Inactive [SEC] xAuth v2.0.10 - Extra Authentication [1.2.5-R1.3+]

Discussion in 'Inactive/Unsupported Plugins' started by CypherX, Mar 15, 2011.

Thread Status:
Not open for further replies.
  1. Offline


    xAuth v2.0.10 - (CraftBukkit build: [1.2.5-R1.3+])
    Download v2.0.10

    lycano is taking over the development of xAuth as I no longer have the time nor the will to continue working on it. Please see the BukkitDev page:

    Thanks to everyone who has showed support for me and xAuth over the past 17 months. It's been 'fun'. If for any reason you need to contact me, stop by my IRC channel ( #LoveDespite) or toss me a message at Until we meet again, stay gold. Bang.


    xAuth is a plugin designed with a single task in mind: protect a server and its players while running in offline-mode. The basic idea of this protection is allowing players to register an account based on their player name and a supplied password. When a registered player connects to the server, that player will be prompted to authenticate his or herself by logging in. If and only if a valid password is supplied, they will regain full control of their account until their session expires.

    • Before registering/logging in, players cannot:
      • Chat, execute commands, interact with objects (levers, chests, etc.), move, or pickup items.
      • Break or place blocks
      • Receive or give damage, be targeted (followed) by hostile mobs
    • Inventory and location protection
    • In-depth setting and message configuration
    • Persistent login sessions through server restarts
    • Player name filter and password complexity configuration
    • Kick non-logged in (but registered) players after a configurable amount of time
    • Bukkit Permissions support
    • Kick or temporarily lockout the IP address of a player who fails to log in after a configurable amount of tries
    • Custom, highly secure password hashing
    • H2 and MySQL support
    • Authentication over URL (AuthURL) allows for connection to forum or website databases
    Changelog (click for full changelog)
    • Version 2.0.10
      • [Fixed] Exploit to completely bypass login system.
      • [Fixed] xAuth commands not working with Rcon
      • [Fixed] Exploiting login system to avoid fire & drowning damage.
      • [Fixed] NPE caused by player connecting & disconnecting during same server tick.
      • [Fixed] 'Table "SESSIONS" not found' error when a player uses /logout while session length is set to zero.
      • [Fixed] Exploiting location protection after dieing to return to the spot of death.
    • Version 2.0.9
      • Added several reverse single session configuration options.
      • Fixed registration.forced: false not working.
      • Updated version check and H2 download links.
    xAuth Importer
    xAuth Importer is a tool used to import accounts from previous versions of xAuth as well as other authentication plugins. Click here for more information.
  2. Offline


    Updated to version 1.2.3:
    • Version 1.2.3:
      • Updated for Minecraft 1.5
    There's no support for blocking Achievements/Statistics at the moment.
  3. Offline


    yeah great job!
  4. Offline


    Thank you. It's work.
  5. Offline


    First of all thanks a lot CypherX for your update.

    And how F***NG hard can it be to show some respect to the devs!
    If i was the owner here that reply you made would just make me delay the release more...

    Anyways keep your spirit up CypherX we all love it!
  6. Offline


    @CypherX hi there, this plugins seems awesome :) is there any way to allow the plugin to remain enabled while server is online?
  7. Offline


  8. Offline


  9. Offline


    Do xAuth works out in Beta 1.5_02? In my case no. However, working AuthMe
  10. Offline


    xAuth works fine with 1.5_02, no one can help you if you just say that it doesn't work.
  11. By the way, AuthMe works without update because it is much less secured than xAuth.
    Sure it "works" but it stinks!
  12. Offline


    does the convertor works for authme?
  13. Offline


    If you have AuthMe configured to use a flatfile as the datasource, you can just rename auths.db to auths.txt and use it for xAuth.
  14. Offline


    AuthMe has the same listeners and the same protection as xAuth. I won't update AuthMe till there is no need for a new version, and there wasn't. The update of xAuth was need because changes were needed in the config, but no security update. Yeah, it's true that I won't make more feature updates, just minor updates to keep it working.

    Finally thanks for respecting my work and the time I spent for coding and developing.

    First, I don't want say that my plugin is better or sth. like that, but I can't really see more features in your plugin than in AuthMe. In my opinion more features aren't needed for a authorization plugin, so I finished developing feature updates.
  15. Offline


    I have a pretty bad bug. when a player enters the game and if they move their screen at all they fall under the world. after they enter their login information they die instantly.
  16. Offline


    I'm fairly certain I know what's causing players to fall into the void and it'll be fixed (assuming that this is indeed the issue) in the next update. This literally just came to me as I was laying in bed attempting to fall asleep.
  17. Offline


    don't like u
  18. Offline


    Can someone give me a working properties file? thanks
  19. Offline


    Delete your current one and it'll generate a new one next time the server is started.
  20. Offline

    Clever Trevor

    I get the same error. Once users fall they eventually hit the bottom of the map and sometimes start dying. The entire time an error repeats "You must be logged in to do that."
  21. Offline


  22. Offline


    On CB714, xAuth asks players to register and login but does not prevent them from doing stuff. Does'nt show errors tho. Just wanted to let you know.
  23. Offline


    Just tested it myself and it's working properly. There's a chance it could be conflicting with another plugin.

    For anyone experiencing the bug with players falling into the void, if you PM me I'll link you to a test build with a possible solution. I don't experience the problem on my test server nor do I know how to recreate it so there's no way for me to test it.
  24. Offline


    Hi if is down, will xAuth prevent my server which is usally in online mode...that someone can login and use account name of a.e. notch?
  25. Offline


    Not necessarily. What xAuth does is when the server is in offline-mode, it allows players to "register" an account using their player name and a password. When a player join the server it then checks if they are registered, if so, it prompts them to "log in" while preventing them doing anything until then.
  26. Offline


    I need help. When my users log in with xAuth enabled they fall through the void and get messages saying "You need to be logged in to do that", once they log in they fall through the void and lose all their items.
  27. Offline


    I have a test build with a possible fix for that bug. If you want to test it let me know and I'll send you a link.
  28. Offline


    I NEED TO test it, send it to me PLEASE.
  29. Offline


    Confirmed an error I have seen with previous versions and now the latest. Now that Backpack has been released by Afforess I see that it causes errors to spam the errors I get are:

    2011-04-24 23:30:59 [SEVERE] null
    org.bukkit.command.CommandException: Unhandled exception executing command 'login' in plugin xAuth v1.2.3
        at org.bukkit.command.PluginCommand.execute(
        at org.bukkit.command.SimpleCommandMap.dispatch(
        at org.bukkit.craftbukkit.CraftServer.dispatchCommand(
        at net.minecraft.server.NetServerHandler.handleCommand(
        at net.minecraft.server.NetServerHandler.a(
        at net.minecraft.server.Packet3Chat.a(SourceFile:36)
        at net.minecraft.server.NetworkManager.a(
        at net.minecraft.server.NetServerHandler.a(
        at net.minecraft.server.NetworkListenThread.a(SourceFile:100)
        at net.minecraft.server.MinecraftServer.h(
    Caused by: java.lang.IllegalArgumentException: Invalid inventory size; expected 279
        at org.bukkit.craftbukkit.inventory.CraftInventory.setContents(
        at com.cypherx.xauth.xAuth.restoreInventory(
        at com.cypherx.xauth.xAuth.login(
        at com.cypherx.xauth.CommandHandler.handlePlayerCommand(
        at com.cypherx.xauth.xAuth.onCommand(
        at org.bukkit.command.PluginCommand.execute(
        ... 12 more
    Could you fix the inventory size check please :D if at all possible
  30. Offline


    There doesn't seem to be an effective or efficient way of implementing Backpack support unless Afforess develops an API for it. Currently I would have to add a large portion of the Backpack code to xAuth which just doesn't seem feasible.

    Also, the problem with players falling into the void doesn't seem to be an xAuth problem. TuRmoiLxx reports that it only happens when he has Spawnr enabled.
  31. Offline


    I think it might have to do with lower server RAM values. My server was at 512mb on a low end VPS and it was doing this. I just switched to a 512mb high end VPS and it run perfect now. Only problem is with the Backpack error. I can live with this error though :D.

    And could I test the test build as well?

    EDIT by Moderator: merged posts, please use the edit button instead of double posting.
    Last edited by a moderator: May 12, 2016
Thread Status:
Not open for further replies.

Share This Page