Z-Auth | Modern Authentication Plugin v1.0

Overview
Z-Auth is a proxy-first authentication system built for Minecraft networks that use Velocity or BungeeCord. Instead of forcing every backend server to handle authentication directly, Z-Auth authenticates players on the proxy and then securely syncs their login state across your backend servers.

Backend guard plugins keep your servers protected until the player is fully authenticated. Movement, commands, chat, inventory interaction, item pickup, drops, combat, and damage can all be blocked before login, giving your network a cleaner and safer authentication flow.

What You Get

• Proxy authentication system for Velocity and BungeeCord networks
• Backend guard plugins for Spigot, Paper, Purpur, and Folia servers
• /login and /register support with short aliases for faster player access
• Session login support for returning players
• Authenticator-based 2FA for extra account protection
• SQLite and SQL database support for small and large setups
• Admin commands for account management, forced login, logout, and 2FA control
• Lightweight backend protection without requiring database access on every backend server

Features

• Proxy-first authentication designed specifically for Minecraft networks
• Velocity support for modern proxy-based server setups
• BungeeCord support for classic network setups
• Backend protection until the proxy confirms the player is authenticated
• Automatic proxy-to-backend synchronization for login state
• /login and /register commands for simple player authentication
• /l and /reg aliases for faster command usage
• /changepass support so players can update their password
• /logout support for account re-verification
• Session login support for smoother returning-player access
• Authenticator 2FA system using secure TOTP codes
• /2fa enable, /2fa verify, and /2fa disable support
• Compatible with authenticator apps like Google Authenticator, Authy, 2FAS, and more
• SQLite support for simple local storage
• MySQL and MariaDB support for network database setups
• PostgreSQL support for advanced database environments
• Async database operations built for better performance
• No backend database configuration required for backend guard servers
• Operators are not automatically bypassed for safer protection behavior

Backend Protection

• Block player movement before login
• Block commands before login
• Block chat before login
• Block inventory interaction before login
• Block item pickup before login
• Block item drops before login
• Block combat before login
• Block damage events before login
• Keep backend servers protected until authentication is complete
• Allow only safe authentication commands during login

Administration

• /zauth status - View authenticated player count
• /zauth unregister - Remove player accounts
• /zauth setpassword - Change player passwords
• /zauth disable2fa - Remove player 2FA
• /zauth forcelogin - Force authenticate players
• /zauth logout - Force player logout

Platform Support

• Velocity proxy support
• BungeeCord proxy support
• Spigot backend guard
• Paper backend guard
• Purpur backend guard
• Folia backend guard

Database Support

• SQLite for simple local setups
• MySQL for shared network databases
• MariaDB for MySQL-compatible hosting
• PostgreSQL for advanced database setups

Performance Focused

• Authentication processing happens on the proxy
• Backend guards stay lightweight
• Backend servers do not need direct database connections
• Database work is handled asynchronously
• Designed for multi-server Minecraft networks
• Clean proxy-to-backend authentication flow

Requirements

• Java 21+
• Velocity or BungeeCord proxy
• Supported backend server software
• A database if using MySQL, MariaDB, or PostgreSQL

Best For

• Minecraft networks using Velocity or BungeeCord
• Offline-mode proxy networks that need secure authentication
• PvP, survival, SMP, lifesteal, prison, and skyblock networks
• Server owners who want login protection without heavy backend setup
• Networks that need session login and authenticator-based 2FA
• Setups that want clean proxy-side authentication with backend protection

Why It Stands Out

• Built around a proxy-first architecture
• Keeps backend servers protected until authentication is confirmed
• Does not require every backend server to connect to the database
• Supports modern platforms like Paper, Purpur, and Folia
• Includes authenticator 2FA for stronger account security
• Clean command structure for both players and administrators
• Lightweight design made for real Minecraft networks