When joining for the first time :
When you first join a server that uses this mod, you'll be prompted with a menu that gives you a choice :
You can either choose to enable authentication for your account or to stay unsafe.
If you pick to use authentication and sign up, you will be prompted with a way to set your first password and once done, you'll be able to play minecraft normally !
When joining after registering :
If it isn't your first time joining the server and you already signed in and set your password, you will automatically be asked to insert your password to log in.
When done, you'll be logged in until you leave again !
You also only have 5 attempts to input your password, before you get "locked" and have to wait one minute before trying again. This time will double for every attempt afterwards.
Password restrictions :
When setting your password, it will have to be 6-20 characters and not contain any spaces. You also can't use a password flagges as "too simple", such as "123456", "password" and this kind of pre-defined values. Currently these too simple passwords are directly inside the mod's code but in the future it might be an editable config for admins to set.
Trapped password :
This mod adds a whole trapped password feature : users can set a trapped password and if it is used during log in, it will automatically lock the account for 24 hours. The best use of this feature is if your password got leakes anywhere, you can edit your real password to something else, and then set your trapped password to that leaked password, so if anyone tries to use the leak to enter your account, they will be stopped and won't be able to try similar passwords to still try to login and the server admins will be warned about it in the console as well.
Commands :
All commands linked to this mod are packed inside one command : /auth.
- /auth login : Opens the login menu when not logged it.
- /auth logout : Logs your current session out and asks you to log in to continue playing.
- /auth menu : Opens the authenticator menu to manage your account, such as editing your password, generating backup codes (I wont further talk about them here, they are pretty straightforward) or simply disabeling authentication on your account.
More commands exist for admins :
- /auth admin : Requires operator level 4 and controls the whole mod's configuration in the server.
- /auth lock : Makes admins able to lock players' accounts similarely to when multiple failed passwords are attempted. Admins can also use /auth logout on other players.
- /auth key : Automatically logs in any user without asking for their password or anything.
- /auth passreset : Allows admins to make user reset their password if they forgot it. To use with caution ! Make sure it's the real player before using it.
Authorization :
Authorization in this mod is basically a modded whitelist. It can be edited using /auth authorization and enabled/disabled in /auth admin.
If a player joins while authorization is enabled and they're not in the list, they won't be able to log in, set a password and basically anything.
Why even use an authenticator mod ?
Weather it's this mod or any other, authenticator mods are truely needed for cracked servers as they allow anyone to set their username as anything, and while most people use their own username, hackers can easily set it to the name of a server player or even a server admin. And the issue is that, for cracked servers, they don't think "This is the real guy" or "This isn't", they only think abut "They have the same username as that guy I already know, so it must be them". And thats where authenticator mods come in, to check if the player really are the owner of the username they use. Because if someone renames themselves to make the server think it's someone else, if that person already set a password, the hacker won't be able to do anything, whereas if the authenticator mod wasn't there, they could spam chat, attack allies, ruin progress, and so much worse, and if the victim is a server admin, the hacker also gets admin commands, without any issue and can get the real admin demoted or banned... That's the root purpose of why i made this mod and why i believe every cracked server should add one.
What about singleplayer ?
You might think that this mod is only for servers, and mostly cracked ones. But the mod works perfectly fine in singleplayer as well ! For example : If you share your computer with someone else and don't want them messing with your world, just add it and secure all your progress !
Though if they remove the mod, they will be able to play anyways, so better hope they're a technology noob !
And i believe thats all i need to say for now ! More features will obviously come as the updates arrive and this description will be updated. But for now, i hope you (breaking the fourth wall :) were convinced to add this mod to whatever you think needs it !
Also this mod will not be published on Modrinth because apparently it "PrOmOtEs IlLeGaL aCtIvItIeS, oR aDvOcAtEs, PrOmOtEs Or AsSiStS aNy UnLaWfUl AcT, iNcLuDiNg ReAl-LiFe Dr*gS.", yeah idk what went on in there but i'm out.
