Skip to content

Releases: touchfalls/AuthSecured

v1.1.1

Choose a tag to compare

@touchfalls touchfalls released this 26 Aug 10:03

Added

  • Always-on redaction of password arguments from Fabric command diagnostics,
    profiler labels, and debug exception logs.
  • Validation bounds for security, database, Redis, rate-limit, and session
    numeric settings, plus PostgreSQL ssl-mode support.

Fixed

  • Fabric now stays fail-closed when core initialization fails, blocks flight
    according to restrictions.allow-flight, and ignores stale asynchronous join
    callbacks after a disconnect or rapid reconnect.
  • Invalid YAML reloads retain the last valid configuration snapshot.

Changed

  • Configuration lookups now use an immutable flattened snapshot, reducing work
    in high-frequency movement and packet restriction checks.
  • config.yml now documents every active option, accepted values, units,
    reload behavior, environment variables, and security-sensitive defaults.

AuthSecured 1.1.0

Choose a tag to compare

@touchfalls touchfalls released this 17 Aug 08:31

AuthSecured 1.1.0 — Fabric support

AuthSecured can now run as either a Paper-compatible plugin or a Fabric
dedicated-server mod while sharing the same authentication core and database.

Added

  • Fabric support for every Minecraft release from 1.21 through 26.2.
  • Dedicated Fabric artifacts for each exact Minecraft version.
  • Fabric implementations of registration, login, password change, logout,
    authentication status, and administrator commands.
  • Pre-authentication restrictions for movement, chat, commands, inventory,
    interactions, block breaking/placing, combat, item pickup/drop, and hunger.
  • Shared platform bootstrap so Paper and Fabric use identical password policy,
    localization, rate limiting, sessions, SQLite/PostgreSQL, and Redis behavior.
  • Full version-matrix build and compatibility checks.

Fixed

  • Session IP verification now rejects reconnects from a different address.
  • Non-persistent sessions remain in memory and no longer survive restarts.
  • Logout revokes the active session.
  • /register validates password confirmation.
  • Paper listeners and commands now share one restriction-state manager.
  • Database integration tests are included in the standard build.
  • SQLite now loads correctly from the packaged Fabric and Paper JARs.

Installation notes

  • Paper, Purpur, Spigot, or Leaf: use authsecured-paper-1.1.0.jar in
    plugins/.
  • Fabric: use the authsecured-fabric-1.1.0+mc<version>.jar matching the server
    version exactly and install the matching Fabric API in mods/.
  • Minecraft 1.21.x requires Java 21; Minecraft 26.x requires Java 25 or newer.
  • Do not install both platform artifacts on the same server.

Author: touchfalls.

1.0.3

Choose a tag to compare

@touchfalls touchfalls released this 17 Aug 07:49
9a296b6

Removed

  • Complete removal of Fabric module (platform-fabric), Fabric Loader dependencies, Fabric API listeners, Brigadier registrations, and Mixin configurations (architectural decision to maintain Fabric as a standalone repository).

Changed

  • Transitioned repository build system to a Paper/Purpur-focused architecture (:core, :database, :platform-paper).
  • Updated build_and_test.sh to compile core/database/paper modules and generate single authsecured-paper-1.0.3.jar artifact.
  • Cleaned up docstrings across core ports [AuthPlatform], [PlatformLogger], [PlayerRestrictionAdapter]

1.0.2

Choose a tag to compare

@touchfalls touchfalls released this 16 Aug 12:54
9a296b6

Added

  • Specialized Paper, Purpur, Spigot, and Leaf high-performance Minecraft server architecture.
  • Multi-language localization system with 5 language bundles: English (messages_en.yml), Russian (messages_ru.yml), Spanish (messages_es.yml), Italian (messages_it.yml), and French (messages_fr.yml).
  • Chat message color customization (&0-&f, &l, &o, etc. -> §), customizable command usage labels, and automatic English fallback.
  • Fully customizable session configuration (session.timeout-seconds, session.enabled, session.verify-ip, session.persistent).
  • Admin session management subcommands (/authadmin session gettimeout and /authadmin session settimeout <seconds>).
  • Granular unauthenticated player action restrictions in config.yml (freeze-player, allow-flight, block-chat, block-commands, allowed-commands, block-inventory, block-interactions, block-block-break, block-block-place, block-damage-taken, block-damage-dealt, block-item-drop, block-item-pickup, block-hunger).

Fixed

  • Robust exception handling across all asynchronous futures, event listeners, and administrative command handlers.
  • Safe password character array clearing in memory on both success and error execution paths.