NexLogin | Ultimate Auth System v.1.1.2

We are thrilled to announce one of the biggest under-the-hood updates for NexLogin! This release focuses on massive performance improvements, critical bug fixes, and enhanced thread safety to ensure your server runs smoothly and lag-free, even under heavy authentication traffic.

Performance & Optimization

• Complete Asynchronous Overhaul: All heavy operations including BCrypt password hashing, database queries, and external API requests (Email, Discord, Web Sync, Anti-VPN), have been moved to background threads. Say goodbye to TPS drops during login or registration spikes!
• Thread-Safe Architecture: Implemented strict concurrent collections and yamlLock synchronization to completely eliminate the risk of data.yml or locations.yml file corruption when multiple players authenticate at the exact same millisecond.
• Optimized Server Boot: Discord integration (JDA) now connects asynchronously in the background. Your server will no longer freeze or crash on startup if the Discord API is experiencing downtime.
• Memory Leak Patches: Closed hidden socket leaks in HTTP connections (AntiVPNManager, WebSyncManager) and optimized BungeeCord plugin messaging streams to protect your machine's resources.

Security & Bug Fixes

• Captcha GUI Rewrite: Resolved a glitch where failing the Captcha could trigger a double-inventory loop. Item validation has also been fortified to prevent modded clients from bypassing the check.
• Critical Command Fixes: Patched an ArrayIndexOutOfBoundsException in the /forgotpassword command and improved strict argument handling in /premium.
• Discord Link Collision Prevention: Added mathematical safeguards to guarantee 100% unique Discord linking codes, preventing accidental account merging.
• Cross-Platform Hash Compatibility: Removed strict $2a$ BCrypt prefix checks. NexLogin now seamlessly supports passwords imported from modern web panels (like XenForo or NamelessMC) that use $2b$ or $2y$ hashes.
• Library Merging Fix: Fixed ClassNotFoundException issues with JavaMail and JDA by properly implementing the ServicesResourceTransformer in the build process.

Important Note: We highly recommend all server owners update to this version immediately for optimal stability, performance, and security.

What's New & Improved:

• [OPTIMIZATION] Core Engine Overhaul We have completely rewritten how NexLogin initializes and manages data internally. The new dynamic data-loading system ensures a much more stable and secure environment for your server's database handling, drastically reducing the chances of corrupted data during startup.
• [IMPROVEMENT] Codebase Minification The plugin's internal codebase has been heavily optimized and minified. This results in a cleaner execution cycle, slightly reduced file size, and better overall performance when handling high-traffic login queues.
• [SECURITY] Enhanced Internal Validation Improved the background validation processes and event listeners. The plugin now performs strict internal health checks before allowing any player interactions, ensuring that your server is never exposed during the critical seconds of boot-up or database connection.

Configuration Changes: (None! This is a seamless core update. You do not need to regenerate or modify your config.yml. Just replace the old .jar with the new one and restart your server.)

What's New & Improved:

• [NEW] BungeeCord Bridge Integration (NexLoginBridge) We have released a dedicated Proxy expansion! Drop the new NexLoginBridge.jar into your BungeeCord plugins folder. This securely handles dynamic online-mode switching at the network level, fixing the classic "This account is marked as Premium..." kick issue for legitimate premium players joining via offline-mode proxies.
• [NEW] Seamless UUID Migration No more lost data! When an offline player upgrades to Premium using /premium confirm, the plugin now intelligently detects their old Offline UUID (v3) and seamlessly migrates all their data (Passwords, 2FA settings, IPs, etc.) to their official Premium UUID (v4). Players no longer have to re-register or set up 2FA again after upgrading.
• [SECURITY] Irreversible Premium Upgrades To drastically improve account security, the /premium command is now strictly one-way. Once an account is verified as Premium, it cannot be downgraded. This prevents unauthorized users from disabling premium protection if they somehow bypass authentication.
• [FIX] Clean Premium Kicks Fixed a race condition where confirming premium mode would occasionally result in a generic Connection reset by peer or Unexpected packet proxy error. Players will now be cleanly disconnected with the proper formatted kick message.

Configuration Changes (config.yml):

• Added: already-premium message key to notify users that the premium upgrade is permanent.
• Removed: premium-disabled message key, as downgrading is no longer supported.

(Note: Please update your messages.yml / config.yml manually or let the plugin regenerate it to see the new strings!)