Core2FA

---

Core2FA — Two-Factor Authentication

🛡 Overview

Core2FA is a Minecraft plugin (Spigot, Paper, PurPur, Folia) for that adds two-factor authentication through Telegram. It protects player accounts from hijacking by requiring login confirmation through a linked Telegram account. With Telegram integration, players can manage their account security quickly and easily from their phone.

---

✨ Features

* Account Linking Players can link their Minecraft account to their Telegram account for extra security.

* Login Confirmation When a player joins, they receive a Telegram notification and can approve or deny the login.

* Remote Security Controls Through an interactive Telegram menu, players can:

* Approve or deny logins. * Block their account if suspicious activity is detected *(if enabled)*. * Unlink their account *(if allowed by the server admin)*. * Access all settings using the `/menu` command in Telegram to manage their account remotely.

* Configurable Options Adjustable language, custom server name in notifications, and fine-grained permission controls.

* Folia Support Optimized to run smoothly on Folia-based servers.

---

⚙ Setup

1. Place the plugin into your `/plugins` folder. 2. Start the server to generate configuration files. 3. Edit `config.yml`:

```yaml server-name: "MyServer" # Name displayed in Telegram notifications language: "en" # Plugin language

telegram: bot-token: "BOT_TOKEN_HERE" # Your Telegram bot token bot-username: "NAME_BOT" # Your bot’s username

telegram-menu: settings: allow-unlinking: false # Allow unlinking accounts allow-remote-ban: false # Allow remote banning ```

4. Restart the server. 5. Players can use `/2fa` to link their account.

---

📜 Commands

| Command | Aliases | Description | | -------------------- | --------------- | -------------------------------------------------------------- | | `/2fa` | `/tfa`, `/auth` | Main command to manage 2FA | | `/2fa reload` | — | Reloads the plugin configuration | | `/menu` *(Telegram)* | — | Opens the interactive Telegram menu to manage account remotely |

---

🔑 Permissions

| Permission | Description | | -------------- | ------------------------------------------- | | `twofa.reload` | Reloads the plugin configuration (OPs only) |

---

🖥 Compatibility

* Java: Spigot, Paper, PurPur, Folia * Java: 17+

---

📌 Example Usage

1. A player joins the server. 2. They receive a Telegram message: *"Confirm login to MyServer?"* 3. They press "Confirm" or "Deny". 4. The login is either allowed or blocked. 5. Players can use `/menu` in Telegram to manage security settings or unlink their account. 6. Server admins can use `/2fa reload` to apply configuration changes without restarting.

---

📄 License

MIT License – free to use, share, or modify.

---