Slime Login

Commands#

Every command works the same on a single Paper server and on a Velocity or BungeeCord proxy, unless noted.

Player commands#

Command Aliases What it does
/register <password> <confirm> /reg Creates the account and logs you in
/login <password> /l Authenticates
/logout Ends the session and locks you again
/changepassword <old> <new> [confirm] /changepass, /cp Changes the password
/unregister <password> Deletes the account — you must register again
/premium [off] Enables premium auto-login for your own name (mode: command only)

/register#

/register mypass mypass
/register mypass mypass 4821     # when captcha is enabled

Refuses passwords shorter than security.min-password-length or longer than max-password-length, and enforces max-accounts-per-ip when that is set.

/login#

/login mypass

After security.max-login-attempts wrong tries the account is locked for lockout-duration-seconds, and the player is kicked if kick-on-lockout is on. BCrypt is verified off the main thread, so a wrong password never costs the server a tick.

/logout#

Ends the session and re-applies every restriction. A premium player with no password cannot log out — there would be nothing to log back in with.

/premium#

Only useful when premium-bypass.mode: command. The plugin checks with Mojang that the name really is a paid account before enabling it:

/premium        # enable auto-login for this name
/premium off    # back to a normal password login

In mode: auto the command tells you it is not needed.

Admin commands#

/slimeadmin (alias /sladmin), permission slimelogin.admin.

Subcommand What it does
reload Reloads config.yml and messages.yml, and re-checks the license
changepass <player> <password> Sets a player's password for them
unregister <player> Deletes a player's account
forcelogin <player> Authenticates an online player without their password
info <player> Registered, logged in, last IP, last login, first join
purge <days> Deletes accounts not used for that many days
stats Registered accounts and how many are logged in
setspawn Sets the login spawn to where you stand — Paper only
import nlogin [source] [user] [password] [overwrite] Imports accounts from nLogin

All of them work from the console as well, except setspawn.

reload#

Re-reads both files and refreshes the cached protection settings. It does not re-run premium detection for players already online, and it does not disconnect anybody.

purge#

/slimeadmin purge 90

Deletes registered accounts whose last login is older than 90 days, and their trusted IPs. There is no undo — take a copy of players.db first.

import#

/slimeadmin import nlogin
/slimeadmin import nlogin report
/slimeadmin import nlogin plugins/nLogin/nlogin.db
/slimeadmin import nlogin jdbc:mysql://localhost:3306/nlogin root secret
/slimeadmin import nlogin plugins/nLogin/nlogin.db overwrite

report reads the database and summarises it without writing anything. Existing accounts are skipped unless you add overwrite. See the migration guide.

Where commands are registered#

On a network, /login and friends belong to the proxy. A player types them anywhere and The proxy handles them before they reach a backend — which is why they still work while the player is frozen on a bridge server.