LightAuth

Lightweight auth plugin for Paper/Spigot servers.

Players register and log in with passwords hashed using BCrypt. Optional 2FA with any TOTP app (Google Authenticator, Aegis, etc).

All database operations run async on SQLite.

What it does

• Password registration and login with BCrypt hashing
• Optional TOTP 2FA
• IP-based session caching with configurable timeout
• Unauthenticated players are frozen, blinded, and hidden
• Inventory and interaction protection until login

Other stuff

• Fully async SQLite storage
• Migration tool for moving from LoginSecurity
• Configurable messages and timeouts

Commands & Permissions

| Command | Aliases | Permission | Description |
| :--- | :--- | :--- | :--- |
| /login <pass/code> | /l | None | Authenticate with your password or 2FA code. |
| /register <pass> | /r | None | Create a new account and set your password. |
| /2fa <setup/confirm> | /otp | None | Enable or manage 2FA. |
| /changepassword | /cp, /pass | None | Change your current account password. |
| /lightauth | /la | lightauth.admin | Administrative commands (Reload, Migration). |