Elytrium / LimboAuth

Minecraft Auth System for Velocity proxy built in virtual server (Limbo). Built with LimboAPI.
GNU Affero General Public License v3.0
180 stars 74 forks source link

Adding unsafe username and password set #175

Open WaterArchery opened 2 weeks ago

WaterArchery commented 2 weeks ago

This PR helps server owners to add a protection for the leaked user credentials from other servers. For example https://haveibeenpwned.com/PwnedWebsites#CraftRise CraftRise leaked 2.5m user info with their passwords.

Server owners can simply add the leaked username and password combinations in "unsafe_pass_user_set.txt" file with "user:pass" format. When a player tries to register with a password that is in the leak list with his user name, he will receive an error.