RelishAuth

Advanced Authentication System for Velocity Proxy Servers 🔐

🌟 Features

🔐 Multi-Method Authentication

• Password Authentication: Traditional secure password system with Argon2 hashing
• Discord Integration: Link Discord accounts for seamless authentication
• Premium Auto-Login: Automatic authentication for premium Minecraft accounts
• Hybrid Mode: Combine password + Discord for maximum security

🛡️ Advanced Security

• Session Management: Configurable session durations (0-1 hour)
• IP Validation: Optional IP-based session validation
• Rate Limiting: Protection against brute force attacks
• Premium Verification: Real-time Mojang API validation
• Bedrock Support: Compatible with Floodgate for cross-platform play

🤖 Discord Bot Integration

• Real-time Verification: Instant Discord DM verification
• Join Notifications: Security alerts when someone joins with your account
• Account Management: Change passwords, manage sessions via Discord
• Admin Commands: Full server management through Discord slash commands
• Rich Embeds: Beautiful, informative Discord messages

🌐 Multi-Language Support

• English and Arabic language packs included
• Customizable Messages: Full message customization support

💾 Flexible Database Support

• SQLite: Zero-configuration local database (default)
• MySQL/MariaDB: Network database support for multi-server setups
• PostgreSQL: Enterprise-grade database with advanced features
• Connection Pooling: High-performance HikariCP integration

---

📸 Screenshots

Discord Integration

Seamless Discord verification with interactive buttons

Admin Dashboard

Powerful admin tools accessible through Discord slash commands

Security Notifications

Real-time security notifications keep your account safe

Optimized Limbo world

---

🚀 Installation

Prerequisites

• Velocity Proxy 3.4.0 or higher
• Java 21 or higher
• LimboAPI plugin (required dependency)
• Discord Bot (optional, for Discord features)

Step 1: Download and Install

1. Download plugin JAR file
2. Place the JAR file in your Velocity plugins/ folder
3. Install LimboAPI Place it in the same folder
4. Restart your Velocity proxy

Step 2: Initial Configuration

1. Navigate to plugins/relishauth/
2. Edit config.yml to configure your authentication method
3. Set up your database connection
4. Configure Discord bot (optional but recommended)

Step 3: Discord Bot Setup (Optional)

1. Create a Discord application at Discord Developer Portal
2. Create a bot and copy the token
3. Add the token to your config.yml
4. Invite the bot to your Discord server with appropriate permissions

---

⚙️ Configuration

Basic Configuration

# Choose your authentication method
authentication:
  method: "password"  # Options: password, discord
  premium-auto-login: true
  allow-bedrock-players: true

# Session management
session:
  duration: "5m"  # Options: 0, 1m, 5m, 15m, 30m, 1h
  allow-different-locations: true

# Database setup
database:
  type: "sqlite"  # Options: sqlite, mysql, mariadb, postgresql
  sqlite:
    path: "data.db"

Authentication Methods

🔑 Password Authentication

Perfect for traditional servers wanting secure password-based auth:

authentication:
  method: "password"
  password:
    min-length: 6
    max-length: 32
    hashing: "argon2"  # Secure password hashing

How it works:

1. New players create a password when first joining
2. Returning players enter their password to authenticate
3. Sessions are saved based on configured duration
4. Optional Discord linking for additional features

💬 Discord Authentication

Ideal for Discord-centric communities:

authentication:
  method: "discord"
discord:
  bot-token: "YOUR_BOT_TOKEN"
  # You can set a single guild ID:
  # server-id: "YOUR_DISCORD_SERVER_ID"
  # Or multiple guild IDs:
  # server-id: ["GUILD_ID_1", "GUILD_ID_2"]
  server-id: "YOUR_DISCORD_SERVER_ID"

How it works:

1. Players enter their Discord username in-game
2. Bot sends verification DM with interactive buttons
3. Players click "Verify" to authenticate
4. Account is permanently linked to Discord

🏆 Premium Auto-Login

Streamlined experience for premium players:

authentication:
  premium-auto-login: true
  allow-premium-username-impersonation: false  # Security: prevent impersonation

How it works:

1. Premium accounts are automatically verified via Mojang API
2. No password or Discord verification required
3. Instant server access for legitimate premium players
4. Cracked clients cannot impersonate premium accounts

Security Configuration

security:
  authentication-timeout: 300  # 5 minutes to authenticate
  password-attempts:
    max-attempts: 3
    lock-duration: 15  # Minutes
  premium:
    verification-timeout: 5
    api-url: "https://api.mojang.com/users/profiles/minecraft/"

Limbo Authentication UI

customization:
  limbo:
    title:
      enabled: true
    actionbar:
      enabled: true
    bossbar:
      enabled: true
      color: "BLUE"
      overlay: "PROGRESS"

RelishAuth now keeps the auth limbo world behavior hardcoded for stability. Movement clamping and the auth world layout are no longer configurable.

🎮 Commands

Player Commands

| Command | Description | Usage |
|---------|-------------|-------|
| /ra password <pass> <confirm> | Set/change password | /ra password mypass123 mypass123 |
| /ra discord <username> | Link Discord account | /ra discord john_doe |
| /ra logout | Clear all sessions | /ra logout |
| /ra session [duration] | Set session duration | /ra session 30m |
| /ra notify <on/off> | Toggle join notifications | /ra notify on |
| /ra unlink | Unlink Discord account | /ra unlink |
| /ra info | View account information | /ra info |

Admin Commands

| Command | Description | Usage |
|---------|-------------|-------|
| /ra reload | Reload configuration | /ra reload |
| /ra info <player> | View player information | /ra info PlayerName |
| /ra unlink <player> | Unlink player's Discord | /ra unlink PlayerName |
| /ra block <username> <ip> | Block username from IP | /ra block Griefer 192.168.1.1 |
| /ra unblock <username> <from> | Unblock username from IP | /ra unblock Griefer 192.168.1.1 |
| /ra clearblocks <username> | Clear all stored blocks for username | /ra clearblocks Griefer |
| /ra setpassword <player> <new> <confirm> | Admin set a player's password | /ra setpassword PlayerName NewPass NewPass |
| /ra resetpassword <player> [length] | Admin reset password (temp password) | /ra resetpassword PlayerName 16 |

🤖 Discord Bot Integration

Setup Process

1. Create Discord Application

   • Go to Discord Developer Portal
   • Click "New Application" and give it a name
   • Navigate to "Bot" section and create a bot

2. Configure Bot Permissions
   Required permissions:

   • Send Messages
   • Use Slash Commands
   • Manage Roles (for linked role)
   • Read Message History

3. Invite Bot to Server

   https://discord.com/api/oauth2/authorize?client_id=YOUR_BOT_ID&permissions=268435456&scope=bot%20applications.commands
   

4. Configure in RelishAuth

   discord:
     bot-token: "YOUR_BOT_TOKEN"
     # You can set a single guild ID:
     # server-id: "YOUR_DISCORD_SERVER_ID"
     # Or multiple guild IDs:
     # server-id: ["GUILD_ID_1", "GUILD_ID_2"]
     server-id: "YOUR_DISCORD_SERVER_ID"
     linked-role-id: "ROLE_ID_FOR_LINKED_USERS"
   

Discord Slash Commands

| Command | Description | Permission |
|---------|-------------|------------|
| /link | Instructions for linking account | Everyone |
| /session [duration] | Set session duration | Linked users |
| /notifications [toggle] | Toggle join notifications | Linked users |
| /info [player] | View account information | Admin |
| /kick <player> | Kick player from server | Admin |
| /unlink <player> | Unlink player's account | Admin |
| /block <username> <ip> | Block username from IP | Admin |
| /unblock <username> <from> | Unblock username from IP | Admin |
| /clearblocks <username> | Clear all stored blocks for username | Admin |
| /setpassword <player> <new> <confirm> | Admin set a player's password | Admin |
| /resetpassword <player> [length] | Admin reset password (temp password) | Admin |
| /reload | Reload plugin configuration | Admin |

---

📞 Support & Links

---