--- name: AuthMe Reloaded version: "5.7.0-b2660" license: GPL-3.0 source: github source_url: https://github.com/AuthMe/AuthMeReloaded/releases/download/5.7.0/AuthMe-5.7.0.jar acquisition: PLUGINS (direct GH URL) purpose: Auth on cracked server — prevent coord leaks before login --- Replaced LoginSecurity (upstream archived, unmaintained). Cracked server requirement — players must register/login before interacting with world. ## Security config - `teleportUnAuthedToSpawn: true` — TP to auth_limbo on join, not actual location - `SaveQuitLocation: true` — restore position post-login - `hideInventory: true` — hides inv from other players until logged in (requires ProtocolLib) - `allowMovement: false`, `allowedMovementRadius: 0` — locked in place - `timeout: 60` — kick if no login within 60s - Spawn world: `auth_limbo` (void END-type dimension, sealed 3×3×4 barrier cube at 0,128,0) ## Post-login hook `commands.yml` — onLogin/onFirstLogin/onSessionLogin all run: ``` mvtp %p world (CONSOLE, delay: 5 ticks) ``` ## Notes - `auth_limbo`: END dimension, no structures, no ender dragon, void floor — players see black void, cannot move - ProtocolLib required for inventory hide feature