feat: use easyauth in offline mode

configs/easyauth-extended.conf

@@ -0,0 +1,67 @@
+##                          ##
+##         EasyAuth         ##
+##  Extended Configuration  ##
+##                          ##
+
+# Block everything for unauthenticated players
+allow-chat = false
+allow-commands = false
+allowed-commands = []
+allow-movement = false
+allow-block-interaction = false
+allow-entity-interaction = false
+allow-block-breaking = false
+allow-entity-attacking = false
+allow-item-dropping = false
+allow-item-moving = false
+allow-item-using = false
+
+# Hide inventory while not logged in
+hide-inventory = true
+
+# Unauthenticated players are invulnerable and ignored by mobs
+player-invulnerable = true
+player-ignored = true
+
+# Rate limit teleportation for unauthed players
+teleportation-timeout-ms = 20
+
+# Command aliases
+aliases {
+    # /l for /login
+    login = true
+    # /reg for /register
+    register = true
+}
+
+# Try to rescue players stuck in portals
+try-portal-rescue = true
+
+# Password length limits
+min-password-length = 6
+max-password-length = 128
+
+# Username validation
+username-regexp = "^[a-zA-Z]{1,16}$"
+
+# No Floodgate
+floodgate-bypass-regex = false
+
+# Prevent same-name kicks
+prevent-another-location-kick = true
+
+# Don't force offline UUIDs (already in offline mode)
+forced-offline-uuid = false
+
+# Don't skip auth
+skip-all-auth-checks = false
+
+# Disallow case-insensitive duplicate usernames
+allow-case-insensitive-username = false
+
+# Prompt to authenticate every 10 seconds
+authentication-prompt-interval = 10
+
+# Log registration and login events
+log-player-registration = true
+log-player-login = true

configs/easyauth-main.conf

@@ -0,0 +1,51 @@
+##                          ##
+##         EasyAuth         ##
+##    Main Configuration    ##
+##                          ##
+
+# Don't auto-login players with Microsoft accounts — treat everyone the same
+premium-auto-login = false
+
+# All players are offline players
+offline-by-default = true
+
+# No Bedrock auto-login
+floodgate-auto-login = false
+
+# Session timeout: 24 hours (if they reconnect within this time, no re-login needed)
+session-timeout = 86400
+
+# Max login attempts before kick
+max-login-tries = 3
+
+# 5 minutes to authenticate before being kicked
+kick-timeout = 300
+
+# 2 minutes before they can rejoin after being kicked for failed attempts
+reset-login-attempts-timeout = 120
+
+# Registration is disabled for players — admin-only via `auth register <user> <pass>`
+# With enable-global-password=true and single-use-global-password=false,
+# the /register command is disabled. Players can only /login with a password set by admin.
+enable-global-password = true
+single-use-global-password = false
+
+# Hide player coordinates during auth (teleport to spawn)
+hide-player-coords = true
+
+# Hide unauthenticated players from everyone (requires Vanish mod)
+vanish-until-auth = true
+
+# Auth spawn location — players teleported here until authenticated
+world-spawn {
+    dimension = "minecraft:overworld"
+    x = -1965
+    y = 167
+    z = 1109
+    yaw = 0
+    pitch = 0
+}
+
+debug = false
+
+config-version = 2