Inactive [SEC] xAuth v2.0.10 - Extra Authentication [1.2.5-R1.3+]

Discussion in 'Inactive/Unsupported Plugins' started by CypherX, Mar 15, 2011.

Thread Status:
Not open for further replies.
  1. Offline

    CypherX

    xAuth v2.0.10 - (CraftBukkit build: [1.2.5-R1.3+])
    Download v2.0.10

    lycano is taking over the development of xAuth as I no longer have the time nor the will to continue working on it. Please see the BukkitDev page: http://dev.bukkit.org/server-mods/xauth/

    Thanks to everyone who has showed support for me and xAuth over the past 17 months. It's been 'fun'. If for any reason you need to contact me, stop by my IRC channel (irc.rizon.net #LoveDespite) or toss me a message at http://love-despite.com/forum. Until we meet again, stay gold. Bang.

    ------------------------------------------------------------------​

    xAuth is a plugin designed with a single task in mind: protect a server and its players while running in offline-mode. The basic idea of this protection is allowing players to register an account based on their player name and a supplied password. When a registered player connects to the server, that player will be prompted to authenticate his or herself by logging in. If and only if a valid password is supplied, they will regain full control of their account until their session expires.


    Features
    • Before registering/logging in, players cannot:
      • Chat, execute commands, interact with objects (levers, chests, etc.), move, or pickup items.
      • Break or place blocks
      • Receive or give damage, be targeted (followed) by hostile mobs
    • Inventory and location protection
    • In-depth setting and message configuration
    • Persistent login sessions through server restarts
    • Player name filter and password complexity configuration
    • Kick non-logged in (but registered) players after a configurable amount of time
    • Bukkit Permissions support
    • Kick or temporarily lockout the IP address of a player who fails to log in after a configurable amount of tries
    • Custom, highly secure password hashing
    • H2 and MySQL support
    • Authentication over URL (AuthURL) allows for connection to forum or website databases
    Changelog (click for full changelog)
    • Version 2.0.10
      • [Fixed] Exploit to completely bypass login system.
      • [Fixed] xAuth commands not working with Rcon
      • [Fixed] Exploiting login system to avoid fire & drowning damage.
      • [Fixed] NPE caused by player connecting & disconnecting during same server tick.
      • [Fixed] 'Table "SESSIONS" not found' error when a player uses /logout while session length is set to zero.
      • [Fixed] Exploiting location protection after dieing to return to the spot of death.
    • Version 2.0.9
      • Added several reverse single session configuration options.
      • Fixed registration.forced: false not working.
      • Updated version check and H2 download links.
    xAuth Importer
    xAuth Importer is a tool used to import accounts from previous versions of xAuth as well as other authentication plugins. Click here for more information.
     
  2. Offline

    eta-92

    Can someone send us a 1.2 compatible xauth because the xauth_newevents do not work for me. the plugin is right there for he do not do anything.
     
  3. Offline

    _Robert

    LeGenDaryX skiba Sorry guys, it seems that's having problems with H2, use MySQL or don't use it, i don't have time to fix it, and also there's 1 week left for the new official version.

    It only works with mysql, also the idea wasen't to share it with anothers, it's just a fix for me, and works with mysql (im using it right now :)).
     
  4. Offline

    skiba

    Thx anyway
     
  5. Offline

    LeGenDaryX

    @CypherX Isnt it possible to release the test build already? I dont need the admin commands.. Just as long register and login work its fine for me. I cant wait anymore :(

    I wanna play 1.2 so much but this is the only plugin that i still need.
     
  6. Offline

    CypherX

    The test build will be available sometime tomorrow, unless I finish up tonight. What's mainly left to do is check for any important to-do's I left in the code and add those commands. Then testing of course.

    There isn't even a recommended build out for 1.2 anyway, so relax.
     
  7. Offline

    LeGenDaryX

    I know there isnt a recommended build yet.. But there is a very good build from it out. Lots of other servers have gone to 1.2. My server is almost empty cuz im not on 1.1 yet :p.

    But thanks for your reply and im looking forward to the test build.
    Does the test build also include the importer tool?
     
  8. Offline

    CypherX

    The importer tool is a separate thing, but yes.
     
  9. Offline

    LeGenDaryX

    cool! much love (L)
     
  10. Offline

    Hydrosis

    Are you going on bukkit dev for this plugin? Or you prefer the forums, instead?
     
  11. Offline

    CypherX

    I wouldn't touch BukkitDev with a ten foot pole.
     
  12. Offline

    Hydrosis

    lol thanks xD I like the forums better, as well. In that case, I'll make my suggestion here :D, can you add a feature that forces people to teleport to spawn after registering for the first time? I'm not sure why, but people keep teleporting to random locations around spawn after logging in for the first time :/ The might be teleported outside of spawn and confusing them. I don't want people to be confused when they login because it would send a bad impression about my server.
     
  13. Offline

    _Robert

    Try to get a plugin that gives you "exact spawn location" or make the spawn area bigger!
     
  14. Offline

    Hydrosis

    They go to the right spot when they first join. As soon as they do /register <password> it teleports them to a random location.
     
  15. Offline

    CypherX

    Hydrosis - The "random location" is actually the exact spot they initially spawn/join at. Minecraft picks a random location around the world's spawn point to actually spawn a player. In this case, _Robert's solution would work.
     
  16. Offline

    Hydrosis

    Ok. I'll try that. I think I had to disable "exact-spawn" on commandbook because it would always cause players to loose their location when logging in after the server restarts (since I use the feature on this plugin to protect the coordinates of players by teleporting them to spawn first). Is it possible to make a fix for this?
     
  17. Offline

    CypherX

    I've heard SuperSpawn works.
     
  18. Offline

    Hydrosis

    Thanks for the reccomendation :) This plugin looks perfect...and looks like it will work better than commandbook lol.
     
  19. Offline

    XtenD

    This is not just update, this is REdevelopment :)
     
  20. Offline

    LeGenDaryX

    Test build! Test build! :p

    Just one more thing and the test build is ready xD

    Only: @Commands: Lockout Management

    EDIT by Moderator: merged posts, please use the edit button instead of double posting.
     
    Last edited by a moderator: Jul 17, 2016
  21. Offline

    CypherX

    Not adding that for the test build releasing today. All that's left is testing which I can't do until I'm home from work.
     
  22. Offline

    LeGenDaryX

    How long before you release the test build.
    In hours from now? :p
     
  23. Offline

    CypherX

    Who knows? I don't get off work for another two hours then I probably won't be home for an additional hour.
     
  24. Offline

    NotYetRated

    How does one use the authURL stuff? I am running a server and forums with Joomla, and would like xauth to pull registration info from the joomla database.... But am completely lost as to how..
     
  25. Offline

    CypherX

    When AuthURL is enabled, registration and login information (name & password) are sent to the web script specified in the configuration via POST which then processes the info and returns a proper response. You'd have to create the script used yourself, though.
     
  26. Offline

    alex5567890

    really need this plugin for my cracked server
     
  27. Offline

    masterman467

    so your saying that the beta test version will be released tonight? also what has ben bothering me is that you have a date set for when you going to be done. so your going to hold it after you finish it untill the 16th? thats kinda a dick move. most cracked servers are fucked until you update this. (not trying to ride you, just adding my 2 cents)
     
  28. Offline

    CypherX

    Yes the test build will be released tonight, which is for the most part complete. I'm not "holding it", the next week is for fixing any issues found in the test version.
     
  29. Offline

    juloo

    I do not expect more than that to get my server 1.2.3
     
  30. Offline

    alex5567890

    when will the beta be released???
     
  31. Offline

    Hydrosis

    Did you seriously and completely miss the second post above yours?...
     
Thread Status:
Not open for further replies.

Share This Page