\n
\n
\n
\n
\n
**NotEnoughAuth** is a **Paper (1.21.7+)** plugin that allows you to authenticate players using **OAuth2 providers** (_Google, GitHub, GitLab, Discord, Twitch, Telegram_) based on the Dialog functionality.<\/p>\n
How to set up \u2014 scroll down to the **\ud83e\ude84 Configuration** section.<\/p>\n
### \ud83d\udc40 Screenshots<\/p>\n
\n
\n
\n
\n
\n<\/p>\n
* While you authenticate, you will see the ‘Joining world…’ screen.<\/b>
\n* After successfully authenticating, you will be automatically redirected to the server after the ‘Joining world…’ screen.<\/b><\/p>\n
### \ud83e\uddf6 How it works?<\/p>\n
Each player session has a hash describing the state of the client, and it is checked against the database (`data.yml`) each time a player joins.
\nIf sessions match – proceed to the server. If they don’t, force the authentication.<\/p>\n
The session hash is composed of multiple factors:
\n– IP address [`Player.getClientAddress()`)]
\n– View distance [`ClientOption.VIEW_DISTANCE`]
\n– Flag to allow server listings [`ClientOption.ALLOW_SERVER_LISTINGS`]
\n– Locale [`ClientOption.LOCALE`]
\n– Chat visibility [`ClientOption.CHAT_VISIBILITY`]
\n– Skins parts [`ClientOption.SKIN_PARTS`]<\/p>\n
### \ud83d\udcbb Commands<\/p>\n
– `\/link` \u2014 opens a dialog to link an additional OAuth2 provider to your account.
\n– `\/unlink` \u2014 opens a dialog to unlink an OAuth2 provider from your account.
\n– `\/logout` \u2014 terminates your current session hash, requires authentication on next join.
\n– `\/auth info` \u2014 see a list of available commands.
\n– `\/auth reload` \u2014 reloads the plugin.<\/p>\n
Aliases: `\/nea`, `\/notenoughauth`.<\/p>\n
### \ud83d\udd1e Permissions<\/p>\n
– `notenoughauth.admin` _(for **operators** by default)_ \u2014 Allows to use `\/auth reload`.
\n– `notenoughauth.default` _(**true** by default)_ \u2014 Allows to use the `\/auth info` command.
\n– `notenoughauth.link` _(**true** by default)_ \u2014 Allows to use the `\/link` command.
\n– `notenoughauth.unlink` _(**true** by default)_ \u2014 Allows to use the `\/unlink` command.<\/p>\n
### \ud83d\udcc4 Default config<\/p>\n
**[CAUTION]** **Don’t forget** to put your **public IP** into the `webIp` field.
\nAlso, you should **open the TCP port** on your machine for the plugin to work. Port **4177** by default<\/i>.
\n**Otherwise, nothing will work.**<\/p>\n
“`yaml
\n# After setting ‘webIp’ and ‘webPort’, take a look at the console output;
\n# You will see a list of OAuth2 redirect URLs – copy these and paste them into your OAuth provider settings (e.g., Google, GitHub) when creating the application credentials.
\nwebIp: “127.0.0.1”
\nwebPort: 4177<\/p>\n
# Defines whether auth redirect links will contain “http” or “https”;
\n# For example, if you use Nginx\/Apache as a reverse proxy (’80’ \u2192 ‘4177’) and Cloudflare for SSL certificate, set this to ‘true’;
\n# For local testing, you may leave this as ‘false’.
\nuseHttps: false<\/p>\n
# If you use tunneling software (such as ‘playit.gg’ or ‘ngrok’), you may use this field for overriding the base URL (e.g., ‘https:\/\/4be8-112-41-125-11.ngrok-free.app’).
\noverriddenRedirectUrlBase: “”<\/p>\n
# Time for a player to pass the auth process (in seconds).
\ntimeout: 90<\/p>\n
# Link for creating Google application: https:\/\/console.cloud.google.com\/apis\/credentials
\ngoogle:
\n enabled: true
\n clientId: “YOUR_GOOGLE_CLIENT_ID”
\n secret: “YOUR_GOOGLE_CLIENT_SECRET”<\/p>\n
# Link for creating GitHub application: https:\/\/github.com\/settings\/developers
\ngithub:
\n enabled: true
\n clientId: “YOUR_GITHUB_CLIENT_ID”
\n secret: “YOUR_GITHUB_CLIENT_SECRET”<\/p>\n
# Link for creating GitLab application: https:\/\/gitlab.com\/-\/user_settings\/applications
\ngitlab:
\n enabled: true
\n clientId: “YOUR_GITLAB_APPLICATION_ID”
\n secret: “YOUR_GITLAB_SECRET”<\/p>\n
# Link for creating Discord application: https:\/\/discord.com\/developers\/applications
\ndiscord:
\n enabled: true
\n clientId: “YOUR_DISCORD_CLIENT_ID”
\n secret: “YOUR_DISCORD_CLIENT_SECRET”<\/p>\n
# Link for creating Twitch application: https:\/\/dev.twitch.tv\/console\/apps\/create
\ntwitch:
\n enabled: true
\n clientId: “YOUR_TWITCH_CLIENT_ID”
\n secret: “YOUR_TWITCH_CLIENT_SECRET”<\/p>\n
# Link to Telegram documentation: https:\/\/core.telegram.org\/bots\/telegram-login#tldr
\ntelegram:
\n enabled: true
\n clientId: “YOUR_TELEGRAM_BOT_CLIENT_ID”
\n secret: “YOUR_TELEGRAM_BOT_CLIENT_SECRET”<\/p>\n
messages: ### \ud83d\ude80 Installation<\/p>\n **[IMPORTANT]** Before getting started, make sure that the plugin’s version is **compatible** with your server version.<\/p>\n 1. Download the latest version of the plugin from the Releases tab. ### \ud83e\ude84 Configuration<\/p>\n **[CAUTION]** **Never share your client secrets, bot tokens, or any other credentials** shown in your `config.yml`. Anyone with access to these can impersonate your application. **Prerequisites**: **How to configure specific providers**:<\/p>\n 1. Follow the link to open Google Cloud Console: https:\/\/console.cloud.google.com\/apis\/credentials<\/b><\/p>\n 1. Create a project: 1. Click “Create credentials”<\/b> \u2192 “OAuth client ID”<\/b>: 1. Set **”Application type”** to **”Web application”** and provide it with a name: 1. Enter `\/auth reload` and copy the link for Google callback _(before that, make sure to populate `webIp` in the configuration with your server public IP or domain)_: 1. Add the link from the console to the **”Authorized redirect URIs”** section and click **”Create”**: 1. Copy both **”Client ID”** and **”Client Secret”**: 1. In the `google` section, replace `YOUR_GOOGLE_CLIENT_ID` and `YOUR_GOOGLE_CLIENT_SECRET` with the obtained credentials: 1. \u2705 Enter the `\/auth reload` and enjoy!<\/p>\n<\/details>\n 1. Follow the link to open GitHub Developer Settings: https:\/\/github.com\/settings\/developers<\/b><\/p>\n 1. Click **”New OAuth App”**: 1. Enter `\/auth reload` and copy the link for GitHub callback _(before that, make sure to populate `webIp` in the configuration with your server public IP or domain)_: 1. Fill in **”Application name”**, **”Homepage URL”**, and paste the redirect URL from the plugin console into the **”Authorization callback URL”** field, then click **”Register application”**: 1. Copy the **”Client ID”**, then click **”Generate a new client secret”** and copy the generated secret: 1. In the `github` section, replace `YOUR_GITHUB_CLIENT_ID` and `YOUR_GITHUB_CLIENT_SECRET` with the obtained credentials: 1. \u2705 Enter `\/auth reload` and enjoy!<\/p>\n<\/details>\n 1. Follow the link to open GitLab User Application Settings: https:\/\/gitlab.com\/-\/user_settings\/applications<\/b><\/p>\n 1. Click **”Add new application”**: 1. Enter `\/auth reload` and copy the link for GitLab callback _(before that, make sure to populate `webIp` in the configuration with your server public IP or domain)_: 1. Fill in the **”Name”** field, paste the redirect URL from the plugin console into the **”Redirect URI”** field, and select the **`read_user`** scope, then click **”Save application”**: 1. Copy both the **”Application ID”** and the **”Secret”**: 1. In the `gitlab` section, replace `YOUR_GITLAB_APPLICATION_ID` and `YOUR_GITLAB_SECRET` with the obtained credentials: 1. \u2705 Enter `\/auth reload` and enjoy!<\/p>\n<\/details>\n 1. Follow the link to open the Discord Developer Portal: https:\/\/discord.com\/developers\/applications<\/b><\/p>\n 1. Click **”New Application”**, enter a name for your application, and click **”Create”**: 1. In the left sidebar, select the **”OAuth2″** tab. Copy the **”Client ID”** and **”Client Secret”**: 1. Enter `\/auth reload` and copy the link for Discord callback _(before that, make sure to populate `webIp` in the configuration with your server public IP or domain)_: 1. Under the **”Redirects”** section on the same OAuth2 page, click **”Add Redirect”**, paste the redirect URL from the plugin console, and click **”Save Changes”**: 1. In the `discord` section, replace `YOUR_DISCORD_CLIENT_ID` and `YOUR_DISCORD_CLIENT_SECRET` with the obtained credentials: 1. \u2705 Enter `\/auth reload` and enjoy!<\/p>\n<\/details>\n 1. Follow the link to open the Twitch Developer Console: https:\/\/dev.twitch.tv\/console\/apps\/create<\/b><\/p>\n 1. Enter `\/auth reload` and copy the link for Twitch callback _(before that, make sure to populate `webIp` in the configuration with your server public IP or domain)_: 1. Fill in the **”Name”** field, paste the redirect URL from the plugin console into the **”OAuth Redirect URLs”** field and click **”Add”**, then choose any **”Category”** (e.g. _”Website Integration”_), and click **”Create”**: 1. Back on the **”Applications”** list, find your newly created app and click **”Manage”**: 1. Copy the **”Client ID”**, then click **”New Secret”** and copy the generated **”Client Secret”**: 1. In the `twitch` section, replace `YOUR_TWITCH_CLIENT_ID` and `YOUR_TWITCH_CLIENT_SECRET` with the obtained credentials: 1. \u2705 Enter `\/auth reload` and enjoy!<\/p>\n<\/details>\n 1. Open Telegram and start a chat with **@BotFather**: https:\/\/t.me\/BotFather<\/b><\/p>\n 1. Open the **@BotFather** Mini App, click **”Create a New Bot”** and proceed with the form: 1. Once the bot is created, go to the **”Login Widget”** tab: 1. Click on the **”Switch to OpenID Connect Login”**: 1. Copy the **”Client ID”** and the **”Client Secret”**: 1. Enter `\/auth reload` and copy the base domain\/IP for the Telegram callback _(before that, make sure to populate `webIp` in the configuration with your server public IP or domain)_: 1. Under the **”Redirect URIs”** section, click **”Add a Redirect URI”**, paste the redirect URL from the plugin console: 1. In the `telegram` section, replace `YOUR_TELEGRAM_BOT_CLIENT_ID` and `YOUR_TELEGRAM_BOT_CLIENT_SECRET` with the obtained credentials: 1. \u2705 Enter `\/auth reload` and enjoy!<\/p>\n<\/details>\n ### \ud83d\udd01 SSL certificates and HTTPS<\/p>\n **[NOTE]** If you don’t own a domain, tunneling software like ngrok or playit.gg can also provide an HTTPS URL – use the `overriddenRedirectUrlBase` field in `config.yml` for that.<\/p>\n Some OAuth2 providers require you to own a domain, and in some cases, an SSL certificate (i.e., to use ‘https’).<\/p>\n You can purchase a domain at websites such as Cloudflare, Spaceship. Table of OAuth2 providers and their agility: Minecraft Paper plugin (1.21.7+) that brings OAuth authentication and allows players to login\/register using multiple providers [Google, GitHub, GitLab, Discord, Twitch, Telegram].<\/p>\n","protected":false},"featured_media":113739,"template":"","meta":{"_minecraft_slug":"not-enough-auth","_minecraft_project_id":"CbZqG1CH","_minecraft_author":"MrQuackDuck","_minecraft_license":"MIT","_minecraft_downloads":6,"_minecraft_follows":2,"_minecraft_client_side":"unsupported","_minecraft_server_side":"required","_minecraft_storage_type":"zip","_minecraft_archive_name":"not-enough-auth.zip","_minecraft_size_bytes":557385,"_minecraft_version_count":1,"_minecraft_updated_at":"2026-05-16T12:16:30.746340Z","_minecraft_date_created":"2026-05-08T04:03:38.270955Z","_minecraft_date_modified":"2026-05-05T18:47:11.794861Z","_minecraft_project_url":"https:\/\/modrinth.com\/mod\/not-enough-auth","_minecraft_icon_attachment_id":113739,"_minecraft_imported_at":"2026-06-06T16:48:26+00:00","_minecraft_import_hash":"dc065a2d7a4f180e445a9baa1db6d56a","_minecraft_versions":"","_minecraft_links":"","_minecraft_gallery":"","_minecraft_api_metadata":""},"mod_category":[126,127,128,867,92],"mod_loader":[132,133],"minecraft_version":[40,41,80,81,82,83,167,163],"class_list":["post-113738","mod","type-mod","status-publish","has-post-thumbnail","hentry","mod_category-management","mod_category-paper","mod_category-purpur","mod_category-social","mod_category-utility","mod_loader-paper","mod_loader-purpur","minecraft_version-1-21-10","minecraft_version-1-21-11","minecraft_version-1-21-7","minecraft_version-1-21-8","minecraft_version-1-21-9","minecraft_version-26-1","minecraft_version-26-1-1","minecraft_version-26-1-2"],"yoast_head":"\n
\n “prefix”: “&#C8D1DE[NotEnoughAuth]”
\n “auth-required”: “&fAuthentication required to join this server.”
\n “title”: “&#FFDB60Welcome!”
\n “description”: “Let’s verify it’s you using OAuth2.nYou will be prompted to open your browser.”
\n “google”: “&#D5DEEAGoogle Account”
\n “google-hover”: “Click for Google authentication”
\n “github”: “&#D5DEEAGitHub Account”
\n “github-hover”: “Click for GitHub authentication”
\n “gitlab”: “&#D5DEEAGitLab Account”
\n “gitlab-hover”: “Click for GitLab authentication”
\n “discord”: “&#D5DEEADiscord Account”
\n “discord-hover”: “Click for Discord authentication”
\n “twitch”: “&#D5DEEATwitch Account”
\n “twitch-hover”: “Click for Twitch authentication”
\n “telegram”: “&#D5DEEATelegram Account”
\n “telegram-hover”: “Click for Telegram authentication”
\n “auth-success”: “Authentication successful.”
\n “auth-success-description”: “You can now return to Minecraft.”
\n “auth-failed”: “Authentication failed.”
\n “account-mismatch”: “This Minecraft account is linked to a different account in this OAuth provider.”
\n “provider-mismatch”: “This provider isn’t linked to this player’s account.”
\n “invalid-state”: “Invalid or expired state. Please try again.”
\n “timeout”: “Timeout.”
\n “link-title”: “&#FFDB60Link a provider”
\n “link-description”: “You may &#A4D400&nlink&r an additional oAuth2 provider to your account to be able to use it as your additional sign-in option on this server.”
\n “link-hover”: “Click to link this provider”
\n “unlink-title”: “&#FFDB60Unlink a provider”
\n “unlink-description”: “You may choose an account to &#EB4C42&nunlink&r. If needed, you will be able to link the provider again.”
\n “unlink-hover”: “Click to unlink this provider”
\n “unlink-confirm-title”: “&#FFDB60Are you sure?”
\n “unlink-confirm-description”: “This provider will be removed from your account.”
\n “confirm-unlink”: “&#E74C3CConfirm Unlink”
\n “confirm-unlink-hover”: “Permanently unlink this provider”
\n “confirm”: “&#A4D400Confirm”
\n “cancel”: “&#EB4C42Cancel”
\n “back”: “&#EB4C42\u2190 Back”
\n “back-hover”: “Go back to server list”
\n “info-header”: “
\n “info-link”: “n &#D8E5EC&n\/link&r&#ECF4FB – link an additional provider to your account.”
\n “info-unlink”: “n &#D8E5EC&n\/unlink&r&#ECF4FB – unlink one of the providers from your account.”
\n “info-logout”: “n &#D8E5EC&n\/logout&r&#ECF4FB – sign out of the account.”
\n “info-reload”: “n &#D8E5EC&n\/auth reload&r&#ECF4FB – reload the plugin configuration.”
\n “successfully-linked”: “
\n “successfully-unlinked”: “
\n “provider-linked”: “Provider linked successfully!”
\n “logged-out”: “&fYou’ve successfully logged out.”
\n “reloaded”: “
\n “disconnected”: “Disconnected.”
\n “command-not-found”: “
\n “not-enough-permissions”: “
\n “one-provider-left”: “
\n “all-providers-already-linked”: “
\n “rejoin”: “
\n “an-error-occurred”: “
\n“`<\/p>\n
\n1. Put the downloaded `.jar` into the `\/plugins` folder of your server.
\n1. Restart your server or enter the `\/reload` command.<\/p>\n
\nAll credentials visible in the screenshots throughout the guide have been revoked and are no longer valid.<\/p>\n
\n1. Make sure to put your server’s public IP into the `webIp` field in `config.yml`.
\n1. Open a **TCP port** _(**4177** by default)_ on your server equal to the `webPort` field from the `config.yml`.<\/p>\n\n![](https:\/\/upload.wikimedia.org\/wikipedia\/commons\/c\/c1\/Google_\"G\"_logo.svg){kind=logo}
Google<\/b><\/summary>\n<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
\n
GitHub<\/b><\/summary>\n<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
\n
GitLab<\/b><\/summary>\n<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
\n
Discord<\/b><\/summary>\n<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
\n
Twitch<\/b><\/summary>\n<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
\n
Telegram<\/b><\/summary>\n<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
\nDomain price comparison tool and aggregator – https:\/\/tld-list.com\/.<\/p>\n
\n| Provider | Can use without a private domain | Can use without SSL (HTTPS) |
\n|—|—|—|
\n| Google | \u274c | \u2705 |
\n| GitHub | \u2705 | \u2705 |
\n| GitLab | \u2705 | \u2705 |
\n| Discord | \u2705 | \u2705 |
\n| Twitch | \u274c | \u274c |
\n| Telegram | \u2705 | \u2705 |<\/p>\n","protected":false},"excerpt":{"rendered":"