VoidAuth

# VoidAuth v1.0.0 Changelog

**Release date**: 2026-06-02  
**Minecraft**: 26.1 Fabric | Java 25

---

## ✨ Added

- GUI‑based login / register / change password screens with password confirmation
- BCrypt password hashing (cost 10–14 configurable)
- Password strength check: min 6 chars, letters+digits, no consecutive sequences (abc/123), 72‑byte limit
- Login failure lockout (5 attempts → 15 min, configurable)
- Optional IP‑based auto‑login (disabled by default)
- 4‑layer position lock (client input freeze + tick freeze + server move packet intercept + position correction)
- Darkness effect + gamma force‑0 to bypass Fullbright mods
- F3 debug screen disabled during authentication
- Elytra disconnect protection (loads 7×7 chunks on rejoin)
- Death state auto‑recovery on reconnect
- Flight check grace period after login
- Admin audit logs (`logs/voidauth-admin.log`) and `/voidauth exportlog`
- Fine‑grained permission nodes for all admin commands (Fabric Permissions API support)
- Developer API: `VoidAuthAPI` with authentication callbacks and player data queries
- Config and data auto‑migration across versions
- MySQL password network protection (password field masked in sync packets)
- Server‑side `bcryptCostFactor` validation (10–14)
- SQLite / MySQL storage backends (optional drivers)
- Full configuration GUI for admins