PureAuth

✅ Now Supports

• Minecraft 26.2 — Plugin has been updated and compiled against Paper API 26.2.build.36-alpha. The minimum required server version is now MC 26.2.

---

🐛 Bug Fixes

• Fixed: The /changepass command was registered but never implemented — typing it would result in no response. It now works correctly: verifies the old password, checks that the new passwords match, enforces the minimum length, and sends a Discord webhook notification on success.

• Fixed: When a player entered an incorrect code while removing 2FA (/2fa remove), they would receive the captcha error message instead of the correct 2FA error message. The message is now properly shown as 2fa_setup_fail.

• Fixed: A typo in the English captcha message — "Captacha Code:" has been corrected to "Captcha Code:". This was visible to every player during registration.

• Fixed: The /recovery command description in plugin.yml listed incorrect subcommands (<reset|setup|verify>) that did not match the actual available subcommands. Now correctly shows <setup|remove|start>.

• Fixed: The "Cancelled." message shown when a player typed cancel during the account recovery flow was hardcoded in English and bypassed the language system entirely. It is now translated and respects the configured language (EN/PL).

• Fixed (BungeeCord/Velocity): velocity-plugin.json was stuck on version 5.3.6 instead of the correct version. The version shown in the Velocity console and plugin list is now accurate.

---

🔧 Improvements

• Improved: The RecoveryListener has been migrated from the deprecated AsyncPlayerChatEvent (Bukkit) to the modern AsyncChatEvent (Paper API). This eliminates deprecation warnings in the server console on Paper 26.2.

• Improved: The /pureauth stats command no longer shows a hardcoded version string. It now reads the version dynamically, so it will always display the correct version.

• Improved: The update checker now shows a proper, readable download link (/plugins/pureauth) in the console instead of the internal Modrinth project ID.

• Improved: Console-side players (e.g. using a command proxy) now correctly receive the formatted, translatable "Players only." message instead of a plain, unstyled English string.

• Improved: Added the missing message_interval option to config.yml. This setting controls how often (in seconds) the login/register reminder message is sent to unauthenticated players. Previously the value was hardcoded to 10 seconds with no way to configure it.

---

📋 Technical / Internal

• All module POMs bumped to 5.3.8.
• Paper API dependency updated: 26.1.2.build.63-stable → 26.2.build.36-alpha.
• api-version in plugin.yml updated from 26.1.2 to 26.2.
• New translatable message keys added: recovery_cancelled (EN + PL).

---

⚠️ Compatibility

Module	Minimum Version
Paper / Spigot	Minecraft 26.2
BungeeCord	BungeeCord 1.21+
Velocity	Velocity 3.5+

Note: This release drops support for Minecraft 26.1.x and older. If you are running an older server version, please stay on PureAuth 5.3.7.