LibreLogin fork: adds ip-limit-whitelist config key (exempt trusted gateway IPs from the per-IP account limit). Base v0.24.0.
- Java 100%
4f9ba319f7
Some checks failed
release.yml / feat(eternel): owner reclaim after a staff recovery + support link in refusals (push) Failing after 0s
After staff recover a stolen account (new password the owner does not know), the owner would be locked out until someone hands the password over. This adds an owner-reclaim window: staff arm it (`/librelogin user reclaim <name> [days] [CC,CC]`, defaults to the learned-country baseline, 30 days); while armed, `/register` on that registered account sets a NEW password, but ONLY from one of the listed countries. A join from such a country gets a prompt; a wrong `/login` from there gets a hint; a `/register` from anywhere else (thief, gateway, unknown geo, no geo database) is refused, audited (RECLAIM_DENY) and alerted. Completion drops the row, audits RECLAIM_DONE and kills every other session via the credential-change lifecycle (new CredentialChange.OWNER_RECLAIM). Fail-closed on any error. Sidecar table eternel_reclaim_pending (additive, epoch-millis timestamps). Also: `support-link` config key substituted as %support% in origin-blocked and the reclaim messages, so refused players get the staff Discord instead of a dead end. Tests: ReclaimFlowTest (store, decision matrix, facade incl. no-geo and broken-sidecar fail-closed) — 183 total. Reason: zxcv/VINZO were recovered on 2026-09-08 but their owners cannot be reached; they must be able to set a new password themselves from Bangladesh without staff, while Tocfyr_ (AT) stays out. |
||
|---|---|---|
| .forgejo/workflows | ||
| .github | ||
| API | ||
| docs | ||
| gradle/wrapper | ||
| licenses | ||
| Plugin | ||
| .ekaii-upstream.env | ||
| .ekaii-upstream.sha | ||
| .gitattributes | ||
| .gitignore | ||
| build.gradle | ||
| CHANGELOG.md | ||
| forbidden-passwords.txt | ||
| gradle.properties | ||
| gradlew | ||
| gradlew.bat | ||
| HEADER.txt | ||
| LICENSE | ||
| README.md | ||
| settings.gradle | ||
LibreLogin
(formerly LibrePremium) is an open-source, multiplatform, and highly customizable authentication plugin with outstanding features and API.
Quick information
Basic set of features
- AutoLogin for premium players
- TOTP 2FA (Authy, Google Authenticator...) details
- Session system
- Name validation (including case sensitivity check)
- Automatic data migration for premium players
- Migration of a player's data by using one command
- Geyser (Bedrock) support using Floodgate
Considerations
- When using on proxy, you need to secure your limbo
Platforms
- Velocity
- BungeeCord
- Paper
References
- check out reviews on spigotmc.org
Special thanks
- Raixo - for developing the original bungeecord port
- FastLogin contributors - for their work, which was used as a base for the paper port
- Fejby - for providing Floodgate test server and helping with testing
License
LibrePremium is FOSS, licensed under the Mozilla Public License 2.0.
The plugin is and always will be completely open-source, so you don't need to worry about malicous copies.