RedAuth

v1.0.0 — Initial Release

Authentication

• /register <pw> <pw> and /login <pw> commands
• BCrypt password hashing (cost factor 12)
• SQLite database — zero configuration
• 5 login attempts before 5-minute lockout
• Configurable password length requirements

Two-Factor Authentication

• /auth mfasetup — QR code delivered as in-game map
• Compatible with Google Authenticator, Authy, Microsoft Authenticator
• Code is typed in chat to verify (not as command argument)
• One-time use map — cannot be dropped or traded
• /auth mfaoff <pw> to disable

Session Management

• Void lobby with blindness and full movement freeze
• Chat isolation — unauth players are invisible to others
• /auth remember — 1-week auto-login toggle
• Title animations and actionbar reminders every 5 seconds

Admin Commands

• /authadmin resetpassword <player> <pw>
• /authadmin deleteaccount <player>
• /authadmin unlock <player>
• /authadmin userinfo <player>
• /authadmin list
• /authadmin reload

Player Commands

• /auth resetpassword <old> <new>
• /auth deleteaccount <pw>
• /redauth — credits (always accessible, cannot be blocked)

Other

• bStats metrics (opt-out in config)
• Fully configurable messages, prefix, lobby, limits
• Works in online and offline mode
• No external dependencies