staff_auth_config

Staff Auth Config — configuration entry.

Entry Information

Property	Value
Entry ID	staff_auth_config
Type	Config
Color	Orange
Icon	mdi:shield-lock

Fields

Field	Type	Description
staffPermission	String	Permission that marks a player as staff and requires authentication.
adminPermission	String	Permission required for reset and force logout operations.
commandName	String	Root command name, normally staffauth.
maxAttempts	Int	Failed attempts before kick; 0 disables the limit.
maxAttemptsKickMessage	Var<String>	Kick message; supports {attempts}.
registerMessage	Var<String>	Message for an unregistered staff member.
loginMessage	Var<String>	Message for a registered staff member.
guiTitle	Var<String>	Default authentication menu title.
blockMessage	Var<String>	Message shown when an unauthenticated player is blocked.
successMessage	Var<String>	Successful authentication message.
guiLoginPrompt	Var<String>	Login prompt shown by the GUI/Dialog.
wrongPasswordMessage	Var<String>	Wrong-password message; supports {attempts} and {max}.
minPasswordLength	Int	Minimum password length.
maxPasswordLength	Int	Maximum password length accepted by the UI.
bcryptCost	Int	BCrypt cost for new registrations; clamped to the supported range.
attemptCooldownSeconds	Int	Base cooldown after a failed attempt.
passwordTooShortMessage	Var<String>	Invalid-length message; supports {length} and {max}.
passwordMismatchMessage	Var<String>	Registration confirmation mismatch message.
successSound	Sound	Sound played after successful authentication.
errorSound	Sound	Sound played on authentication errors.
useGuiWhenAvailable	Boolean	Uses the GUI/Dialog when the GUI extension is available.
preventFallDamage	Boolean	Prevents fall damage while authentication is pending.
sessionTimeoutMinutes	Int	Authenticated session timeout; 0 disables expiration.

Security notes

Passwords are never command arguments or chat messages. The password artifact stores only BCrypt hashes. Do not change the generated artifact ID after the extension has been deployed, otherwise existing hashes will no longer be found.