MAuth - Login / Authentication & 2FA

:closed_lock_with_key: MAuth — Release 1.0.8

This is a final / stable release, consolidating all changes from the latest snapshots.

Security & Access Control

• Unauthenticated players are now fully restricted until authentication is completed
• Blocked actions include:
  • Executing commands via chat
  • Interacting with blocks
  • Placing blocks
  • Breaking blocks
  • Interacting with the environment in general
  • Moving the camera and player movement
• Players now receive a feedback message when attempting a non-allowed action
  • Only for non-repetitive actions (chat, commands, dropping items, etc.)
  • No messages for repetitive actions (movement, camera)

Authentication & Session Fixes

• Fixed reconnection issues where players could be asked to authenticate again after reconnecting
• Fixed edge cases during world changes caused by per-world plugins triggering loading screens
• Fixed a race condition on plugin reload where players could remain authenticated without permission
• Fixed an issue where all players were logged out after a plugin reload
• Fixed a bug where persistent sessions could disconnect players after timeout even while the player was still online
• Fixed an issue where authorizations were incorrectly considered expired based on creation date instead of expiration date (previously partially implemented)

Offline Mode Improvements

• Automatic login for premium / original accounts on offline-mode servers
  • Uses JWT validation with public key verification
• Added check for existing accounts by nickname in offline mode
• Fixed an offline-mode bug where authentication.uuid could be null when calling isUsernameRegistered

Commands

• Main command renamed from /auth to /account
• /account delete — delete your own account
• /account changepw — change your own password
• /account admin delete <playername> — delete another player’s account
• /account admin changepw <playername> — change another player’s password (password requested via UI)

Logging

• Added logs for:
  • Authentication (success / failure)
  • Registration (success)
  • 2FA failures
  • Account updates (email, password, 2FA enable/disable)

Localization

• Added Spanish (ES) translation
• Added Turkish (TR) translation
• Attempted fix for Russian (RU) translation issues
  • UTF-8 issues in the Hytale client (not mod-related)

Stability

• Mitigated issues where players could become virtually disconnected due to out-of-order packets on the Hytale side