peyaj's Auth [Paper/Velocity]

Minecraft 版本： 1.21 1.21.1 1.21.2 1.21.3 1.21.4 1.21.5 1.21.6 1.21.7 1.21.8 1.21.9 1.21.10 1.21.11 26.1 26.1.1 26.1.2 26.2

平台： folia paper purpur spigot

peyajAuth

A high-performance, modular, and secure hybrid authentication solution for Spigot/Paper (1.21+ & 26.2+) and Velocity Proxy (3.0.0 - 4.x+).

Are you a filipino and want to host your Minecraft server in the Philippines? Visit https://mcziehost.fun

[!IMPORTANT]
Offline Mode Requirement: Both the Velocity proxy (in velocity.toml) and your backend Spigot/Paper servers (in server.properties) must be configured in offline mode (online-mode=false). The plugin dynamically triggers online-mode authentication handshakes for verified premium players at the proxy gateway, while allowing cracked players to connect securely.

Key Features

• Multi-Platform Integration: Deploy as a standalone Spigot/Paper plugin or run as a unified Velocity proxy gateway. Both modules sync seamlessly using an SQLite, a shared MySQL, or MariaDB backend.
• Embedded Velocity Void Limbo: Velocity installations bundle their own built-in, zero-dependency virtual void world limbo server. Unauthenticated players are trapped in a local loopback server (127.0.0.1) automatically without requiring the external plugin.
• True Hybrid Auto-Login: Automatically distinguishes premium vs. cracked players. Instantly logs in premium players without passwords, while cracked players are prompted to register or login securely.
• Cryptography: Supports industry-standard Argon2id and BCrypt hashing with customizable iteration, memory, and thread factors.
• Zero-Thread Lag: Built entirely on asynchronous, non-blocking queries and fast HikariCP database connection pools to prevent main-thread TPS drops.
• Advanced Bot & Alt Protections: Features GUI chest-click or chat-based Captcha gates, brute-force IP/account locks, and configurable registration limits per IP.
• Two-Factor Authentication (2FA): Restricts movement, commands, and chat for password-verified connections until they supply their Google Authenticator (TOTP) code.
• Offline Skin Retention: Fetches and restores genuine Mojang skins for offline/cracked players using premium names.

Installation & Setup

For Standalone Paper Servers

1. Download the latest compiled peyajAuth-Paper-1.6.1.jar from the release section.
2. Drop the JAR into your server's plugins/ directory.
3. Restart to generate default configs inside plugins/peyajAuth/ (config.yml, messages.yml, database.yml, premium.yml).

For Velocity Proxy Networks

1. Place peyajAuth-Velocity-1.6.1.jar in your Velocity plugins/ folder.
2. Drop peyajAuth-Paper-1.6.1.jar into the plugins/ folder of all backend servers (Lobbies, Gamemodes).
3. Configure all modules to point to the same MySQL or MariaDB database in database.yml to sync player sessions across the entire proxy network.
4. On startup, the Velocity plugin will automatically extract and launch its embedded Limbo server inside plugins/peyajauth/peyajlimboapi/ on a dynamic port for secure lobby redirection.
   • Custom Spawn Map: The plugin extracts a default void platform. You can replace it with any custom map by dropping your own .schem file into plugins/peyajauth/peyajlimboapi/ and naming it spawn.schem. The plugin automatically detects and normalizes WorldEdit nested structures on startup to prevent load crashes.

Commands & Permissions

Developer API

You can programmatically query authentication states across both Spigot/Paper and Velocity modules.

Querying on Velocity Proxy:

import me.peyaj.peyajauth.api.PeyajAuthVelocityAPI;

// Access registration service
PeyajAuthVelocityAPI api = server.getServicesManager().query(PeyajAuthVelocityAPI.class).get().getProvider();

// Check if player has authenticated
boolean isLoggedIn = api.isAuthenticated(player.getUniqueId());

// Verify if username is already registered in database
api.isRegistered(player.getUsername()).thenAccept(registered -> {
    if (registered) {
        // ...
    }
});

Querying on Paper Backend:

import me.peyaj.peyajauth.api.PeyajAuthAPI;

// Check if player is logged in
boolean loggedIn = PeyajAuthAPI.getInstance().isAuthenticated(player);

// Check if player owns a premium account
boolean isPremium = PeyajAuthAPI.getInstance().isPremium(player);

bStats Server Metrics

License

Copyright © 2026. All rights reserved.
Decompilation, reverse engineering, unauthorized redistribution, and editing of this compiled software are strictly prohibited.