s8n/auth-limbo
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1
No description
11 commits 2 branches 0 tags 125 KiB
Java 100%
Find a file
s8n afea34badc fix(login): F1+F2+F4 — void-death guard, retry recovery, AuthMe pre-empt 
Closes the YOU500 inventory-loss path documented in AUDIT-2026-05-07.md.
Bumps to 1.1.0 per CHANGELOG.

F1 — void-damage guard: new EntityDamageEvent listener at HIGHEST,
ignoreCancelled=true. While a UUID sits in pendingTransit, DamageCause.VOID
is cancelled, the player is healed to 20.0, fall/fire reset, sync-TP back
to limbo spawn. Console gets a WARN with intended TP target. This single
guard would have saved YOU500's inventory.

F2 — recovery on teleportAsync false / exception: replaces the previous
log-only branch in doTeleport. On failure: sync-TP to limbo spawn, bump
per-UUID retry counter, schedule retry after 30 ticks. After MAX_RETRIES=3
failures: leave at limbo spawn in GameMode.SPECTATOR, log SEVERE with full
saved coords + reason, alert console for manual `/authlimbo tp` action.
Player stays in pendingTransit across retries so F1 keeps protecting them.

F4 — pre-empt AuthMe's broken teleport: new LoginEvent handler at
EventPriority.LOWEST that adds the UUID to pendingTransit and sync-TPs
the player to limbo spawn BEFORE AuthMe-ReReloaded's own internal
post-login teleport runs. AuthMe's teleport then operates against an
irrelevant location; the existing MONITOR handler still wins last with
the authoritative restore. Net effect: closes the void-death window even
when the saved chunk is far out and slow to load.

Internal: ConcurrentHashMap-backed pendingTransit set + retryCounts map,
both watchdog-timed-out after 5 s so we never leak entries on edge cases.
No new Maven dependencies.

Privacy invariant unchanged — F4 actually strengthens limbo-on-join by
guaranteeing the limbo position is reasserted at LOGIN-LOWEST.

Build: mvn -B clean package (in maven:3.9-eclipse-temurin-21 container) ->
BUILD SUCCESS, AuthLimbo-1.1.0.jar produced.
2026-05-07 17:50:00 +01:00
.github Rename: LoginLimbo -> AuthLimbo 2026-04-30 19:19:26 +01:00
docs Rename: LoginLimbo -> AuthLimbo 2026-04-30 19:19:26 +01:00
lib Initial commit: RackedLimbo 1.0.0 2026-04-30 18:23:13 +01:00
src/main fix(login): F1+F2+F4 — void-death guard, retry recovery, AuthMe pre-empt 2026-05-07 17:50:00 +01:00
.gitignore Initial commit: RackedLimbo 1.0.0 2026-04-30 18:23:13 +01:00
AUDIT-2026-05-07.md docs: incident audit + roadmap for 2026-05-07 void-death 2026-05-07 17:33:07 +01:00
CHANGELOG.md fix(login): F1+F2+F4 — void-death guard, retry recovery, AuthMe pre-empt 2026-05-07 17:50:00 +01:00
LICENSE License: switch to AGPL-3.0-or-later 2026-04-30 19:31:34 +01:00
pom.xml fix(login): F1+F2+F4 — void-death guard, retry recovery, AuthMe pre-empt 2026-05-07 17:50:00 +01:00
README.md readme: restyle to match minecraft-launcher format 2026-05-05 05:09:34 +01:00
ROADMAP.md docs: incident audit + roadmap for 2026-05-07 void-death 2026-05-07 17:33:07 +01:00

README.md

auth-limbo


Download latest jar

Paper Java Build

a small paper plugin - fixes AuthMe's broken post-login teleport

built for my server, runs there daily.

Issues · Releases

What it does

Two things.

  1. Void auth_limbo world. Custom ChunkGenerator, 5x5 barrier platform under spawn. AuthMe uses it as pre-auth limbo. No Multiverse-Core required.
  2. Restore-teleport that actually works. LoginEvent listener at MONITOR priority reads quit-location from plugins/AuthMe/authme.db, pins destination chunk via addPluginChunkTicket, chains getChunkAtAsyncUrgently into teleportAsync. No spawn-snap.

Bug background: PaperMC/Paper#4085.

Install

  1. Download AuthLimbo-1.0.0.jar from Releases.
  2. Drop in plugins/.
  3. Restart server. Don't /reload.

Hard dep: AuthMe-ReReloaded. Plugin refuses to load without it.

For itzg/minecraft-server Docker image, see docs/installation.md.

Config

Defaults work. plugins/AuthLimbo/config.yml on first start:

limbo:
  world: auth_limbo
  spawn-x: 0.5
  spawn-y: 128.0
  spawn-z: 0.5
  build-platform: true
  platform-y: 127
authme:
  db-path: plugins/AuthMe/authme.db
  teleport-delay-ticks: 10
  preload-chunks: true
debug: false

Full reference: docs/configuration.md.

Commands

Command Permission Effect
/authlimbo reload authlimbo.admin Reload config.yml.
/authlimbo tp <player> authlimbo.admin Teleport player to saved location.

Alias: /alimbo.

Tested

Component Status
Paper 1.21.11 Yes
Purpur 1.21.11 Yes
Folia Untested — login event threading may differ
AuthMe-ReReloaded (HaHaWTH b49) Yes
AuthMe-ReReloaded other 5.x forks Untested — schema same, should work
Multiverse-Core Untested — possible teleport-intercept conflict, see docs/compatibility.md

Build from source

mvn clean package

Shaded jar lands at target/AuthLimbo-1.0.0.jar. Java 21, Maven 3.9. lib/AuthMe-5.6.0-FORK-Universal.jar is system-scope so build needs no private repo credentials.

CI builds via GitHub Actions on every tag.

AGPL-3.0 — modified network-deployed builds must offer source per §13. Built by s8n-ru.