` | Open register GUI (or `/register ` legacy) | — | | `/login` | Open login GUI (or `/login ` legacy) | — | | `/changepin` | Change your PIN via GUI | — | | `/unregister ` | Delete a player's auth data | `maskauth.admin` | | `/maskauth reload` | Reload the config | `maskauth.admin` | | `/maskauth status` | View live auth status | `maskauth.admin` | | `/maskauth ipinfo ` | View player IP history | `maskauth.admin` | | `/maskauth info` | Plugin version info | `maskauth.admin` | --- ## 🔑 Permissions | Permission | Description | Default | |------------|-------------|---------| | `maskauth.admin` | Full admin access | OP | | `maskauth.bypass` | Skip authentication entirely | `false` | | `maskauth.ipbypass` | Bypass IP account limit | `false` | --- ## ⚙️ Configuration

📄 Click to expand config.yml

```yaml settings: session-timeout: 0 # Seconds to remember login (0 = off) max-attempts: 5 # Wrong PIN attempts before kick login-timeout: 60 # Seconds to authenticate before kick blind-on-join: true # Apply blindness until authenticated freeze-movement: true # Freeze player until authenticated hide-until-auth: true # Hide player from others until auth auth-world: enabled: true world: "world" spawn: { x: 0.5, y: 64.0, z: 0.5 } legacy-support: enabled: true # Allow /login and /register ip-settings: max-accounts-per-ip: 3 track-ip-history: true alert-admins-on-new-ip: true bungeecord: enabled: false is-auth-server: false forward-server: "lobby" gui: register-title: "&8🔐 &bMask&3Auth &8» &7Register" login-title: "&8🔐 &bMask&3Auth &8» &7Login" mask-display: true # Show ● instead of actual digits ```

--- ## 🎨 GUI Layout ``` ┌─────────────────────────────────────────────────────┐ │ [●] [●] [●] [○] [○] [○] ← PIN display (6 slots) │ │─────────────────────────────────────────────────────│ │ [ 7 ] [ 8 ] [ 9 ] [ ⌫ ] ← Number skulls │ │ [ 4 ] [ 5 ] [ 6 ] [ ] │ │ [ 1 ] [ 2 ] [ 3 ] [ ✔ ] ← Confirm │ │ [ 0 ] [ ] │ └─────────────────────────────────────────────────────┘ Each number is a custom player head with digit skin ``` --- ## 🔒 How Security Works ``` Player enters PIN via GUI ↓ SHA-256( UUID + "::maskauth::" + PIN ) ↓ Stored hash compared — raw PIN never saved ↓ ✅ Match → Authenticated ❌ No match → Attempt recorded ``` > Salting with the player's UUID means two players with the same PIN have completely different stored hashes. --- ## 🗂️ Data Storage Player data is stored in `plugins/MaskAuth/data/players.yml`: ```yaml players: : name: "Steve" hashed-pin: "a3f5c8..." # SHA-256 hash — never plaintext registered-ip: "192.168.1.1" registered-at: 1700000000000 ip-history: 192_168_1_1: 1700000000000 10_0_0_5: 1700005000000 ``` --- ## 🌐 BungeeCord Setup 1. Enable `bungeecord.enabled: true` in `config.yml` 2. Set `is-auth-server: true` on your auth server 3. Set `forward-server: "lobby"` to your main server name 4. Players authenticate → automatically forwarded to lobby --- ## 📋 Compatibility | Platform | Status | |----------|--------| | Spigot 1.20.x | ✅ Supported | | Paper 1.20.x | ✅ Supported | | BungeeCord | ✅ Supported | | Velocity | ⚠️ Untested | | Spigot 1.18–1.19 | ⚠️ May work | --- ## 🐛 Issues & Support Found a bug or have a feature request? [![GitHub Issues](https://img.shields.io/badge/GitHub-Report_Issue-181717?style=for-the-badge&logo=github&logoColor=white)](https://github.com/ALLAY-XD-20/MaskAuth/issues) [![Discord](https://img.shields.io/badge/Discord-allay__gaming__x-5865F2?style=for-the-badge&logo=discord&logoColor=white)](https://discord.com/users/allay_gaming_x) > 💬 **Discord:** `allay_gaming_x` > 🐙 **GitHub:** [@ALLAY-XD-20](https://github.com/ALLAY-XD-20) --- ## 📜 License

``` Copyright © 2024 Pawan (ALLAY-XD-20) All Rights Reserved. This software and its source code are the exclusive property of Pawan. Unauthorized copying, modification, distribution, sublicensing, or commercial use of this software, in whole or in part, is strictly prohibited without express written permission from the author. You may NOT: • Redistribute this plugin or its source code • Modify and re-upload as your own • Use in commercial products without permission • Claim authorship or ownership You MAY: • Use this plugin on your personal or public Minecraft server • Report issues and suggest features via GitHub For licensing inquiries, contact via Discord: allay_gaming_x ``` **⚠️ ALL RIGHTS RESERVED (ARR) — Pawan © 2024**

---

Made with ❤️ by **Pawan** [![GitHub](https://img.shields.io/badge/ALLAY--XD--20-181717?style=flat-square&logo=github&logoColor=white)](https://github.com/ALLAY-XD-20) [![Discord](https://img.shields.io/badge/allay__gaming__x-5865F2?style=flat-square&logo=discord&logoColor=white)](https://discord.com/users/allay_gaming_x) *🔐 Keeping Minecraft servers secure, one PIN at a time.*

MaskAuth

Menu

Совместимость

Minecraft: Java Edition

Платформы

Поддерживаемые окружения

Детали