SHAuth

Usage

This mod provides a more advanced way to protect your server. It is used on servers that have online-mode to false in order to prevent account stealing and player coordinate leakage.

How it works

When a player tries to connect to a server, SHAuth contacts the server and verifies that the connecting player provides a valid key tied to their username. If the key is valid, the connection proceeds, otherwise the player is kicked.

What it safeguards against

• In servers that have online-mode to false, anyone can pick any username and impersonate another player. SHAuth prevents attackers from joining as someone else.
• Most log-in systems require you to first connect to the server and then log-in. This process allows an attacker to access information like the player's cordinates, which can be frustrating in competitive servers. However, SHAuth requires valid credentials before granting access.

How to use it

1. An operator first creates a key tied to your account by doing /shauth authorize .
2. The player enters the key in in the server's properties menu under the server address.

Commands

• /shauth authorize - Assigns a key to a player which grants them access to the server.
• /shauth unauthorize - Invalidates the key assigned to a player which revokes their access to the server.
• /shauth reset - Reassigns a key to a player, invalidating the old one (useful if the key gets leaked).
• /shauth list - Shows the list of players which have been assigned keys.
• /shauth help - Shows a message containing all the commands.