RedAuth

RedAuth

A modern authentication plugin for Paper servers. Players must register or login before they can play unauthenticated players are frozen in a configurable void lobby with full movement, chat, and interaction lock.

Security: Passwords are hashed with BCrypt and stored in a zero-config SQLite database. Login attempts are limited with automatic temporary lockout after too many failures.

Two-Factor Authentication: Optional TOTP-based 2FA compatible with Google Authenticator, Authy, and Microsoft Authenticator. Players receive a QR code as an in-game map, scan it with their app, and type the 6-digit code in chat to verify. The map is one-time use and cannot be dropped or traded.

Remember-Me: Players can enable 1-week auto-login sessions so they don't have to authenticate every time they join. (this excludes 2FA, 2FA is still required if enabled.)

Admin Tools: OP-only commands to reset passwords, delete accounts, unlock players, and view account information.

Fully Configurable: All messages, prefix, lobby coordinates, password limits, reminder intervals, and title animations can be customized in config.yml. No external dependencies required everything is bundled.