hlAuth — authentication for Hytale servers

A full authentication plugin for Hytale servers. Protects your server from outsiders: until a player logs in or registers, they cannot play normally or use chat.

Who it's for

• Online servers with open or mixed access
• Servers with both Premium and offline players
• Admins who want a familiar “register → login” flow, like AuthMe

Features

• Registration and login via native Hytale UI menus (the menu cannot be closed until authenticated)
• The same actions via commands: /login, /register, /logout, /changepassword, /unregister
• Support for Premium and offline accounts
• Optional Premium verification via playerdb.co: auto-login for verified Premium players
• Auto-registration for Premium without a password (enabled in config)
• Anti-spoofing: offline players cannot take a Premium name and vice versa
• Sessions: on quick reconnect from the same IP, re-entering the password is not required
• Secure password hashes (PBKDF2), compatible with legacy AuthMe $SHA$ format
• Admin commands /hlauth (alias /authme): register, unregister, change password, info, reload
• LuckPerms permissions: hlauth.player.* / hlauth.admin.*
• Localization RU/EN, all texts in messages/
• Accounts stored in accounts.json — simple and transparent

Configuration

In config.json you can enable/disable UI, Premium checks, Premium auto-registration, sessions, login timeout, accounts-per-IP limit, chat protection, and more. Every option has Russian and English comments.

Installation

• Copy hlAuth-X.X.X.jar into the mods folder
• Restart the server
• Configure mods/HytaleNet_hlAuth/config.json for your server

Suitable for both private and public servers — one plugin covers basic authentication without unnecessary complexity.