Lunnara login

<div align="center">

✦ LunnaraLogin ✦

Authentication plugin for Lunnara Network

Spigot · Paper · Purpur · All Forks · 1.21.x · Secure BCrypt · MiniMessage Styled

---

</div>

Supported Platforms

| Platform | Status | |---|---| | Any Spigot/Paper fork 1.21.x | ✔ Fully supported (native Adventure) | | Any Spigot/Paper fork 1.21.x | ✔ Fully supported (shaded Adventure) | | Any Spigot/Paper fork 1.21.x | ✔ Fully supported | | Any Spigot/Paper fork 1.21.x | ✔ Fully supported | | Any Spigot/Paper fork | ✔ Should work out of the box |

> Requires Java 21 or higher.

Features

- Async Operations — Passwords are securely salted & hashed, never stored in plain text - Async Operations — All messages fully customizable with gradients, colors & formatting - Async Operations — Players can't move, chat, interact, build, or take damage until authenticated - Async Operations — Optional blindness + slowness applied before login - Async Operations — Players who don't authenticate within the timeout get kicked - Async Operations — Periodic messages reminding players to `/login` or `/register` - Async Operations — Per-player data files, no database needed - Async Operations — Password hashing runs off the main thread, zero lag

---

Commands

Player Commands

| Command | Aliases | Description | |---|---|---| | `/register <password> <password>` | `/reg` | Register a new account (first join) | | `/login <password>` | `/l` | Log in to your account | | `/changepass <old> <new>` | `/changepassword` | Change your own password |

Admin Commands

All admin commands use `/lunaralogin` (aliases: `/ll`, `/llogin`)

| Command | Permission | Description | |---|---|---| | `/ll changepass <player> <newpass>` | `lunaralogin.admin.changepass` | Force-change a player's password | | `/ll delacc <player>` | `lunaralogin.admin.delacc` | Delete a player's account (kicks if online) | | `/ll forcelogin <player>` | `lunaralogin.admin.forcelogin` | Force-login an online player without a password | | `/ll status <player>` | `lunaralogin.admin.status` | Check if a player is registered / logged in | | `/ll reload` | `lunaralogin.admin.reload` | Reload config & messages |

---

Permissions

| Permission | Default | Description | |---|---|---| | `lunaralogin.admin` | OP | Access to admin help | | `lunaralogin.admin.changepass` | OP | Change another player's password | | `lunaralogin.admin.delacc` | OP | Delete a player's account | | `lunaralogin.admin.forcelogin` | OP | Force-login a player | | `lunaralogin.admin.status` | OP | View player auth status | | `lunaralogin.admin.reload` | OP | Reload configuration |

---

Configuration

config.yml

| Option | Default | Description | |---|---|---| | `session-timeout` | `60` | Session duration in minutes | | `login-timeout` | `120` | Seconds before unauthenticated players are kicked | | `max-login-attempts` | `5` | Failed login attempts before kick | | `min-password-length` | `6` | Minimum password length | | `max-password-length` | `32` | Maximum password length | | `allow-movement-before-auth` | `false` | Allow movement before logging in | | `blind-before-auth` | `true` | Apply blindness + slowness before auth | | `reminder-interval` | `5` | Seconds between login/register reminders | | `allowed-commands` | `/login, /register, /l, /reg` | Commands usable before authenticating |

messages.yml

All messages use MiniMessage formatting. Supports gradients, hex colors, bold, etc.

Example from the default config: ``` login-success: "<color:#ff7ae6>✔ <color:#ffffff>Logged in successfully! <color:#aaaaaa>Welcome back." ```

---

Installation

1. Build the plugin: ```bash cd LunnaraLogin && ./gradlew build ``` 2. Copy `build/libs/LunnaraLogin-1.0.0.jar` to your server's `plugins/` folder 3. Start the server — config files will be generated 4. Edit `config.yml` and `messages.yml` to your liking 5. Run `/ll reload` to apply changes

---

How It Works

1. Wrong password? — Player is frozen & blinded, prompted to `/register <password> <password>` 2. Wrong password? — Player is frozen & blinded, prompted to `/login <password>` 3. Wrong password? — Effects removed, full server access granted 4. Wrong password? — Kicked after `login-timeout` seconds 5. Wrong password? — Kicked after `max-login-attempts` failed tries

Player data is stored in `plugins/LunnaraLogin/playerdata/<uuid>.json`.

---

<div align="center">

Lunnara Network · Spigot / Paper / Purpur · 1.21.x · Java 21

</div>