Universal fortress framework for Minecraft servers. One codebase for Fabric, Forge, and NeoForge across version ranges, backend game servers, and Velocity/BungeeCord proxies. Zero-configuration SQLite out of the box with optional MySQL, PostgreSQL, and Redis clusters.
| Target Range | Supported Loaders | Required Java | Release Jar Artifact | Architecture |
|---|---|---|---|---|
| Group G1 (1.16 - 1.18) | fabric forge | 17 | authcore-1.16-1.18-<loader>-1.0.0.jar |
Classic Intermediary mappings |
| Group G2 (1.19 - 1.21) | fabric neoforge | 21 | authcore-1.19-1.21-<loader>-1.0.0.jar |
Modern Intermediary + NeoForge |
| Group G3 (26.1 - 26.3+) | fabric neoforge | 25 | authcore-26.1-26.3-<loader>-1.0.0.jar |
Unobfuscated Mojang names & future snapshots |
Download the validated jar for your server environment from
GitHub Releases
or Modrinth. Drop
exactly one jar into mods/ (or
plugins/ on Velocity/BungeeCord) - setup is 100% automated.
1. Download the jar matching your Minecraft range and loader 2. Place it into your server's mods/ folder (or proxy's plugins/ folder) 3. Start the server - configuration files and SQLite database initialize on first boot 4. Joining players are placed in the safe authentication limbo for /register and /login 5. (Optional) Configure MySQL, PostgreSQL, Redis, or Discord webhooks in config/authcore/
Session attestation keys, packet sequence state machines, look delta pattern analysis, and concurrent farm fingerprinting stop bot invasions before players spawn.
Built-in glassmorphic web dashboard with token authentication, live TPS monitor, search filters, and instant player session management.
Identical feature set, limbo restrictions, and proxy forwarding across Fabric, Forge, and NeoForge via universal mixin hooks.
O(1) memory lookups, bounded LRU caches, zero-allocation hot paths, and non-blocking I/O workers ensure flat resource usage under join floods.
No. SQLite runs out of the box with zero external dependencies. MySQL, PostgreSQL, and Redis are optional upgrades for distributed multi-server networks.
Yes. Floodgate player detection and Velocity/BungeeCord modern identity forwarding (HMAC) are built directly into every release jar.
Yes. The modern unobfuscated 26.x+ jar features open-ended range matching and version validation for weekly snapshots and future releases.
Every commit is validated via an automated Docker matrix on official Eclipse Temurin JDKs (17, 21, and 25) across all supported loaders.
Select the documentation edition for your release:
Use AuthCore on any server (personal or commercial community), run it for your players, modify the source for your own needs, fork and contribute improvements, and build plugins or integrations against its API.
Selling AuthCore itself (or a hosted or managed version of it) as a paid product, removing or obscuring license and attribution notices, or presenting it as your own software.
AuthCore is licensed under the Apache-2.0 license with the Commons Clause - read the full LICENSE for the exact terms.