AuthMe / AuthMeReloaded

The best authentication plugin for the Bukkit/Spigot API!
https://www.spigotmc.org/resources/authmereloaded.6269/
GNU General Public License v3.0
628 stars 515 forks source link

more permissions #1377

Open KonoromiHimaries opened 6 years ago

KonoromiHimaries commented 6 years ago

add more permissins to better configuration this plugin

this https://github.com/AuthMe/AuthMeReloaded/blob/master/docs/config.md transfer to https://github.com/AuthMe/AuthMeReloaded/blob/master/docs/permission_nodes.md

explain

settings:
    sessions:
        # Do you want to enable the session feature?
        # If enabled, when a player authenticates successfully,
        # his IP and his nickname is saved.
        # The next time the player joins the server, if his IP
        # is the same as last time and the timeout hasn't
        # expired, he will not need to authenticate.
        enabled: false
        # After how many minutes should a session expire?
        # A player's session ends after the timeout or if his IP has changed
        timeout: 10

e.g to enabled session for player or group have this permission - authme.custom.session

to set timeout time for player or group have this permission - authme.custom.session.timeout.10minutes

    restrictions:
        # Can not authenticated players chat?
        # Keep in mind that this feature also blocks all commands not
        # listed in the list below.
        allowChat: false
        # Hide the chat log from players who are not authenticated?
        hideChat: false

allow chat for player or group have this permission - authme.custom.restriction.allowchat

hide chat for player or group have this permission - authme.custom.restriction.hidechat

and more, or more..

krusic22 commented 6 years ago

Look interesting but should be done in such a way that it doesn't affect existing configurations.

sgdc3 commented 6 years ago

What are you trying to achieve with that?

KonoromiHimaries commented 6 years ago

@sgdc3 archieve? i not trying any archieve.

ljacqu commented 6 years ago

achieve

KonoromiHimaries commented 6 years ago

@ljacqu ok, thx.

@sgdc3 i trying to achieve most configurable authme plugin : )

sgdc3 commented 6 years ago

achieve

Sorry xD Remember, i'm a stupid italian clown xD

7wOv6ySCjo commented 5 years ago

Can add this feature? A permission like 'authme.session.forever' so the player with that permission will never write his password.

It should also be added that the player's session is not lost if the server restarts. It's very important. Only the session will be lost if the player's ip or nick changes.

lifehome commented 5 years ago

@7wOv6ySCjo This is so insecure, that neither feasible or secure to the server. A session that last forever should never exists, to protect the user from illegal access to their accounts.

If you are worried about remembering password, session is already doing its job to remember for the player, for a certain period. By implementing an eternal session are by far the same to turn off registration or even disable the use of this plugin...