Releases: touchfalls/AuthSecured
Releases · touchfalls/AuthSecured
Release list
v1.1.1
Added
- Always-on redaction of password arguments from Fabric command diagnostics,
profiler labels, and debug exception logs. - Validation bounds for security, database, Redis, rate-limit, and session
numeric settings, plus PostgreSQLssl-modesupport.
Fixed
- Fabric now stays fail-closed when core initialization fails, blocks flight
according torestrictions.allow-flight, and ignores stale asynchronous join
callbacks after a disconnect or rapid reconnect. - Invalid YAML reloads retain the last valid configuration snapshot.
Changed
- Configuration lookups now use an immutable flattened snapshot, reducing work
in high-frequency movement and packet restriction checks. config.ymlnow documents every active option, accepted values, units,
reload behavior, environment variables, and security-sensitive defaults.
AuthSecured 1.1.0
AuthSecured 1.1.0 — Fabric support
AuthSecured can now run as either a Paper-compatible plugin or a Fabric
dedicated-server mod while sharing the same authentication core and database.
Added
- Fabric support for every Minecraft release from 1.21 through 26.2.
- Dedicated Fabric artifacts for each exact Minecraft version.
- Fabric implementations of registration, login, password change, logout,
authentication status, and administrator commands. - Pre-authentication restrictions for movement, chat, commands, inventory,
interactions, block breaking/placing, combat, item pickup/drop, and hunger. - Shared platform bootstrap so Paper and Fabric use identical password policy,
localization, rate limiting, sessions, SQLite/PostgreSQL, and Redis behavior. - Full version-matrix build and compatibility checks.
Fixed
- Session IP verification now rejects reconnects from a different address.
- Non-persistent sessions remain in memory and no longer survive restarts.
- Logout revokes the active session.
/registervalidates password confirmation.- Paper listeners and commands now share one restriction-state manager.
- Database integration tests are included in the standard build.
- SQLite now loads correctly from the packaged Fabric and Paper JARs.
Installation notes
- Paper, Purpur, Spigot, or Leaf: use
authsecured-paper-1.1.0.jarin
plugins/. - Fabric: use the
authsecured-fabric-1.1.0+mc<version>.jarmatching the server
version exactly and install the matching Fabric API inmods/. - Minecraft 1.21.x requires Java 21; Minecraft 26.x requires Java 25 or newer.
- Do not install both platform artifacts on the same server.
Author: touchfalls.
1.0.3
Removed
- Complete removal of Fabric module (
platform-fabric), Fabric Loader dependencies, Fabric API listeners, Brigadier registrations, and Mixin configurations (architectural decision to maintain Fabric as a standalone repository).
Changed
- Transitioned repository build system to a Paper/Purpur-focused architecture (
:core,:database,:platform-paper). - Updated
build_and_test.shto compile core/database/paper modules and generate singleauthsecured-paper-1.0.3.jarartifact. - Cleaned up docstrings across core ports [AuthPlatform], [PlatformLogger], [PlayerRestrictionAdapter]
1.0.2
Added
- Specialized Paper, Purpur, Spigot, and Leaf high-performance Minecraft server architecture.
- Multi-language localization system with 5 language bundles: English (
messages_en.yml), Russian (messages_ru.yml), Spanish (messages_es.yml), Italian (messages_it.yml), and French (messages_fr.yml). - Chat message color customization (
&0-&f,&l,&o, etc. ->§), customizable command usage labels, and automatic English fallback. - Fully customizable session configuration (
session.timeout-seconds,session.enabled,session.verify-ip,session.persistent). - Admin session management subcommands (
/authadmin session gettimeoutand/authadmin session settimeout <seconds>). - Granular unauthenticated player action restrictions in
config.yml(freeze-player,allow-flight,block-chat,block-commands,allowed-commands,block-inventory,block-interactions,block-block-break,block-block-place,block-damage-taken,block-damage-dealt,block-item-drop,block-item-pickup,block-hunger).
Fixed
- Robust exception handling across all asynchronous futures, event listeners, and administrative command handlers.
- Safe password character array clearing in memory on both success and error execution paths.