BasicAuth

A lightweight authentication mod for offline Minecraft servers. Protect your server with password-based login/registration, no client-side mod required.

Features

Password-protected accounts — players must /register and /login before they can interact with the world.
Locked out until authenticated — players who haven't logged in are frozen in place (or teleported to a configurable waiting area), can't break/place blocks, interact, attack, take damage, or chat.
On-screen reminders — a fading on-screen subtitle nags unauthenticated players to log in or register every few seconds.
Login timeout — auto-kicks players who take too long to authenticate.
Brute-force protection — kicks after too many failed /login attempts.
Reconnect grace period — players who disconnect unexpectedly (crash/network drop) while logged in can reconnect from the same IP within a configurable window without needing to log in again.
Waiting area — optionally teleport unauthenticated players to a fixed location instead of freezing them where they joined, then return them to their last known position after logging in.
Admin tools — reset a player's password, unregister an account, or list all registered accounts, right from the console or in-game.
Fully configurable — timeouts, password length, failed-attempt limits, and more, adjustable in-game via the Mods menu or in config/basicauth-common.toml.

Commands

Command	Description
`/register <password> <confirmPassword>`	Create an account and log in.
`/login <password>`	Log in to an existing account.
`/changepassword <old> <new>`	Change your password.
`/logout`	Disconnect and clear your session.
`/unregister <password>`	Delete your own account.
`/basicauth reset <player>`	(Op) Reset a player's password to a random code.
`/basicauth unregister <player>`	(Op) Delete a player's account.
`/basicauth accounts`	(Op) List all registered accounts with their online status.

Configuration

All settings are available in-game via Mods → BasicAuth → Config, or by editing config/basicauth-common.toml:

Setting	Default	Description
`loginTimeoutSeconds`	60	Time before an unauthenticated player is kicked.
`minPasswordLength` / `maxPasswordLength`	3 / 64	Allowed password length.
`maxFailedAttempts`	5	Failed `/login` attempts before a kick.
`gracePeriodSeconds`	3600	Reconnect window after an unexpected disconnect.
`waitingAreaEnabled`	false	Teleport unauthenticated players to a fixed location.
`waitingAreaDimension` / `X` / `Y` / `Z`	—	Where the waiting area is.