# ##                          ##
# ##         EasyAuth         ##
# ##  Extended Configuration  ##
# ##                          ##

# Allow chat messages to be sent by players who are not logged in.
allow-chat=false
# 
# Allow players to use all commands while not logged in.
allow-commands=false
# 
# List of allowed commands for players who are not logged in.
allowed-commands=[]
# 
# Allow players to move while not logged in.
allow-movement=false
# 
# Allow players to interact with blocks while not logged in.
allow-block-interaction=false
# 
# Allow "right-clicking" on an entity (e.g. clicking on villagers) by players who are not logged in.
allow-entity-interaction=false
# 
# Allow players to punch blocks while not logged in.
allow-block-breaking=false
# 
# Allow players to attack entities while not logged in.
allow-entity-attacking=false
# 
# Allow players to drop items while not logged in.
allow-item-dropping=false
# 
# Allow players to move items in their inventory while not logged in.
allow-item-moving=false
# 
# Allow players to use items while not logged in.
allow-item-using=false
# 
# Allow custom payload and custom click action packets to be processed by non-op players (op level 0 or 1) while not logged in.
allow-custom-packets-for-non-op=false
# 
# Allow custom payload and custom click action packets to be processed by all players while not logged in.
# Note: this setting overrides allowCustomPacketsForNonOp.
allow-custom-packets=false
# 
# List of allowed custom packet identifiers for players who are not logged in.
# Works similarly to allowedCommands by checking packet identifier prefix.
# For custom payload packets, use channel identifiers (e.g. voicechat:request_secret).
# With debug logging enabled, you can see declined custom packets in the console with their identifiers.
allowed-custom-packets=[]
# 
# Allow all packets to be processed while not logged in.
# Note: this setting overrides allowCustomPackets.
allow-all-packets=false
# 
# Hide player's inventory from them while not logged in.
hide-inventory=true
# 
# If player should be invulnerable before authentication.
player-invulnerable=true
# 
# If player should be ignored by mobs before authentication.
player-ignored=true
# 
# Cancellation of packets with player's movement and teleportation back leads to an increase number of these packets.
# That setting limits players teleportation.
# This setting is per-player so maximum rate would be (1000/teleportation-timeout-ms) per seconds for each unauthorised player.
# Value 0 would effectively disable this setting so players will be teleported after each packet.
teleportation-timeout-ms=20
# 
# List of aliases for commands.
aliases {
    # 
    # `/l` for `/login`
    login=true
    # 
    # `/reg` for `/register`
    register=true
}
# 
# Try to rescue player if they are stuck inside a portal on logging in.
# For more information, see https://github.com/NikitaCartes/EasyAuth/wiki/Portal-Rescue
try-portal-rescue=true
# 
# Minimum length of a password.
min-password-length=4
# 
# Maximum length of a password.
# -1 for no limit.
max-password-length=-1
# 
# Regex for validation of player names.
# For more information, see https://github.com/NikitaCartes/EasyAuth/wiki/Username-Restriction
username-regexp="^[a-zA-Z0-9_]{3,16}$"
# 
# Allow floodgate players to bypass regex check.
floodgate-bypass-regex=true
# 
# Prevents player being kicked because another player with the same name has joined the server.
prevent-another-location-kick=true
# 
# Whether to modify player uuids to offline style.
# Note: this should be used only if you had your server
# running in offline mode, and you made the switch to use
# AuthConfig#premiumAutoLogin AND your players already
# have e.g. villager discounts, which are based on uuid.
# Other things (advancements, playerdata) are migrated
# automatically, so think before enabling this. In case
# an online-mode player changes username, they'll lose all
# their stuff, unless you migrate it manually.
forced-offline-uuid=false
# 
# Skip all authentication checks for all players.
# Intended for use with proxies that handle authentication
skip-all-auth-checks=false
# 
# If true, 'skipAllAuthChecks' does not apply to registered players.
skip-all-auth-checks-not-for-registered-players=true
# 
# If true, 'skipAllAuthChecks' does not apply to operator (op level >=2) players.
skip-all-auth-checks-not-for-operators=true
# 
# Allow players to join the server with same username as previously registered player, but in different case.
allow-case-insensitive-username=false
# 
# Time in seconds before a player is prompted to authenticate again.
authentication-prompt-interval=10
# 
# Connection settings for the Mojang API.
mojang-api-settings {
    # 
    # URL of the Mojang API.
    url="https://api.minecraftservices.com/minecraft/profile/lookup/name/"
    # 
    # Connection timeout in milliseconds.
    connection-timeout=5000
    # 
    # Read timeout in milliseconds.
    read-timeout=5000
}
# 
# Log player registration as info level log.
log-player-registration=false
# 
# Log player login as info level log.
log-player-login=false
# 
# Prevent offline players from joining the server using online usernames.
prevent-offline-players-with-online-usernames=false
# 
# Check offline players with online usernames every time they join the server for online account.
check-offline-players-with-online-usernames=false
# 
# IP Limit Settings - Restrict the number of accounts that can be registered/logged in from the same IP address.
ip-limit {
    # 
    # Enable IP-based account limit.
    # When enabled, limits the number of accounts that can be registered/logged in from the same IP address.
    enabled=false
    # 
    # Maximum number of accounts allowed per IP address.
    # Set to -1 to disable the limit.
    max-accounts-per-ip=2
    # 
    # Block registration attempts when the IP limit is exceeded.
    # If false, players can still register but admins will be notified.
    block-excess-registration=true
    # 
    # Notify admins (players with op level >=3) when a new IP address attempts to exceed the account limit.
    notify-admins=true
    # 
    # List of IP addresses that are exempt from the limit (e.g., localhost, trusted IPs).
    exempt-ips=[
        "127.0.0.1",
        localhost
    ]
    # 
    # Cache expiry time in seconds for IP account count cache.
    # Lower values mean more frequent database queries but more accurate counts.
    cache-expiry-seconds=300
    # 
    # Maximum number of concurrent online sessions allowed from the same IP address.
    # Set to -1 to disable the limit.
    # This check is performed at player join time.
    max-concurrent-sessions-per-ip=-1
    # 
    # Whether online (premium) players are exempt from the concurrent session limit.
    # If true, premium players that auto-login will not be blocked by the session limit.
    exempt-online-players=false
}