# DiscordAuth Plugin<\/p>\n
A Discord verification authentication plugin for Minecraft servers (Paper 1.21+) by theTWIXhunter. Links player accounts to Discord via DM verification codes or allows password-based authentication using the new dialogs feature.<\/p>\n
## Features<\/p>\n
– **Discord Verification**: Players verify by entering their Discord User ID and receiving a 4-digit code via bot DM
\n– **Backup Password System**: Set backup passwords for when Discord access is lost
\n– **Password-Only Mode**: Allow registration with just a password (no Discord required)
\n– **Multi-Language Support**: Built-in support for multiple languages (English UK, Dutch Belgium)
\n– **Smart Authentication Skip**: Skip login for premium accounts or matching IPs (configurable)
\n– **Account Management**: Players can unlink Discord accounts, logout, and manage passwords
\n– **Security Options**:
\n – Max accounts per Discord account limit
\n – Verification timeout
\n – Force authentication for OPs\/specific permissions
\n– **Experimental Features**:
\n – Discord role sync (grant Minecraft permissions based on Discord roles)
\n – DiscordSRV compatibility mode<\/p>\n
## Commands<\/p>\n
– `\/discordauth ## Permissions<\/p>\n – `discordauth.use` – Allows use of basic commands (default: true) ## Default Configuration # +————————————————————————–+ # Server name (shown in Discord messages) # Discord server invite link (shown when DMs fail) # Maximum number of Minecraft accounts allowed per Discord account (0 = unlimited) # Language file to use (from the languages folder) # Verification timeout in seconds (0 to disable, recommended: 600 for 10 minutes) # Kick players after X failed login attempts (default 3, 0 to disable) # +————————————————————————–+ # Discord verification (default method) # Allow registration without Discord account # Allow players to login with password even when they have Discord linked # +————————————————————————–+ authentication-skip: # Skip authentication when player’s IP matches their last known IP # Skip authentication for specific players (DEBUG ONLY – NOT RECOMMENDED) # Force authentication overrides ## Initial Setup<\/p>\n 1. **Create a Discord Bot** 2. **Configure the Plugin** 3. **Invite the Bot** For detailed setup instructions, visit: https:\/\/thetwixhunter.nekoweb.org\/discordauth\/guides\/initial-setup.html (This site is still work in progress)<\/p>\n ## Building<\/p>\n Run `mvn clean package` to build the plugin. The compiled JAR will be in the `target` folder.<\/p>\n ## Installation<\/p>\n 1. Build the plugin or download the JAR ## How It Works<\/p>\n ### First-Time Registration ### Returning Players ## Author<\/p>\n me.theTWIXhunter<\/p>\n","protected":false},"excerpt":{"rendered":" A plugin designed to make your server more secure while (trying to be) as little a pain in the a*s as possible by sending 2FA messages to discord using a bot and password based authentication for users that don’t have discord.<\/p>\n","protected":false},"featured_media":57371,"template":"","meta":{"_minecraft_slug":"discordauth-plugin","_minecraft_project_id":"q04q3hrM","_minecraft_author":"theTWIXhunter","_minecraft_license":"GPL-3.0-or-later","_minecraft_downloads":24,"_minecraft_follows":1,"_minecraft_client_side":"unsupported","_minecraft_server_side":"required","_minecraft_storage_type":"zip","_minecraft_archive_name":"discordauth-plugin.zip","_minecraft_size_bytes":177804,"_minecraft_version_count":2,"_minecraft_updated_at":"2026-05-15T22:22:07.192672Z","_minecraft_date_created":"2026-03-04T22:22:21.137568Z","_minecraft_date_modified":"2026-04-03T14:03:52.089287Z","_minecraft_project_url":"https:\/\/modrinth.com\/mod\/discordauth-plugin","_minecraft_icon_attachment_id":57371,"_minecraft_imported_at":"2026-06-03T03:51:00+00:00","_minecraft_import_hash":"a2c8329d9b81266144b3bac73a4bfb6d","_minecraft_versions":"","_minecraft_links":"","_minecraft_gallery":"","_minecraft_api_metadata":""},"mod_category":[124,126,127,128,867,129,92],"mod_loader":[130,132,133,134],"minecraft_version":[62,37,40,41,73,74,38,78,79,80,81,82],"class_list":["post-57370","mod","type-mod","status-publish","has-post-thumbnail","hentry","mod_category-bukkit","mod_category-management","mod_category-paper","mod_category-purpur","mod_category-social","mod_category-spigot","mod_category-utility","mod_loader-bukkit","mod_loader-paper","mod_loader-purpur","mod_loader-spigot","minecraft_version-1-21","minecraft_version-1-21-1","minecraft_version-1-21-10","minecraft_version-1-21-11","minecraft_version-1-21-2","minecraft_version-1-21-3","minecraft_version-1-21-4","minecraft_version-1-21-5","minecraft_version-1-21-6","minecraft_version-1-21-7","minecraft_version-1-21-8","minecraft_version-1-21-9"],"yoast_head":"\n
\n – `reload` – Reload the plugin configuration (admin)
\n – `unlink [player]` – Unlink Discord account
\n – `logout [player]` – Logout from verification session
\n– `\/password
\n– `\/logout [player]` – Quick logout command
\n– `\/unlink [player]` – Quick unlink command<\/p>\n
\n– `discordauth.admin` – Allows use of admin commands (default: op)
\n– `discordauth.force.login` – Force players with this permission to always authenticate<\/p>\n
\n“`yaml
\n# +————————————————————————–+
\n# | ——====== DISCORD AUTH PLUGIN ======—— |
\n# | — By TheTWIXhunter — |
\n# +————————————————————————–+
\n# | | |
\n# | More information about this config file can be found here: |
\n# | https:\/\/thetwixhunter.nekoweb.org\/discordauth\/guides\/configuration.html |
\n# | |
\n# | !!!! —MAKE SURE TO SET THE BOT TOKEN IN bottoken.yml— !!!! |
\n# | |
\n# | The initial setup guide can be found here: |
\n# | https:\/\/thetwixhunter.nekoweb.org\/discordauth\/guides\/initial-setup.html |
\n# +————————————————————————–+<\/p>\n
\n# | ——====== GENERAL SETTINGS ======—— |
\n# +————————————————————————–+<\/p>\n
\nserver-name: “My Minecraft Server”<\/p>\n
\ndiscord-invite: “https:\/\/discord.gg\/YOUR_INVITE_CODE”<\/p>\n
\nmax-accounts-per-discord: 0<\/p>\n
\n# Available: en-uk.yml, nl-be.yml
\nlanguage: “en-uk”<\/p>\n
\n# Players will be kicked if they don’t verify within this time
\nverification-timeout: 600<\/p>\n
\n# This helps prevent brute-force attacks on accounts
\nmax-login-attempts: 3<\/p>\n
\n# | ——====== VERIFICATION METHODS ======—— |
\n# +————————————————————————–+
\n# | |
\n# | Control how players verify their accounts (Discord, password, etc.) |
\n# | |
\n# +————————————————————————–+<\/p>\n
\n# Allow registration with a Discord account
\n# When enabled, players can register by entering their User ID or by linking their account with Discord
\nallow-discord-registration: true<\/p>\n
\n# When enabled, players can register using just a password instead of linking Discord
\n# Players enter a password during registration instead of a Discord ID
\nallow-password-only-registration: true<\/p>\n
\n# (for when players lose Discord access)
\n# Players can set a password and use it to verify instead of Discord when they lost access to their account
\nenable-backup-password: true<\/p>\n
\n# | ——====== AUTHENTICATION SKIP SETTINGS ======—— |
\n# +————————————————————————–+
\n# | Authentication Skip Settings |
\n# | Control who needs to authenticate and who can skip the login process |
\n# | |
\n# | – A user does not need to authenticate if any of the enabled skip rules |
\n# | apply to them |
\n# | – A user won’t have to register if “require-registration” is false for |
\n# | !any! of the skip rules that apply to them. |
\n# | (They will still be required to register if all of them are False) |
\n# | |
\n# +————————————————————————–+<\/p>\n
\n # Skip authentication for premium (Microsoft\/Mojang authenticated) accounts
\n # Only applies when the player joins with proper Microsoft authentication
\n # Offline mode players will still be required to login
\n skip-premium-accounts:
\n enabled: true
\n # Require premium accounts to still register initially (even if they skip login later)
\n require-registration: true<\/p>\n
\n # This provides convenience for players connecting from the same location
\n skip-matching-ip:
\n enabled: true
\n # Require players to still register initially (even if they skip login later)
\n require-registration: true<\/p>\n
\n # Players listed here will never be asked to authenticate
\n # Use player usernames (case-sensitive)
\n skip-specific-players:
\n enabled: false
\n # Require these players to still register initially
\n require-registration: false
\n players:
\n – “DebugPlayer1”
\n – “TestAccount”<\/p>\n
\n # Players matching these criteria MUST authenticate even if skip rules apply
\n force-authentication:
\n # Force OPs to always authenticate regardless of skip rules
\n force-ops: true
\n # Force players with specific permission to always authenticate
\n # Permission: discordauth.force.login
\n force-permission: true
\n“`<\/p>\n
\n – Go to Discord Developer Portal
\n – Create a new application
\n – Add a bot and copy the bot token
\n – Enable these Privileged Gateway Intents:
\n – Server Members Intent
\n – Message Content Intent<\/p>\n
\n – Edit `plugins\/DiscordAuth\/bot-token.yml`
\n – Replace `PUT_YOUR_BOT_TOKEN_HERE` with your bot token
\n – Edit `plugins\/DiscordAuth\/config.yml` to your preferences
\n – Set your `server-name` and `discord-invite` link<\/p>\n
\n – Use your bot’s OAuth2 URL with these scopes: `bot`
\n – Required permissions: Send Messages, Read Messages, Embed Links<\/p>\n
\n2. Place the JAR in your server’s `plugins` folder
\n3. Restart the server
\n4. Follow the Initial Setup guide above
\n5. Configure `plugins\/DiscordAuth\/bot-token.yml` and `config.yml`
\n6. Reload or restart the server<\/p>\n
\n1. Player joins the server
\n2. Plugin prompts for Discord User ID or password setup using a dialog
\n3. If Discord: Bot sends 4-digit code via DM \u2192 Player enters code
\n4. If password-only: Player sets a password
\n5. Account is registered and player can join<\/p>\n
\n1. Player joins the server
\n2. If skip rules apply (premium\/IP match), player joins immediately
\n3. Otherwise, player must verify with Discord code or password
\n4. After verification, player can join<\/p>\n