RelishAuth

RelishAuth

Advanced Authentication System for Velocity Proxy Servers 🔐

🌟 Features

🔐 Multi-Method Authentication

- Hybrid Mode: Traditional secure password system with Argon2 hashing - Hybrid Mode: Link Discord accounts for seamless authentication - Hybrid Mode: Automatic authentication for premium Minecraft accounts - Hybrid Mode: Combine password + Discord for maximum security

🛡️ Advanced Security

- Bedrock Support: Configurable session durations (0-1 hour) - Bedrock Support: Optional IP-based session validation - Bedrock Support: Protection against brute force attacks - Bedrock Support: Real-time Mojang API validation - Bedrock Support: Compatible with Floodgate for cross-platform play

🤖 Discord Bot Integration

- Rich Embeds: Instant Discord DM verification - Rich Embeds: Security alerts when someone joins with your account - Rich Embeds: Change passwords, manage sessions via Discord - Rich Embeds: Full server management through Discord slash commands - Rich Embeds: Beautiful, informative Discord messages

🌐 Multi-Language Support

- Customizable Messages and Customizable Messages language packs included - Customizable Messages: Full message customization support

💾 Flexible Database Support

- Connection Pooling: Zero-configuration local database (default) - Connection Pooling: Network database support for multi-server setups - Connection Pooling: Enterprise-grade database with advanced features - Connection Pooling: High-performance HikariCP integration

---

📸 Screenshots

Discord Integration

*Seamless Discord verification with interactive buttons*

Admin Dashboard

*Powerful admin tools accessible through Discord slash commands*

Security Notifications

*Real-time security notifications keep your account safe*

Optimized Limbo world

---

🚀 Installation

Prerequisites

- Discord Bot 3.4.0 or higher - Discord Bot 21 or higher - Discord Bot plugin (required dependency) - Discord Bot (optional, for Discord features)

Step 1: Download and Install

1. Download plugin JAR file 2. Place the JAR file in your Velocity `plugins/` folder 3. Install LimboAPI Place it in the same folder 4. Restart your Velocity proxy

Step 2: Initial Configuration

1. Navigate to `plugins/relishauth/` 2. Edit `config.yml` to configure your authentication method 3. Set up your database connection 4. Configure Discord bot (optional but recommended)

Step 3: Discord Bot Setup (Optional)

1. Create a Discord application at Discord Developer Portal 2. Create a bot and copy the token 3. Add the token to your `config.yml` 4. Invite the bot to your Discord server with appropriate permissions

---

⚙️ Configuration

Basic Configuration

```yaml

Choose your authentication method

authentication: method: "password" # Options: password, discord premium-auto-login: true allow-bedrock-players: true

Session management

session: duration: "5m" # Options: 0, 1m, 5m, 15m, 30m, 1h allow-different-locations: true

Database setup

database: type: "sqlite" # Options: sqlite, mysql, mariadb, postgresql sqlite: path: "data.db" ```

Authentication Methods

🔑 Password Authentication

Perfect for traditional servers wanting secure password-based auth:

```yaml authentication: method: "password" password: min-length: 6 max-length: 32 hashing: "argon2" # Secure password hashing ```

How it works: 1. New players create a password when first joining 2. Returning players enter their password to authenticate 3. Sessions are saved based on configured duration 4. Optional Discord linking for additional features

💬 Discord Authentication

Ideal for Discord-centric communities:

```yaml authentication: method: "discord" discord: bot-token: "YOUR_BOT_TOKEN" server-id: "YOUR_DISCORD_SERVER_ID" ```

How it works: 1. Players enter their Discord username in-game 2. Bot sends verification DM with interactive buttons 3. Players click "Verify" to authenticate 4. Account is permanently linked to Discord

🏆 Premium Auto-Login

Streamlined experience for premium players:

```yaml authentication: premium-auto-login: true allow-premium-username-impersonation: false # Security: prevent impersonation ```

How it works: 1. Premium accounts are automatically verified via Mojang API 2. No password or Discord verification required 3. Instant server access for legitimate premium players 4. Cracked clients cannot impersonate premium accounts

Security Configuration

```yaml security: authentication-timeout: 300 # 5 minutes to authenticate password-attempts: max-attempts: 3 lock-duration: 15 # Minutes premium: verification-timeout: 5 api-url: "https://api.mojang.com/users/profiles/minecraft/" ```

Limbo World Customization

```yaml customization: limbo: dimension: "THE_END" # OVERWORLD, NETHER, THE_END gamemode: "SPECTATOR" spawn: x: 0 y: 64 z: 0 block-movement: true ```

🎮 Commands

Player Commands

| Command | Description | Usage | |---------|-------------|-------| | `/ra password <pass> <confirm>` | Set/change password | `/ra password mypass123 mypass123` | | `/ra discord <username>` | Link Discord account | `/ra discord john_doe` | | `/ra logout` | Clear all sessions | `/ra logout` | | `/ra session [duration]` | Set session duration | `/ra session 30m` | | `/ra notify <on/off>` | Toggle join notifications | `/ra notify on` | | `/ra unlink` | Unlink Discord account | `/ra unlink` | | `/ra info` | View account information | `/ra info` |

Admin Commands

| Command | Description | Usage | |---------|-------------|-------| | `/ra reload` | Reload configuration | `/ra reload` | | `/ra info <player>` | View player information | `/ra info PlayerName` | | `/ra unlink <player>` | Unlink player's Discord | `/ra unlink PlayerName` | | `/ra block <username> <ip>` | Block username from IP | `/ra block Griefer 192.168.1.1` | | `/ra unblock <username> <from>` | Unblock username from IP | `/ra unblock Griefer 192.168.1.1` | | `/ra clearblocks <username>` | Clear all stored blocks for username | `/ra clearblocks Griefer` | | `/ra setpassword <player> <new> <confirm>` | Admin set a player's password | `/ra setpassword PlayerName NewPass NewPass` | | `/ra resetpassword <player> [length]` | Admin reset password (temp password) | `/ra resetpassword PlayerName 16` | ---

🤖 Discord Bot Integration

Setup Process

1. Create Discord Application - Go to Create Discord Application - Click "New Application" and give it a name - Navigate to "Bot" section and create a bot

2. Configure Bot Permissions Required permissions: - Send Messages - Use Slash Commands - Manage Roles (for linked role) - Read Message History

3. Invite Bot to Server ``` https://discord.com/api/oauth2/authorize?client_id=YOUR_BOT_ID&permissions=268435456&scope=bot%20applications.commands ```

4. Configure in RelishAuth ```yaml discord: bot-token: "YOUR_BOT_TOKEN" server-id: "YOUR_DISCORD_SERVER_ID" linked-role-id: "ROLE_ID_FOR_LINKED_USERS" ```

Discord Slash Commands

| Command | Description | Permission | |---------|-------------|------------| | `/link` | Instructions for linking account | Everyone | | `/session [duration]` | Set session duration | Linked users | | `/notifications [toggle]` | Toggle join notifications | Linked users | | `/info [player]` | View account information | Admin | | `/kick <player>` | Kick player from server | Admin | | `/unlink <player>` | Unlink player's account | Admin | | `/block <username> <ip>` | Block username from IP | Admin | | `/unblock <username> <from>` | Unblock username from IP | Admin | | `/clearblocks <username>` | Clear all stored blocks for username | Admin | | `/setpassword <player> <new> <confirm>` | Admin set a player's password | Admin | | `/resetpassword <player> [length]` | Admin reset password (temp password) | Admin | | `/reload` | Reload plugin configuration | Admin |

---

📞 Support & Links

---