# Velocity admission plugin

The plugin checks every online-mode Java login against the account-manager API. It fails closed: unavailable, unauthorized, stale, replayed, malformed, and unknown requests are denied.

## Download or build

Versioned JARs are attached to public releases at `https://git.garvis.dev/dmg/minecraft-account-manager/releases`.

To build a development JAR locally:

```bash
cd plugins/velocity
./gradlew clean test shadowJar
```

To embed a release version in both the plugin metadata and filename:

```bash
./gradlew clean test shadowJar -PreleaseVersion=1.0.0
```

Copy `build/libs/minecraft-account-manager-velocity-VERSION.jar` to Velocity's `plugins/` directory and start Velocity once to create `plugins/minecraft-account-manager/config.properties`.

## Provision a credential

From the repository root, with `DATABASE_URL` configured:

```bash
npm run plugin:create-credential --workspace @minecraft-account-manager/database -- velocity-main
```

Copy the displayed token into the plugin's `api-token`. Configure the HTTPS account-manager URL and ensure `server-id` matches. Restrict access to the plugin configuration because it contains the bearer token, then restart Velocity.

The proxy must run in online mode. Unknown players and API failures receive the configured registration message.