# 🌟 xLogin v1.0.8-Pre — Universal Authentication System
A powerful, all-in-one authentication solution designed for high-performance networks and standalone servers. This update brings full cross-platform compatibility, database-free proxy setups, and critical security fixes.
---
## ✨ Main Features
* **Universal Compatibility:** A single `.jar` file works simultaneously across **Paper/Spigot**, **Velocity**, **BungeeCord**, and **Waterfall**.
* **Database-Free Proxy Mode:** The proxy module (Velocity/Bungee) can now operate completely **without a MySQL database**. If no database is configured, it automatically falls back to the official Mojang API to detect premium accounts.
* **Session Caching:** Players switching between backend servers within the same network won't need to re-authenticate during the configured session lifetime.
* **Strict Pre-Auth Restrictions:** Unauthenticated players are completely restricted from moving, moving their camera, chatting, opening inventories, or executing unauthorized commands.
* **Login Timeout:** Automatically kicks players who fail to log in within a customizable time limit.
* **Message Anti-Spam:** Configurable intervals for login/register reminder messages to keep the player chat clean.
* **Dynamic Command Hiding:** Safely hides `/login`, `/register`, and `/captcha` from the tab-complete suggestions immediately after a player authenticates (can be toggled on/off).
---
## 🔧 Security & Fixes
* **Premium Registration Fix:** Solved issues regarding `auto-premium-registration`. When disabled, premium players without an existing account must register manually as intended.
* **Automatic Message Fallback:** Older `.yml` configuration files will no longer trigger `Missing:` translation strings. The plugin now automatically reads missing keys from the default language files inside the `.jar`.
* **Smarter Proxy Communication:** When running in proxy mode, backend Paper servers will no longer query the Mojang API, optimizing performance by trusting the Proxy's UUID generation ($v4$ for premium, $v3$ for offline accounts).
---
## 💻 New Commands & Permissions
### 👥 Player Commands
* `/premium` — Safely toggles premium mode (Available on proxy networks).
* `/changepassword <old> <new>` — Allows players to change their current password.
* `/unregister <password>` — Unregisters the player's own account.
### 🛡️ Admin Commands (`/xlogin`)
* `/xlogin delacc <player>` — Permanently deletes a player's account.
* `/xlogin forcelogin <player>` — Forces a player into an authenticated state.
* `/xlogin blockip <ip>` — Blocks a specific IP address.
* `/xlogin unblockip <ip>` — Unblocks a specific IP address.
Developer information
Projects on Modrinth are automatically available through a Maven repository for use with JVM build tools such as Gradle.
maven { name = "Modrinth"; url = "https://api.modrinth.com/maven" }