SmartLogin v1.0.1-BETA — Security Hardening Hotfix

🛡️ SmartLogin v1.0.1-BETA — Security Hardening Hotfix

This release addresses important security findings and hardens critical authentication pipelines:

🔒 Security Fixes & Hardening:

• 2FA Setup Authentication Enforcement: Fixed unauthenticated bypass where players could execute /2fa setup without first proving password ownership.
• Login Brute-Force Rate Limiting: Implemented server-side attempt tracking, kicking users and broadcasting Discord security alerts upon exceeding max failed password attempts (default: 3).
• Recovery OTP Rate Limiting: Active OTP password reset sessions are now invalidated immediately after 3 failed attempts to prevent brute-forcing.
• TOTP Verification Drift Window: Tightened default TOTP validation window to RFC 6238 standard (±1 step, 30s drift).

📦 Artifacts:

• Binary: SmartLogin-1.0.0.jar (Shaded with BouncyCastle Argon2id & ZXing QR Core).
• Compatibility: Paper / Purpur 1.21+ | Java 21.

SmartLogin v1.0.0-BETA — Next-Gen Security Suite

🛡️ SmartLogin v1.0.0-BETA — Official Release

Bienvenido a la nueva era de autenticacion y seguridad para servidores modernos de Minecraft (Paper 1.21.x / Java 21).

🚀 Novedades Destacadas

• 🔐 Criptografia Militar: Argon2id (OWASP PHC), PBKDF2-SHA512, BCrypt (cost=12) y SHA-256.
• 📱 Suite 2FA: Mapas QR in-game, aprobacion por DM de Discord, Bot de Telegram y Email OTP.
• 🎮 Geyser / Floodgate Nativo: PinPad GUI interactivo para Bedrock y validacion anti-suplantacion.
• 👑 Auto-Login Premium: Verificacion criptografica de firmas de texturas Mojang y hook con FastLogin.
• 🎥 Modo Streamer: Intercepcion inteligente de passwords sin barra, ofuscacion de IPs y correos.
• ⚡ Migracion Universal: /smartlogin migrate all transfiere AuthMe, nLogin, FastLogin y mas en 1 segundo.

⚠️ Fase BETA: Por favor reporta cualquier problema o sugerencia en nuestro Sistema de Tickets.