NelumboLogin 🌸

The ultimate, intelligent in-game authentication and account security mod for Forge servers. Add an extra layer of security to your server with advanced exploit prevention, smart dimension handling, hardened password storage, and seamless legacy data migration.

✨ Why NelumboLogin?

Unlike standard login mods that only check passwords, NelumboLogin is built from the ground up to protect your server, your players, and your server's ecosystem. Whether you want to secure staff accounts, protect a LAN network, or add a secondary password layer to your RPG server, NelumboLogin keeps unauthorized access out while making the admin experience effortless.

🔐 Secure by Design

Passwords aren't just checked — they're properly protected:

PBKDF2 Password Hashing: Every new account and password change is hashed with PBKDF2 (HMAC-SHA256, 120,000 iterations) and a unique random salt per player.
Silent Legacy Upgrade: Accounts created by older single-pass hashing versions are automatically re-hashed to the new PBKDF2 format the next time that player logs in.
Redacted Command Auditing: Login/register attempts are logged with a clean, password-free audit line, so admins keep visibility without ever exposing plaintext credentials in latest.log.

🛡️ Ironclad Exploit Prevention

While awaiting in-game authentication, players are strictly locked down to prevent bypass exploits:

Movement & Interaction Lock: Players cannot move, interact with blocks, or open containers.
Combat & Damage Immunity: Players cannot deal or receive damage while logging in.
Item Drop Protection: Tossed items are automatically canceled and restored to the inventory.
Chat & Command Isolation: Chat messages and non-auth commands are blocked until successfully authenticated.
Visual Protection (Optional): Applies a configurable Blindness effect to obscure the surrounding area during login.

🌌 Smart Dimension & Safe-Spawn Handling

Modded dimensions can be dangerous. NelumboLogin features an intelligent location system:

Configurable Lobby Teleport: Pulls unauthenticated players to a safe, designated login coordinate.
Dimension Whitelist Check: When a player logs in, the mod checks their last known dimension. If they logged out in a dangerous or unwhitelisted modded dimension, they are safely redirected to your designated Safe Spawn!

🚀 Commands & Permissions

Command	Permission / Role	Description
`/login <password>`	Player	Authenticates and unlocks the player.
`/register <pass> <pass>`	Player	Registers a new account (if not already registered).
`/nelumbologin setpassword <new>`	Player	Changes the current player's account password.
`/nlogina reload`	Admin (OP Level 2)	Hot-reloads configuration and language files.
`/nlogina resetpassword <player> <new>`	Admin (OP Level 2)	Forcibly resets a specific player's password.

(Note: Short aliases /l and /r are fully supported for quick typing!)

⚙️ Configuration & Customization

NelumboLogin generates a clean configuration folder at config/NelumboLogin/.

settings.json: Configure login timeouts, maximum failed attempts, admin security alerts, safe-spawn coordinates, and dimension whitelists.
lang.json: 100% translatable! Modify every single chat message, action bar prompt, or prefix to match your server's primary language.

NelumboLogin | Advanced Server Security & Account Protection