osiris-team / autoplug-client Goto Github PK

Pass arguments to the server jar, so u can for example disable the gui.
Take a look at this method for implementation:

Automatically download latest paper.jar and run it, if there was no jar found in main directory

Add support for bungeecord plugins updating

Code a Java-Algorithm that returns a plugins download-url from the Songoda-Marketplace (by using their API). The plugin information provided is its name, author and version.
You can add the code here as a comment.
I'll add it to the webserver once checked.
Please use this class for making the API requests: https://github.com/Osiris-Team/AutoPlug-Core/blob/main/src/main/java/com/osiris/autoplug/core/json/JsonTools.java
(You can add AutoPlug-Core as dependency if you want)
More info on the API: https://marketplace.songoda.com/marketplace-api/api-documentation/api-v2

Add support for downloading/updating users premium plugins.

Currently, the problem is that we are using spiget for updating the plugins. Spiget does not provide functionality for updating premium plugins.

The only way of updating premium plugins, would be by simulating a browser in java (HtmlUnit), logging in with the users credentials, navigating to the premium plugins spigot page and pressing the download button.

The problem in this case is, that HtmlUnit fails to pass the cloudflare protection because of missing javascript support (#14)

To sum it up: Either wait for HtmlUnit gaining javascript support to pass cloudflare, or hope that Spigot releases their own api where its possible to get the users premium plugins

Previously the plugin data was collected by our AutoPlugPlugin, which ran when the server started up, collected the data and send it over to our client.

This would delay the startup time by a lot (incase there where updates available), because the server first needs to boot up and then restart to install the updates.

By pushing the data collection over to the client (by implementing an own plugin data collector) we can skip this step and perform all tasks directly before starting the server. This results in a significantly lower startup time.

When recording versions for plugins AutoPlug seems to remove any non-numerical numbers from the version.
For example: dynmap version v3.1-beta3a-409 will be displayed as v3.13409 in the web-interface.

Describe the bug
At some points, it says "server" instead of "command".
Was a refactoring issue.

Integrate updater which compares versions and downloads updates if available.
Api to use: https://paper.readthedocs.io/en/latest/site/api.html

Might be related to jansi System.install method.

When a mc-server is at its performance limit for some time, it will request load sharing from our servers. Our servers will search for another registered mc-server that had a low load for a certain amount of time and share its performance.

https://docs.github.com/en/rest/reference/repos#releases

Recently made a mistake by committing my server key to GitHub, thinking a regen button would make things easier for people in the future who make their key(s) public.

https://purpur.pl3x.net/
Here is some usefull stuff for implementation:
https://github.com/pl3xgaming/Purpur

Describe the bug
After losing connection to AutoPlug-Web this happens.

Error-Message:

[20-05-2021 19:53:40][AutoPlug][WARN] ================================
[20-05-2021 19:53:40][AutoPlug][WARN] Message: Lost connection to AutoPlug-Web! Reconnecting in 30 seconds...
[20-05-2021 19:53:40][AutoPlug][WARN] Details: null
[20-05-2021 19:53:40][AutoPlug][WARN] Type: java.io.EOFException
[20-05-2021 19:53:40][AutoPlug][WARN] Stacktrace: 
[20-05-2021 19:53:40][AutoPlug][WARN] java.base/java.io.DataInputStream.readBoolean(DataInputStream.java:248)
[20-05-2021 19:53:40][AutoPlug][WARN] com.osiris.autoplug.client.network.online.MainConnection.run(MainConnection.java:74)
[20-05-2021 19:53:40][AutoPlug][WARN] ================================
java.io.IOException: Write end dead
        at java.base/java.io.PipedInputStream.read(PipedInputStream.java:310)
        at java.base/java.io.PipedInputStream.read(PipedInputStream.java:377)
        at java.base/sun.nio.cs.StreamDecoder.readBytes(StreamDecoder.java:297)
        at java.base/sun.nio.cs.StreamDecoder.implRead(StreamDecoder.java:339)
        at java.base/sun.nio.cs.StreamDecoder.read(StreamDecoder.java:188)
        at java.base/java.io.InputStreamReader.read(InputStreamReader.java:181)
        at java.base/java.io.BufferedReader.fill(BufferedReader.java:161)
        at java.base/java.io.BufferedReader.readLine(BufferedReader.java:326)
        at java.base/java.io.BufferedReader.readLine(BufferedReader.java:392)
        at com.osiris.autoplug.client.utils.NonBlockingPipedInputStream.lambda$new$1(NonBlockingPipedInputStream.java:27)
        at java.base/java.lang.Thread.run(Thread.java:832)

Should be easy to implement, since a mods jar contains all the information we need just like plugins jars.
Example mcmod.info file:

[
{
  "modid": "jei",
  "name": "Just Enough Items",
  "description": "Simple recipe and item helper.",
  "version": "4.16.1.301",
  "mcversion": "1.12.2",
  "url": "https://github.com/mezz/JustEnoughItems",
  "updateUrl": "",
  "authorList": ["mezz"],
  "logoFile": "",
  "screenshots": [],
  "dependencies": []
}
]

Would you be able to add support to updating plugins through GitHub instead of SpiGet?
Maybe with 3 options like stable, unstable and live?

(Of course fixing updating plugins is higher priority)

So that devs don't have to use/implement an updater api.
They only have to add their plugins bukkit/spigot id to its plugin.yml file.

Problem
Plugins or executable jar files in general, kind of can do whatever they want to your system, for example deleting or encrypting your files, and get away with it, undetected by your antivirus.

Solution
Add commands which would scan folders for malicious jar files and give each of them a "safety score" from 0-100%.

.scan   | Scans the current working directory for malicious jar files. (Shortcut: .sc)
.scan <folder-path>   | Scans the provided folder for malicious jar files. Folder path can be relative or absolute. (.sc <folder-path>)
.scan plugins   | Scans the ./plugins folder for malicious jar files. (.scp)

Solution details

1. Unpack jar file into a temp directory
2. Decompile its .class files
3. Check each class for specific imports like java.io
4. If the class contains such an import, do an in-depth check of the whole class

How can a Java program harm your system? Ranked from easiest -> hardest to detect.

Dangerous imports/packages provided by the Java API

• java.io to read/delete/create/modify files
• java.nio to read/list files and listen to file events

Note that at the moment these are notes of some brainstorming without deeper research done yet.

Since in many server panels the server is still shown as online when anything is running, there are some complications with AutoPlug. When the "Stop" button is executed, only the server is stopped, not AutoPlug. In short: So that AutoPlug is also restarted, the question is whether you can add the function that AutoPlug is also stopped after the server has stopped? So also with /stop?
Since you will not always need this, it would be quite good if you could switch this function on and off in the Config.

Thank you,
BLACK

It would be good to be able to execute AutoPlug commands in the game as well.

First I would like to say this looks amazing. The web interface is so clean and responsive.
I would however prefer to self host this- is that possible and what steps would I need to take to get this done? I have Minecraft server and webserver hosted on a VPS.

Create own launcher which downloads latest versions and performs updates on AutoPlug

Pretty much a step by step guide on how to implement: https://o7planning.org/11889/manipulating-files-and-folders-on-google-drive-using-java

Customizable cooldown before executing the same task again.
Useful if there are problems starting the server and multiple restarts are needed.

A dynamic yaml config class, which always holds the latest values.

Detect crash and automatically restart the minecraft server

Auto-Updater for the JVM/JDK.

Idea: Add a jdks folder in /autoplug-system, where the jdks are saved for running the Minecraft server.

Add cooldown for backup tasks.

This will greatly enhance startup time and decrease the current console spamming

Is your feature request related to a problem? Please describe.
I guess the Dynmap plugins folder can get pretty big, and excluding that would make sense.
Theamazinggenko — heute um 18:03 Uhr
yea it is
any idea for blacklisting folders to plugin backups?

Describe the solution you'd like
Include/Exclude files/folders individually for each backup manager.

Currently, AutoPlug uses the stop command to shut down the server. Since proxies use other commands, AutoPlug won't be able to stop them.
Support could be added by letting the user define the stop command in a config.

Let the user insert his own download link to update a specific plugin

Install and load plugins to the mc server by one click.

A possible fix for our current problem of downloading jars via htmlunit.
The only downside is that only jars hosted on spigot are supported. All jars hosted externally won't be downloaded.
SpiGetOrg/Spiget#27

As the title says:

This site can’t be reachedThe web page at https://autoplug.ddns.net/ might be temporarily down or it may have moved permanently to a new web address.
ERR_TUNNEL_CONNECTION_FAILED

Use ssl to comunicate between Server(autoplug.ddns.net) and Client.

We are facing some issues downloading updates for plugins.
That issue is related to a dependency AutoPlug is using and some changes spigot did to its download page.
At the moment there are multiple ways to fix our issue.

1. Fix the core of our dependency (would take ages; for further details see this: HtmlUnit/htmlunit#201).
2. Download jars located on spigot via spiget api (Details: #21)

Please make us not require a 10 digit password to register.

Additionally please add cursor: pointer to the buttons