Introduced a dedicated scheduler wrapper layer with a runtime coordinator for Bukkit and Folia, migrated Bukkit task handling to the new abstraction, and marked the plugin as folia-supported in plugin.yml for proper Folia loading.
Update Notes
This update improves database stability, MySQL/MariaDB compatibility, and Velocity backend routing reliability.
- Fixed MySQL 8 schema migrations by removing unsupported
ADD COLUMN IF NOT EXISTSusage.- Improved migration safety with metadata-based checks before adding columns or indexes.
- Added detailed schema migration logs for migration start, existing/created columns, existing/created indexes, failures, and completion timing.
- Improved backend readiness checks on Velocity.
- When both
auth-entryandpost-authservers are enabled and defined, ProudAuth now verifies both before allowing the player through.- Prevents cases where the auth server is available but the post-auth target is offline or not responding.
- Regenerated the universal jar with the latest fixes.
Important: This update is recommended for all networks using MySQL 8 or the auth-entry/post-auth routing flow.
This update introduces ProudAccess, a new module designed to provide secure delegated access between registered accounts on your network.
With ProudAccess, an account owner can authorize another player to temporarily access their account through a controlled flow using fingerprint verification, confirmation codes, backend validation, and proxy-side session handling.
Main Changes
- Added the new ProudAccess delegated access system.
- Added commands to authorize access, join a delegated account, leave it, revoke access, and view active authorizations.
- Added fingerprint verification with click-to-copy support.
- Added active AllowAccess listing, including the related access code with hover/copy support.
- Added dynamic tab completion for
/proudaccess accessJoin, showing only accounts the player is actually allowed to join.- Improved proxy/backend synchronization during login, authentication completion, server redirects, and account switching.
- Added support for delegated flows involving both premium and cracked targets.
- Improved post-auth redirects and
/proudaccess accessLeavebehavior.- Fixed edge cases involving cracked login/register, auth server redirects, profile restoration, and backend state sync.
- Moved ProudAccess messages, hover text, and copy labels into the language files for easier customization.
Important Requirement
ProudAccess requires the modified Velocity fork called ProudX.
Standard Velocity does not correctly support the delegated profile forwarding required by this module, so ProudAccess will not work properly without ProudX.
At the moment, ProudX is not publicly included in the package and can only be obtained by opening a ticket via DM on the official Discord:
https://discord.gg/T2k6Djmscs
Recommended For
This update is recommended for Velocity networks that need a secure, controlled, and fully integrated delegated access system built directly into the ProudAuth authentication flow.
This update introduces ProudMonitor, a real-time web system for monitoring ProudAuth networks. Staff can open monitor sessions directly from the proxy with /proudmonitor, view backend servers and online players in real time, check authentication status, account type, protocol/client, and use supported actions such as messages, reauthentication request, logout, kick, and move server. The monitor now manages session lifecycles, updates backend status, supports drag-and-drop player support, dedicated color messages, separate monitor commands, and improved synchronization between backend authentication steps and the Velocity proxy.
DEMO Monitor Panel
![]()
ProudAuth 1.0.3 introduces full network auth routing across Velocity and Bukkit backends, with Velocity now acting as the authoritative network configuration source and automatic backend sync through the shared database. This update also adds configurable auth-entry and post-auth routing, granular pre-auth protection controls, improved PROXY_CUSTOM premium claim handling with ProudX premium proof support, and fixes legacy premium redirect flow issues for older clients.
Velocity now verifies Mojang UUID proof at pre-login and denies unverified premium nicknames before they reach the backend. A short-lived premium proof cache prevents runtime profile rewrites across listeners.
Added a full identity claim system (CLAIM_ON_FIRST_JOIN mode): on first join of an unclaimed nickname the player must choose /sp or /premium before login or register are available. Claims are persisted and resolved consistently across proxy and backend.
Trusted IP support: admins can bind an account to a specific IP via /proudauth trustip. Pre-login enforces the match on both standalone and Velocity. Manual login and register are blocked for accounts stored as premium.
Fixed premium movement state not being restored after auto-login on Bukkit.
This update delivers a full hardening pass for mixed premium/cracked environments (including proxy setups and offline-mode networks). We implemented strict premium identity validation, blocked premium-name impersonation with immediate deny flow, and fixed edge cases where downgraded sessions could still continue. The release introduces trusted IP support (/proudauth trustip <ip> <player>), database-backed trusted IP storage/migration, stronger login/register protections for premium accounts, and synchronized Velocity/Bukkit verification logic. We also added a short-lived premium proof bridge between pre-login and profile resolution to keep legitimate premium joins working across protocol/version differences while still rejecting spoof attempts. New localized messages and permission updates are included for clear admin/user feedback.
