SecureRole is a protection plugin for minecraft servers(Bukkit/Spigot, Paper, Purpur & more).
This plugin is a second way to authenticate server admins with their discord account.
It is:
Fast
reliable
easy to use
free
SecureRole unlike other plugins removes all the permissions from the admin until he authenticates his login.
The plugin doesn't use any plugin as depency, but it is usable with Authme and with LuckPerms.
The plugin doesn't need any discord bot tokens, it's operated with webhooks only.
Code (Text):
users:
example-user:
webhook-url: "user1 url"
authed-role: "owner"
discord-id: "" #Set it to "" if you don't want to mention the user
op: true
ip: "127.0.0.1"
rank-on-join: 'default' # works only when luckperms is installed.
domain: "" # keep this empty if you want the link to write localhost, write it to anything to change it.
send-link-after-authme-login: false # only works if authme is in your server.
webserver-port: 4874
link-validation-time: 300 #in seconds
remove-op: true
execute-command-if-ip-mismatch: "kick %player% Your ip address is mismatched." # place empty string if you want to disable.
gamemode-before-auth: "survival" #available gamemodes: "survival", "creative", "adventure". DEFAULT IS SURVIVAL.
store-players-ip: false
discord:
embed-style: false
default:
message: "%usermention% Someone joined with an admin account, if it was you, please open this link: %click here%" #if you want to send the raw link, write %default%, if not, write anything else between two percentagle symbol.
embed:
title: "SecureRole"
description: "Someone joined with an admin account, if it was you, please open this link: %click here%" #if you want to send the raw link, write %default%, if not, write anything else between two percentagle symbol.
color: "#800020"
footer: "Server secured by - SecureRole"
You can add users by UUID and with names too.
You can set personal webhook url's that only the exact player can see/access.
You can set the player's role to give after authentication.
You can set the player's discord id to mention the user when someone tries to log in into his account.
You can remove/give operator permission to the user after authentication.