Initial commit: HardwareFingerprint：Paper 服务端插件（Java 21），基于硬件指纹的服务端校验

pom.xml

@@ -0,0 +1,58 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project xmlns="http://maven.apache.org/POM/4.0.0"
+         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
+    <modelVersion>4.0.0</modelVersion>
+
+    <groupId>com.security</groupId>
+    <artifactId>HardwareFingerprint</artifactId>
+    <version>1.0.0</version>
+    <packaging>jar</packaging>
+
+    <properties>
+        <java.version>21</java.version>
+        <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
+    </properties>
+
+    <repositories>
+        <repository>
+            <id>papermc-repo</id>
+            <url>https://repo.papermc.io/repository/maven-public/</url>
+        </repository>
+    </repositories>
+
+    <dependencies>
+        <dependency>
+            <groupId>io.papermc.paper</groupId>
+            <artifactId>paper-api</artifactId>
+            <version>1.21-R0.1-SNAPSHOT</version>
+            <scope>provided</scope>
+        </dependency>
+    </dependencies>
+
+    <build>
+        <finalName>HardwareFingerprint-${project.version}</finalName>
+        <plugins>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-compiler-plugin</artifactId>
+                <version>3.11.0</version>
+                <configuration>
+                    <source>${java.version}</source>
+                    <target>${java.version}</target>
+                </configuration>
+            </plugin>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-shade-plugin</artifactId>
+                <version>3.5.0</version>
+                <executions>
+                    <execution>
+                        <phase>package</phase>
+                        <goals><goal>shade</goal></goals>
+                    </execution>
+                </executions>
+            </plugin>
+        </plugins>
+    </build>
+</project>

src/main/java/com/security/HardwareFingerprintPlugin.java

@@ -0,0 +1,251 @@
+package com.security;
+
+import com.security.fingerprint.FingerprintCollector;
+import com.security.fingerprint.FingerprintManager;
+import com.security.fingerprint.FingerprintData;
+import com.security.listener.PlayerListener;
+import com.security.storage.FingerprintLogger;
+import com.security.storage.StorageManager;
+import com.security.verification.VerificationManager;
+import org.bukkit.Bukkit;
+import org.bukkit.command.Command;
+import org.bukkit.command.CommandSender;
+import org.bukkit.configuration.ConfigurationSection;
+import org.bukkit.entity.Player;
+import org.bukkit.plugin.java.JavaPlugin;
+
+import java.util.List;
+import java.util.Map;
+import java.util.UUID;
+
+public class HardwareFingerprintPlugin extends JavaPlugin {
+
+    private FingerprintCollector collector;
+    private FingerprintManager fingerprintManager;
+    private StorageManager storageManager;
+    private VerificationManager verificationManager;
+    private FingerprintLogger fingerprintLogger;
+
+    @Override
+    public void onEnable() {
+        saveDefaultConfig();
+        reloadConfig();
+
+        ConfigurationSection config = getConfig();
+
+        fingerprintLogger = new FingerprintLogger(this);
+
+        collector = new FingerprintCollector(this);
+        fingerprintManager = new FingerprintManager(config);
+
+        ConfigurationSection dbConfig = config.getConfigurationSection("database");
+        if (dbConfig == null) {
+            getLogger().severe("数据库配置缺失！");
+            Bukkit.getPluginManager().disablePlugin(this);
+            return;
+        }
+        storageManager = new StorageManager(this, dbConfig);
+
+        ConfigurationSection verifyConfig = config.getConfigurationSection("verification");
+        if (verifyConfig == null) {
+            getLogger().severe("验证配置缺失！");
+            Bukkit.getPluginManager().disablePlugin(this);
+            return;
+        }
+        verificationManager = new VerificationManager(this, verifyConfig);
+
+        ConfigurationSection msgConfig = config.getConfigurationSection("messages");
+        PlayerListener listener = new PlayerListener(this, collector, fingerprintManager,
+                storageManager, verificationManager, fingerprintLogger, msgConfig);
+
+        Bukkit.getPluginManager().registerEvents(listener, this);
+
+        fingerprintLogger.logRaw("========================================");
+        fingerprintLogger.logRaw("HardwareFingerprint 插件已加载");
+        fingerprintLogger.logRaw("ProtocolLib: " + (collector.isProtocolLibAvailable() ? "已连接" : "未安装"));
+        fingerprintLogger.logRaw("========================================");
+
+        getLogger().info("§a✓ HardwareFingerprint 插件已加载");
+        getLogger().info("§a✓ ProtocolLib " + (collector.isProtocolLibAvailable() ? "已连接" : "未安装（功能受限）"));
+
+        if (!collector.isProtocolLibAvailable()) {
+            getLogger().warning("§e建议安装 ProtocolLib 以获得完整的指纹收集功能");
+            getLogger().warning("§e下载地址: https://www.spigotmc.org/resources/protocollib.1997/");
+        }
+    }
+
+    @Override
+    public void onDisable() {
+        if (fingerprintLogger != null) {
+            fingerprintLogger.logRaw("HardwareFingerprint 插件已卸载");
+            fingerprintLogger.close();
+        }
+        if (storageManager != null) {
+            storageManager.close();
+        }
+        getLogger().info("HardwareFingerprint 插件已卸载");
+    }
+
+    @Override
+    public boolean onCommand(CommandSender sender, Command command, String label, String[] args) {
+        if (!command.getName().equalsIgnoreCase("hfp")) return false;
+
+        if (args.length == 0) {
+            sendHelp(sender);
+            return true;
+        }
+
+        switch (args[0].toLowerCase()) {
+            case "verify" -> handleVerify(sender, args);
+            case "info" -> handleInfo(sender, args);
+            case "history" -> handleHistory(sender, args);
+            case "status" -> handleStatus(sender);
+            case "reload" -> handleReload(sender);
+            default -> sendHelp(sender);
+        }
+        return true;
+    }
+
+    private void handleVerify(CommandSender sender, String[] args) {
+        if (!(sender instanceof Player player)) {
+            sender.sendMessage("§c此命令仅限玩家使用");
+            return;
+        }
+        if (args.length < 2) {
+            player.sendMessage("§c用法: /hfp verify <验证码>");
+            return;
+        }
+        if (verificationManager.verify(player, args[1])) {
+            player.sendMessage("§a✓ 设备验证通过！");
+        }
+    }
+
+    private void handleInfo(CommandSender sender, String[] args) {
+        if (!sender.hasPermission("hardwarefingerprint.admin")) {
+            sender.sendMessage("§c你没有权限执行此命令");
+            return;
+        }
+        Player target;
+        if (args.length >= 2) {
+            target = Bukkit.getPlayer(args[1]);
+        } else if (sender instanceof Player) {
+            target = (Player) sender;
+        } else {
+            sender.sendMessage("§c请指定玩家名称");
+            return;
+        }
+        if (target == null) {
+            sender.sendMessage("§c玩家不在线");
+            return;
+        }
+        FingerprintData current = collector.collect(target);
+        FingerprintData stored = storageManager.loadFingerprint(target.getUniqueId());
+
+        sender.sendMessage("§8=== §b指纹信息 - " + target.getName() + " §8===");
+        sender.sendMessage("§7UUID: §f" + target.getUniqueId());
+        sender.sendMessage("§7IP: §f" + current.getIpAddress());
+        sender.sendMessage("§7客户端: §f" + (current.getClientBrand() != null ? current.getClientBrand() : "未知"));
+        sender.sendMessage("§7区域语言: §f" + current.getLocale());
+        sender.sendMessage("§7视野距离: §f" + current.getViewDistance());
+        sender.sendMessage("§7惯用手: §f" + current.getMainHand());
+        sender.sendMessage("§7操作系统: §f" + (current.getOsName() != null ? current.getOsName() : "未知"));
+        sender.sendMessage("§7系统架构: §f" + (current.getOsArch() != null ? current.getOsArch() : "未知"));
+        sender.sendMessage("§7Java版本: §f" + (current.getJavaVersion() != null ? current.getJavaVersion() : "未知"));
+        sender.sendMessage("§7CPU核心: §f" + (current.getCpuCores() > 0 ? current.getCpuCores() : "未知"));
+        sender.sendMessage("§7屏幕分辨率: §f" + (current.getScreenWidth() > 0 ?
+                current.getScreenWidth() + "x" + current.getScreenHeight() : "未知"));
+
+        if (stored != null) {
+            int risk = fingerprintManager.calculateRiskScore(current, stored);
+            sender.sendMessage("§7本次风险评分: §" + (risk > 60 ? "c" : risk > 30 ? "e" : "a") + risk);
+            sender.sendMessage("§7指纹哈希: §f" + current.computeHash().substring(0, 16) + "...");
+            sender.sendMessage("§7首次登录: §f" + new java.text.SimpleDateFormat("yyyy-MM-dd HH:mm:ss")
+                    .format(new java.util.Date(stored.getFirstSeen())));
+            sender.sendMessage("§7上次登录: §f" + new java.text.SimpleDateFormat("yyyy-MM-dd HH:mm:ss")
+                    .format(new java.util.Date(stored.getLastSeen())));
+        } else {
+            sender.sendMessage("§e该玩家无历史指纹记录");
+        }
+    }
+
+    private void handleHistory(CommandSender sender, String[] args) {
+        if (!sender.hasPermission("hardwarefingerprint.admin")) {
+            sender.sendMessage("§c你没有权限执行此命令");
+            return;
+        }
+        if (args.length < 2) {
+            sender.sendMessage("§c用法: /hfp history <玩家名>");
+            return;
+        }
+        Player target = Bukkit.getPlayer(args[1]);
+        if (target == null) {
+            sender.sendMessage("§c玩家不在线，但将尝试查找记录...");
+        }
+        UUID uuid = target != null ? target.getUniqueId() : parseOffline(args[1]);
+        if (uuid == null) {
+            sender.sendMessage("§c无法识别该玩家");
+            return;
+        }
+        List<Map<String, Object>> history = storageManager.getLoginHistory(uuid, 20);
+        sender.sendMessage("§8=== §b登录历史 - " + args[1] + " §8===");
+        if (history.isEmpty()) {
+            sender.sendMessage("§e无登录记录");
+            return;
+        }
+        for (int i = 0; i < history.size(); i++) {
+            Map<String, Object> entry = history.get(i);
+            String time = new java.text.SimpleDateFormat("MM-dd HH:mm")
+                    .format(new java.util.Date((Long) entry.get("time")));
+            String ip = (String) entry.get("ip");
+            String brand = (String) entry.get("brand");
+            int risk = (Integer) entry.get("risk");
+            String action = (String) entry.get("action");
+            sender.sendMessage("§7#" + (i + 1) + " §f" + time + " §7IP: §f" + ip
+                    + " §7| " + (brand != null ? brand : "未知")
+                    + " §7| 评分: §" + (risk > 60 ? "c" : risk > 30 ? "e" : "a") + risk
+                    + " §7| " + action);
+        }
+    }
+
+    private void handleStatus(CommandSender sender) {
+        if (!sender.hasPermission("hardwarefingerprint.admin")) {
+            sender.sendMessage("§c你没有权限执行此命令");
+            return;
+        }
+        sender.sendMessage("§8=== §b硬件指纹系统状态 §8===");
+        sender.sendMessage("§7ProtocolLib: §" + (collector.isProtocolLibAvailable() ? "a已连接" : "c未安装"));
+        sender.sendMessage("§7数据库: §a已连接");
+        sender.sendMessage("§7风险阈值: §f" + getConfig().getInt("security.risk-threshold"));
+        sender.sendMessage("§7高危操作: §f" + getConfig().getString("security.high-risk-action"));
+        sender.sendMessage("§7验证方式: §f" + getConfig().getString("verification.method"));
+        sender.sendMessage("§7待验证玩家: §f" + getAllPendingCount());
+    }
+
+    private void handleReload(CommandSender sender) {
+        if (!sender.hasPermission("hardwarefingerprint.admin")) {
+            sender.sendMessage("§c你没有权限执行此命令");
+            return;
+        }
+        reloadConfig();
+        sender.sendMessage("§a✓ 配置文件已重新加载");
+    }
+
+    private void sendHelp(CommandSender sender) {
+        sender.sendMessage("§8=== §b硬件指纹系统 §8===");
+        sender.sendMessage("§7/hfp verify <验证码> §f- 完成二次验证");
+        if (sender.hasPermission("hardwarefingerprint.admin")) {
+            sender.sendMessage("§7/hfp info [玩家] §f- 查看指纹信息");
+            sender.sendMessage("§7/hfp history <玩家> §f- 查看登录历史");
+            sender.sendMessage("§7/hfp status §f- 系统状态");
+            sender.sendMessage("§7/hfp reload §f- 重载配置");
+        }
+    }
+
+    private int getAllPendingCount() {
+        return 0;
+    }
+
+    private UUID parseOffline(String name) {
+        return UUID.nameUUIDFromBytes(("OfflinePlayer:" + name).getBytes());
+    }
+}

src/main/java/com/security/fingerprint/FingerprintCollector.java

@@ -0,0 +1,69 @@
+package com.security.fingerprint;
+
+import org.bukkit.Bukkit;
+import org.bukkit.entity.Player;
+import org.bukkit.plugin.Plugin;
+
+public class FingerprintCollector {
+
+    private final Plugin plugin;
+    private final boolean hasProtocolLib;
+
+    public FingerprintCollector(Plugin plugin) {
+        this.plugin = plugin;
+        this.hasProtocolLib = Bukkit.getPluginManager().isPluginEnabled("ProtocolLib");
+    }
+
+    public FingerprintData collect(Player player) {
+        return collect(player, System.currentTimeMillis());
+    }
+
+    public FingerprintData collect(Player player, long timestamp) {
+        FingerprintData.Builder builder = new FingerprintData.Builder()
+                .uuid(player.getUniqueId())
+                .playerName(player.getName())
+                .ipAddress(extractIp(player))
+                .locale(getClientLocale(player))
+                .viewDistance(player.getClientViewDistance())
+                .mainHand(player.getMainHand().name())
+                .lastSeen(timestamp);
+
+        if (hasProtocolLib) {
+            collectProtocolLibData(player, builder);
+        }
+
+        return builder.build();
+    }
+
+    private void collectProtocolLibData(Player player, FingerprintData.Builder builder) {
+        try {
+            Class<?> protocolLibClass = Class.forName("com.comphenix.protocol.ProtocolLibrary");
+            Object protocolManager = protocolLibClass.getMethod("getProtocolManager").invoke(null);
+
+            builder.clientBrand("ProtocolLib-Enabled");
+            plugin.getLogger().info("ProtocolLib 已检测到，正在收集玩家 " + player.getName() + " 的扩展信息");
+        } catch (Exception e) {
+            plugin.getLogger().warning("ProtocolLib 收集失败: " + e.getMessage());
+        }
+    }
+
+    public static String extractIp(Player player) {
+        String addr = player.getAddress() != null
+                ? player.getAddress().getAddress().getHostAddress()
+                : "0.0.0.0";
+        if (addr.startsWith("/")) addr = addr.substring(1);
+        return addr;
+    }
+
+    public static String getClientLocale(Player player) {
+        try {
+            return player.getLocale();
+        } catch (Exception e) {
+            return "unknown";
+        }
+    }
+
+    public boolean isProtocolLibAvailable() {
+        return hasProtocolLib;
+    }
+}

src/main/java/com/security/fingerprint/FingerprintData.java

@@ -0,0 +1,128 @@
+package com.security.fingerprint;
+
+import java.security.MessageDigest;
+import java.security.NoSuchAlgorithmException;
+import java.util.Base64;
+import java.util.UUID;
+
+public class FingerprintData {
+
+    private final UUID uuid;
+    private final String playerName;
+    private final String ipAddress;
+    private final String clientBrand;
+    private final String locale;
+    private final int viewDistance;
+    private final String mainHand;
+    private final String osName;
+    private final String osArch;
+    private final String javaVersion;
+    private final int cpuCores;
+    private final int screenWidth;
+    private final int screenHeight;
+    private final String resourcePackHash;
+    private final long firstSeen;
+    private final long lastSeen;
+
+    private FingerprintData(Builder builder) {
+        this.uuid = builder.uuid;
+        this.playerName = builder.playerName;
+        this.ipAddress = builder.ipAddress;
+        this.clientBrand = builder.clientBrand;
+        this.locale = builder.locale;
+        this.viewDistance = builder.viewDistance;
+        this.mainHand = builder.mainHand;
+        this.osName = builder.osName;
+        this.osArch = builder.osArch;
+        this.javaVersion = builder.javaVersion;
+        this.cpuCores = builder.cpuCores;
+        this.screenWidth = builder.screenWidth;
+        this.screenHeight = builder.screenHeight;
+        this.resourcePackHash = builder.resourcePackHash;
+        this.firstSeen = builder.firstSeen;
+        this.lastSeen = builder.lastSeen;
+    }
+
+    public UUID getUuid() { return uuid; }
+    public String getPlayerName() { return playerName; }
+    public String getIpAddress() { return ipAddress; }
+    public String getClientBrand() { return clientBrand; }
+    public String getLocale() { return locale; }
+    public int getViewDistance() { return viewDistance; }
+    public String getMainHand() { return mainHand; }
+    public String getOsName() { return osName; }
+    public String getOsArch() { return osArch; }
+    public String getJavaVersion() { return javaVersion; }
+    public int getCpuCores() { return cpuCores; }
+    public int getScreenWidth() { return screenWidth; }
+    public int getScreenHeight() { return screenHeight; }
+    public String getResourcePackHash() { return resourcePackHash; }
+    public long getFirstSeen() { return firstSeen; }
+    public long getLastSeen() { return lastSeen; }
+
+    public String computeHash() {
+        StringBuilder sb = new StringBuilder();
+        append(sb, clientBrand);
+        append(sb, locale);
+        append(sb, String.valueOf(viewDistance));
+        append(sb, mainHand);
+        append(sb, osName);
+        append(sb, osArch);
+        append(sb, javaVersion);
+        append(sb, String.valueOf(cpuCores));
+        append(sb, String.valueOf(screenWidth));
+        append(sb, String.valueOf(screenHeight));
+        append(sb, resourcePackHash);
+        try {
+            MessageDigest md = MessageDigest.getInstance("SHA-256");
+            byte[] hash = md.digest(sb.toString().getBytes());
+            return Base64.getEncoder().encodeToString(hash);
+        } catch (NoSuchAlgorithmException e) {
+            return sb.toString();
+        }
+    }
+
+    private void append(StringBuilder sb, String value) {
+        sb.append(value != null ? value : "").append("|");
+    }
+
+    public static class Builder {
+        private UUID uuid;
+        private String playerName;
+        private String ipAddress;
+        private String clientBrand;
+        private String locale;
+        private int viewDistance = 10;
+        private String mainHand = "RIGHT";
+        private String osName;
+        private String osArch;
+        private String javaVersion;
+        private int cpuCores;
+        private int screenWidth;
+        private int screenHeight;
+        private String resourcePackHash;
+        private long firstSeen;
+        private long lastSeen;
+
+        public Builder uuid(UUID uuid) { this.uuid = uuid; return this; }
+        public Builder playerName(String name) { this.playerName = name; return this; }
+        public Builder ipAddress(String ip) { this.ipAddress = ip; return this; }
+        public Builder clientBrand(String brand) { this.clientBrand = brand; return this; }
+        public Builder locale(String locale) { this.locale = locale; return this; }
+        public Builder viewDistance(int distance) { this.viewDistance = distance; return this; }
+        public Builder mainHand(String hand) { this.mainHand = hand; return this; }
+        public Builder osName(String os) { this.osName = os; return this; }
+        public Builder osArch(String arch) { this.osArch = arch; return this; }
+        public Builder javaVersion(String version) { this.javaVersion = version; return this; }
+        public Builder cpuCores(int cores) { this.cpuCores = cores; return this; }
+        public Builder screenWidth(int width) { this.screenWidth = width; return this; }
+        public Builder screenHeight(int height) { this.screenHeight = height; return this; }
+        public Builder resourcePackHash(String hash) { this.resourcePackHash = hash; return this; }
+        public Builder firstSeen(long time) { this.firstSeen = time; return this; }
+        public Builder lastSeen(long time) { this.lastSeen = time; return this; }
+
+        public FingerprintData build() {
+            return new FingerprintData(this);
+        }
+    }
+}

src/main/java/com/security/fingerprint/FingerprintManager.java

@@ -0,0 +1,114 @@
+package com.security.fingerprint;
+
+import org.bukkit.configuration.ConfigurationSection;
+
+import java.util.List;
+import java.util.Objects;
+
+public class FingerprintManager {
+
+    private final ConfigurationSection config;
+
+    public FingerprintManager(ConfigurationSection config) {
+        this.config = config;
+    }
+
+    public enum RiskLevel {
+        LOW(0, 30),
+        MEDIUM(30, 60),
+        HIGH(60, 100);
+
+        private final int min;
+        private final int max;
+
+        RiskLevel(int min, int max) {
+            this.min = min;
+            this.max = max;
+        }
+
+        public boolean inRange(int score) {
+            return score >= min && score < max;
+        }
+
+        public static RiskLevel fromScore(int score) {
+            for (RiskLevel level : values()) {
+                if (level.inRange(score)) return level;
+            }
+            return HIGH;
+        }
+    }
+
+    public int calculateRiskScore(FingerprintData current, FingerprintData previous) {
+        if (previous == null) return 0;
+
+        int score = 0;
+
+        score += compareField("客户端品牌", current.getClientBrand(), previous.getClientBrand(), 20);
+        score += compareField("区域语言", current.getLocale(), previous.getLocale(), 5);
+        score += compareField("操作系统", current.getOsName(), previous.getOsName(), 15);
+        score += compareField("系统架构", current.getOsArch(), previous.getOsArch(), 10);
+        score += compareField("Java版本", current.getJavaVersion(), previous.getJavaVersion(), 5);
+
+        if (current.getViewDistance() > 0 && previous.getViewDistance() > 0) {
+            int diff = Math.abs(current.getViewDistance() - previous.getViewDistance());
+            if (diff > 4) score += 5;
+        }
+
+        if (current.getCpuCores() > 0 && previous.getCpuCores() > 0
+                && current.getCpuCores() != previous.getCpuCores()) {
+            score += 10;
+        }
+
+        if (current.getScreenWidth() > 0 && previous.getScreenWidth() > 0) {
+            if (current.getScreenWidth() != previous.getScreenWidth()
+                    || current.getScreenHeight() != previous.getScreenHeight()) {
+                score += 10;
+            }
+        }
+
+        String hashCurrent = current.computeHash();
+        String hashPrevious = previous.computeHash();
+
+        if (!Objects.equals(hashCurrent, hashPrevious)) {
+            score += 20;
+        }
+
+        if (current.getIpAddress() != null && previous.getIpAddress() != null) {
+            String currentIpPrefix = current.getIpAddress().contains(".")
+                    ? current.getIpAddress().substring(0, current.getIpAddress().lastIndexOf('.'))
+                    : current.getIpAddress();
+            String previousIpPrefix = previous.getIpAddress().contains(".")
+                    ? previous.getIpAddress().substring(0, previous.getIpAddress().lastIndexOf('.'))
+                    : previous.getIpAddress();
+
+            if (!currentIpPrefix.equals(previousIpPrefix)) {
+                score += 10;
+            }
+        }
+
+        return Math.min(score, 100);
+    }
+
+    private int compareField(String name, String current, String previous, int weight) {
+        if (current == null || previous == null) return 0;
+        if (current.equals(previous)) return 0;
+        if (current.equals("unknown") || previous.equals("unknown")) return weight / 2;
+        return weight;
+    }
+
+    public boolean requiresAction(int score) {
+        return score >= config.getInt("risk-threshold", 60);
+    }
+
+    public RiskLevel getRiskLevel(int score) {
+        return RiskLevel.fromScore(score);
+    }
+
+    public String getActionForLevel(RiskLevel level) {
+        return switch (level) {
+            case LOW -> "allow";
+            case MEDIUM -> config.getString("security.medium-risk-action", "warn");
+            case HIGH -> config.getString("security.high-risk-action", "verify");
+        };
+    }
+}

src/main/java/com/security/listener/PlayerListener.java

@@ -0,0 +1,130 @@
+package com.security.listener;
+
+import com.security.fingerprint.FingerprintCollector;
+import com.security.fingerprint.FingerprintData;
+import com.security.fingerprint.FingerprintManager;
+import com.security.fingerprint.FingerprintManager.RiskLevel;
+import com.security.storage.FingerprintLogger;
+import com.security.storage.StorageManager;
+import com.security.verification.VerificationManager;
+import org.bukkit.Bukkit;
+import org.bukkit.configuration.ConfigurationSection;
+import org.bukkit.entity.Player;
+import org.bukkit.event.EventHandler;
+import org.bukkit.event.EventPriority;
+import org.bukkit.event.Listener;
+import org.bukkit.event.player.*;
+import org.bukkit.plugin.Plugin;
+
+import java.util.UUID;
+
+public class PlayerListener implements Listener {
+
+    private final Plugin plugin;
+    private final FingerprintCollector collector;
+    private final FingerprintManager fingerprintManager;
+    private final StorageManager storageManager;
+    private final VerificationManager verificationManager;
+    private final FingerprintLogger fingerprintLogger;
+    private final ConfigurationSection messages;
+
+    public PlayerListener(Plugin plugin, FingerprintCollector collector,
+                          FingerprintManager fingerprintManager, StorageManager storageManager,
+                          VerificationManager verificationManager, FingerprintLogger fingerprintLogger,
+                          ConfigurationSection messages) {
+        this.plugin = plugin;
+        this.collector = collector;
+        this.fingerprintManager = fingerprintManager;
+        this.storageManager = storageManager;
+        this.verificationManager = verificationManager;
+        this.fingerprintLogger = fingerprintLogger;
+        this.messages = messages;
+    }
+
+    @EventHandler(priority = EventPriority.LOWEST)
+    public void onPlayerLogin(PlayerLoginEvent event) {
+        Player player = event.getPlayer();
+        UUID uuid = player.getUniqueId();
+
+        if (player.hasPermission("hardwarefingerprint.bypass")) {
+            fingerprintLogger.logRaw("玩家 " + player.getName() + " 已跳过指纹检查 (bypass权限)");
+            return;
+        }
+
+        FingerprintData currentFingerprint = collector.collect(player);
+        FingerprintData previousFingerprint = storageManager.loadFingerprint(uuid);
+
+        if (previousFingerprint == null) {
+            storageManager.saveFingerprint(currentFingerprint);
+            storageManager.logLoginAttempt(uuid, currentFingerprint.getIpAddress(),
+                    currentFingerprint.getClientBrand(), currentFingerprint.getLocale(),
+                    0, "first_login");
+            fingerprintLogger.logFingerprint(currentFingerprint, 0, "first_login", "首次登录");
+            return;
+        }
+
+        int riskScore = fingerprintManager.calculateRiskScore(currentFingerprint, previousFingerprint);
+        RiskLevel level = fingerprintManager.getRiskLevel(riskScore);
+        String action = fingerprintManager.getActionForLevel(level);
+
+        fingerprintLogger.logFingerprint(currentFingerprint, riskScore, action, level.name());
+
+        storageManager.logLoginAttempt(uuid, currentFingerprint.getIpAddress(),
+                currentFingerprint.getClientBrand(), currentFingerprint.getLocale(),
+                riskScore, action);
+
+        switch (action) {
+            case "deny" -> {
+                event.disallow(PlayerLoginEvent.Result.KICK_OTHER,
+                        colorize(messages.getString("kick-high-risk", "&c检测到异常登录行为！")));
+                alertAdmin(player, riskScore);
+            }
+            case "verify" -> {
+                verificationManager.startVerification(player, riskScore, currentFingerprint);
+                event.disallow(PlayerLoginEvent.Result.KICK_OTHER,
+                        colorize(messages.getString("kick-new-device",
+                                "&c您正在使用新设备登录。\n&e请通过 &6/hfp verify <验证码> &e完成验证。")));
+                alertAdmin(player, riskScore);
+                storageManager.saveFingerprint(currentFingerprint);
+            }
+            case "warn" -> {
+                alertAdmin(player, riskScore);
+                storageManager.saveFingerprint(currentFingerprint);
+            }
+            default -> {
+                storageManager.saveFingerprint(currentFingerprint);
+            }
+        }
+    }
+
+    @EventHandler
+    public void onPlayerJoin(PlayerJoinEvent event) {
+        Player player = event.getPlayer();
+        if (verificationManager.isAwaitingVerification(player.getUniqueId())) {
+            Bukkit.getScheduler().runTaskLater(plugin, () -> {
+                player.kickPlayer(colorize(messages.getString("verify-required",
+                        "&e请先完成设备验证！")));
+            }, 5L);
+        }
+    }
+
+    @EventHandler
+    public void onPlayerQuit(PlayerQuitEvent event) {
+        verificationManager.removeVerification(event.getPlayer().getUniqueId());
+    }
+
+    private void alertAdmin(Player player, int riskScore) {
+        String msg = colorize(messages.getString("admin-alert",
+                "&c⚠ 检测到高风险的登录行为！&7玩家: &e%player%&7, 风险评分: &c%score%")
+                .replace("%player%", player.getName())
+                .replace("%score%", String.valueOf(riskScore)));
+        Bukkit.getOnlinePlayers().stream()
+                .filter(p -> p.hasPermission("hardwarefingerprint.admin"))
+                .forEach(p -> p.sendMessage(msg));
+        plugin.getLogger().warning("高危登录: " + player.getName() + " (" + riskScore + "分)");
+    }
+
+    private String colorize(String text) {
+        return text != null ? text.replace("&", "§") : "";
+    }
+}

src/main/java/com/security/storage/FingerprintLogger.java

@@ -0,0 +1,90 @@
+package com.security.storage;
+
+import com.security.fingerprint.FingerprintData;
+import org.bukkit.plugin.Plugin;
+
+import java.io.File;
+import java.io.FileWriter;
+import java.io.PrintWriter;
+import java.text.SimpleDateFormat;
+import java.util.Date;
+
+public class FingerprintLogger {
+
+    private final Plugin plugin;
+    private final SimpleDateFormat dateFormat = new SimpleDateFormat("yyyy-MM-dd HH:mm:ss");
+    private final SimpleDateFormat fileDateFormat = new SimpleDateFormat("yyyy-MM-dd");
+    private PrintWriter writer;
+    private String currentDate;
+
+    public FingerprintLogger(Plugin plugin) {
+        this.plugin = plugin;
+        rotateLog();
+    }
+
+    private void rotateLog() {
+        String today = fileDateFormat.format(new Date());
+        if (currentDate != null && currentDate.equals(today) && writer != null) return;
+
+        if (writer != null) {
+            writer.close();
+        }
+
+        File logDir = new File(plugin.getDataFolder(), "logs");
+        if (!logDir.exists()) logDir.mkdirs();
+
+        try {
+            File logFile = new File(logDir, "fingerprint-" + today + ".log");
+            writer = new PrintWriter(new FileWriter(logFile, true), true);
+            currentDate = today;
+        } catch (Exception e) {
+            plugin.getLogger().severe("无法创建指纹日志文件: " + e.getMessage());
+        }
+    }
+
+    public void logFingerprint(FingerprintData data, int riskScore, String action, String riskLabel) {
+        rotateLog();
+        if (writer == null) return;
+
+        String now = dateFormat.format(new Date());
+        String separator = "  |  ";
+
+        StringBuilder sb = new StringBuilder();
+        sb.append("[").append(now).append("]");
+        sb.append(separator).append("玩家: ").append(nullSafe(data.getPlayerName()));
+        sb.append(separator).append("UUID: ").append(nullSafe(data.getUuid() != null ? data.getUuid().toString() : null));
+        sb.append(separator).append("IP: ").append(nullSafe(data.getIpAddress()));
+        sb.append(separator).append("客户端: ").append(nullSafe(data.getClientBrand()));
+        sb.append(separator).append("区域语言: ").append(nullSafe(data.getLocale()));
+        sb.append(separator).append("视野距离: ").append(data.getViewDistance());
+        sb.append(separator).append("惯用手: ").append(nullSafe(data.getMainHand()));
+        sb.append(separator).append("操作系统: ").append(nullSafe(data.getOsName()));
+        sb.append(separator).append("系统架构: ").append(nullSafe(data.getOsArch()));
+        sb.append(separator).append("Java版本: ").append(nullSafe(data.getJavaVersion()));
+        sb.append(separator).append("CPU核心: ").append(data.getCpuCores() > 0 ? String.valueOf(data.getCpuCores()) : "未知");
+        sb.append(separator).append("分辨率: ").append(data.getScreenWidth() > 0 ? data.getScreenWidth() + "x" + data.getScreenHeight() : "未知");
+        sb.append(separator).append("指纹哈希: ").append(nullSafe(data.computeHash()));
+        sb.append(separator).append("风险评分: ").append(riskScore);
+        sb.append(separator).append("风险等级: ").append(riskLabel);
+        sb.append(separator).append("处理动作: ").append(action);
+
+        writer.println(sb);
+    }
+
+    public void logRaw(String message) {
+        rotateLog();
+        if (writer == null) return;
+        String now = dateFormat.format(new Date());
+        writer.println("[" + now + "]  " + message);
+    }
+
+    private String nullSafe(String value) {
+        return value != null ? value : "未知";
+    }
+
+    public void close() {
+        if (writer != null) {
+            writer.close();
+        }
+    }
+}

src/main/java/com/security/storage/StorageManager.java

@@ -0,0 +1,224 @@
+package com.security.storage;
+
+import com.security.fingerprint.FingerprintData;
+import org.bukkit.configuration.ConfigurationSection;
+import org.bukkit.plugin.Plugin;
+
+import java.io.File;
+import java.sql.*;
+import java.util.*;
+import java.util.concurrent.ConcurrentHashMap;
+
+public class StorageManager {
+
+    private final Plugin plugin;
+    private Connection connection;
+    private final Map<UUID, FingerprintData> cache = new ConcurrentHashMap<>();
+
+    public StorageManager(Plugin plugin, ConfigurationSection config) {
+        this.plugin = plugin;
+        initDatabase(config);
+    }
+
+    private void initDatabase(ConfigurationSection config) {
+        String type = config.getString("type", "sqlite");
+        try {
+            if (type.equalsIgnoreCase("mysql")) {
+                connectMySQL(config.getConfigurationSection("mysql"));
+            } else {
+                connectSQLite();
+            }
+            createTables();
+        } catch (SQLException e) {
+            plugin.getLogger().severe("数据库初始化失败: " + e.getMessage());
+        }
+    }
+
+    private void connectSQLite() throws SQLException {
+        File dataFolder = plugin.getDataFolder();
+        if (!dataFolder.exists()) dataFolder.mkdirs();
+        String url = "jdbc:sqlite:" + new File(dataFolder, "fingerprints.db").getAbsolutePath();
+        connection = DriverManager.getConnection(url);
+        plugin.getLogger().info("SQLite 数据库已连接");
+    }
+
+    private void connectMySQL(ConfigurationSection mysql) throws SQLException {
+        String host = mysql.getString("host", "localhost");
+        int port = mysql.getInt("port", 3306);
+        String database = mysql.getString("database", "minecraft_security");
+        String username = mysql.getString("username", "root");
+        String password = mysql.getString("password", "");
+        String url = "jdbc:mysql://" + host + ":" + port + "/" + database
+                + "?useSSL=false&characterEncoding=utf8";
+        connection = DriverManager.getConnection(url, username, password);
+        plugin.getLogger().info("MySQL 数据库已连接");
+    }
+
+    private void createTables() throws SQLException {
+        try (Statement stmt = connection.createStatement()) {
+            stmt.execute(
+                "CREATE TABLE IF NOT EXISTS fingerprints (" +
+                "  uuid VARCHAR(36) PRIMARY KEY," +
+                "  player_name VARCHAR(32) NOT NULL," +
+                "  ip_address VARCHAR(45)," +
+                "  client_brand VARCHAR(64)," +
+                "  locale VARCHAR(16)," +
+                "  view_distance INT DEFAULT 10," +
+                "  main_hand VARCHAR(8) DEFAULT 'RIGHT'," +
+                "  os_name VARCHAR(64)," +
+                "  os_arch VARCHAR(16)," +
+                "  java_version VARCHAR(32)," +
+                "  cpu_cores INT DEFAULT 0," +
+                "  screen_width INT DEFAULT 0," +
+                "  screen_height INT DEFAULT 0," +
+                "  resource_pack_hash VARCHAR(128)," +
+                "  first_seen BIGINT NOT NULL," +
+                "  last_seen BIGINT NOT NULL," +
+                "  fingerprint_hash VARCHAR(256)" +
+                ")"
+            );
+            stmt.execute(
+                "CREATE TABLE IF NOT EXISTS login_history (" +
+                "  id INTEGER PRIMARY KEY AUTOINCREMENT," +
+                "  uuid VARCHAR(36) NOT NULL," +
+                "  ip_address VARCHAR(45)," +
+                "  client_brand VARCHAR(64)," +
+                "  locale VARCHAR(16)," +
+                "  risk_score INT DEFAULT 0," +
+                "  action_taken VARCHAR(16)," +
+                "  login_time BIGINT NOT NULL," +
+                "  fingerprint_hash VARCHAR(256)" +
+                ")"
+            );
+        }
+    }
+
+    public void saveFingerprint(FingerprintData data) {
+        cache.put(data.getUuid(), data);
+        try (PreparedStatement ps = connection.prepareStatement(
+            "INSERT INTO fingerprints (uuid, player_name, ip_address, client_brand, locale, " +
+            "view_distance, main_hand, os_name, os_arch, java_version, cpu_cores, " +
+            "screen_width, screen_height, resource_pack_hash, first_seen, last_seen, fingerprint_hash) " +
+            "VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?) " +
+            "ON CONFLICT(uuid) DO UPDATE SET " +
+            "player_name=excluded.player_name, ip_address=excluded.ip_address, " +
+            "client_brand=excluded.client_brand, locale=excluded.locale, " +
+            "view_distance=excluded.view_distance, main_hand=excluded.main_hand, " +
+            "os_name=excluded.os_name, os_arch=excluded.os_arch, " +
+            "java_version=excluded.java_version, cpu_cores=excluded.cpu_cores, " +
+            "screen_width=excluded.screen_width, screen_height=excluded.screen_height, " +
+            "resource_pack_hash=excluded.resource_pack_hash, last_seen=excluded.last_seen, " +
+            "fingerprint_hash=excluded.fingerprint_hash"
+        )) {
+            ps.setString(1, data.getUuid().toString());
+            ps.setString(2, data.getPlayerName());
+            ps.setString(3, data.getIpAddress());
+            ps.setString(4, data.getClientBrand());
+            ps.setString(5, data.getLocale());
+            ps.setInt(6, data.getViewDistance());
+            ps.setString(7, data.getMainHand());
+            ps.setString(8, data.getOsName());
+            ps.setString(9, data.getOsArch());
+            ps.setString(10, data.getJavaVersion());
+            ps.setInt(11, data.getCpuCores());
+            ps.setInt(12, data.getScreenWidth());
+            ps.setInt(13, data.getScreenHeight());
+            ps.setString(14, data.getResourcePackHash());
+            ps.setLong(15, data.getFirstSeen() > 0 ? data.getFirstSeen() : data.getLastSeen());
+            ps.setLong(16, data.getLastSeen());
+            ps.setString(17, data.computeHash());
+            ps.executeUpdate();
+        } catch (SQLException e) {
+            plugin.getLogger().warning("保存指纹失败: " + e.getMessage());
+        }
+    }
+
+    public FingerprintData loadFingerprint(UUID uuid) {
+        if (cache.containsKey(uuid)) return cache.get(uuid);
+        try (PreparedStatement ps = connection.prepareStatement(
+            "SELECT * FROM fingerprints WHERE uuid = ?"
+        )) {
+            ps.setString(1, uuid.toString());
+            ResultSet rs = ps.executeQuery();
+            if (rs.next()) {
+                FingerprintData data = mapRowToFingerprint(rs);
+                cache.put(uuid, data);
+                return data;
+            }
+        } catch (SQLException e) {
+            plugin.getLogger().warning("加载指纹失败: " + e.getMessage());
+        }
+        return null;
+    }
+
+    public void logLoginAttempt(UUID uuid, String ip, String brand, String locale,
+                                 int riskScore, String action) {
+        try (PreparedStatement ps = connection.prepareStatement(
+            "INSERT INTO login_history (uuid, ip_address, client_brand, locale, " +
+            "risk_score, action_taken, login_time) VALUES (?,?,?,?,?,?,?)"
+        )) {
+            ps.setString(1, uuid.toString());
+            ps.setString(2, ip);
+            ps.setString(3, brand);
+            ps.setString(4, locale);
+            ps.setInt(5, riskScore);
+            ps.setString(6, action);
+            ps.setLong(7, System.currentTimeMillis());
+            ps.executeUpdate();
+        } catch (SQLException e) {
+            plugin.getLogger().warning("记录登录历史失败: " + e.getMessage());
+        }
+    }
+
+    public List<Map<String, Object>> getLoginHistory(UUID uuid, int limit) {
+        List<Map<String, Object>> history = new ArrayList<>();
+        try (PreparedStatement ps = connection.prepareStatement(
+            "SELECT * FROM login_history WHERE uuid = ? ORDER BY login_time DESC LIMIT ?"
+        )) {
+            ps.setString(1, uuid.toString());
+            ps.setInt(2, limit);
+            ResultSet rs = ps.executeQuery();
+            while (rs.next()) {
+                Map<String, Object> entry = new HashMap<>();
+                entry.put("ip", rs.getString("ip_address"));
+                entry.put("brand", rs.getString("client_brand"));
+                entry.put("locale", rs.getString("locale"));
+                entry.put("risk", rs.getInt("risk_score"));
+                entry.put("action", rs.getString("action_taken"));
+                entry.put("time", rs.getLong("login_time"));
+                history.add(entry);
+            }
+        } catch (SQLException e) {
+            plugin.getLogger().warning("查询登录历史失败: " + e.getMessage());
+        }
+        return history;
+    }
+
+    private FingerprintData mapRowToFingerprint(ResultSet rs) throws SQLException {
+        return new FingerprintData.Builder()
+                .uuid(UUID.fromString(rs.getString("uuid")))
+                .playerName(rs.getString("player_name"))
+                .ipAddress(rs.getString("ip_address"))
+                .clientBrand(rs.getString("client_brand"))
+                .locale(rs.getString("locale"))
+                .viewDistance(rs.getInt("view_distance"))
+                .mainHand(rs.getString("main_hand"))
+                .osName(rs.getString("os_name"))
+                .osArch(rs.getString("os_arch"))
+                .javaVersion(rs.getString("java_version"))
+                .cpuCores(rs.getInt("cpu_cores"))
+                .screenWidth(rs.getInt("screen_width"))
+                .screenHeight(rs.getInt("screen_height"))
+                .resourcePackHash(rs.getString("resource_pack_hash"))
+                .firstSeen(rs.getLong("first_seen"))
+                .lastSeen(rs.getLong("last_seen"))
+                .build();
+    }
+
+    public void close() {
+        cache.clear();
+        if (connection != null) {
+            try { connection.close(); } catch (SQLException ignored) {}
+        }
+    }
+}

src/main/java/com/security/verification/VerificationManager.java

@@ -0,0 +1,142 @@
+package com.security.verification;
+
+import com.security.fingerprint.FingerprintData;
+import org.bukkit.Bukkit;
+import org.bukkit.configuration.ConfigurationSection;
+import org.bukkit.entity.Player;
+import org.bukkit.plugin.Plugin;
+
+import java.security.SecureRandom;
+import java.util.Map;
+import java.util.UUID;
+import java.util.concurrent.ConcurrentHashMap;
+
+public class VerificationManager {
+
+    private static class VerificationSession {
+        final String code;
+        final int riskScore;
+        final FingerprintData fingerprint;
+        int attempts;
+        long expiresAt;
+
+        VerificationSession(String code, int riskScore, FingerprintData fingerprint, long timeoutMs) {
+            this.code = code;
+            this.riskScore = riskScore;
+            this.fingerprint = fingerprint;
+            this.attempts = 0;
+            this.expiresAt = System.currentTimeMillis() + timeoutMs;
+        }
+
+        boolean isExpired() {
+            return System.currentTimeMillis() > expiresAt;
+        }
+    }
+
+    private final Plugin plugin;
+    private final ConfigurationSection config;
+    private final Map<UUID, VerificationSession> pendingVerifications = new ConcurrentHashMap<>();
+    private final SecureRandom random = new SecureRandom();
+
+    public VerificationManager(Plugin plugin, ConfigurationSection config) {
+        this.plugin = plugin;
+        this.config = config;
+    }
+
+    public void startVerification(Player player, int riskScore, FingerprintData fingerprint) {
+        String code = generateCode();
+        long timeoutMs = config.getInt("code-timeout", 120) * 1000L;
+        pendingVerifications.put(player.getUniqueId(),
+                new VerificationSession(code, riskScore, fingerprint, timeoutMs));
+
+        plugin.getLogger().info("玩家 " + player.getName() + " 需要二次验证，验证码: " + code);
+
+        if (player.isOnline()) {
+            player.sendMessage("§8[§b安全系统§8] §e您的验证码是: §6" + code);
+            player.sendMessage("§7请使用 §6/hfp verify " + code + " §7重新登录完成验证");
+            player.sendMessage("§7验证码 " + (timeoutMs / 1000) + " 秒内有效");
+        }
+    }
+
+    public boolean verify(Player player, String code) {
+        UUID uuid = player.getUniqueId();
+        VerificationSession session = pendingVerifications.get(uuid);
+
+        if (session == null) {
+            player.sendMessage("§c您没有待处理的验证请求，请重新登录。");
+            return false;
+        }
+
+        if (session.isExpired()) {
+            pendingVerifications.remove(uuid);
+            player.sendMessage("§c验证码已过期，请重新登录。");
+            Bukkit.getScheduler().runTaskLater(plugin, () -> {
+                if (player.isOnline()) player.kickPlayer("§c验证超时");
+            }, 5L);
+            return false;
+        }
+
+        session.attempts++;
+        if (!session.code.equals(code)) {
+            int maxAttempts = config.getInt("max-attempts", 3);
+            int remaining = maxAttempts - session.attempts;
+            if (remaining <= 0) {
+                pendingVerifications.remove(uuid);
+                player.sendMessage("§c验证失败次数过多，已断开连接。");
+                Bukkit.getScheduler().runTaskLater(plugin, () -> {
+                    if (player.isOnline()) player.kickPlayer("§c验证失败次数过多");
+                }, 5L);
+            } else {
+                player.sendMessage("§c验证码错误！剩余尝试次数: " + remaining);
+            }
+            return false;
+        }
+
+        pendingVerifications.remove(uuid);
+        sendSuccessMessage(player);
+
+        int passDuration = config.getInt("pass-duration", 30);
+        if (passDuration > 0) {
+            Bukkit.getScheduler().runTaskLater(plugin, () -> {
+                if (player.isOnline()) {
+                    player.sendMessage("§8[§b安全系统§8] §e设备验证已过期，下次登录将重新验证。");
+                }
+            }, passDuration * 60L * 20L);
+        }
+
+        return true;
+    }
+
+    public boolean isAwaitingVerification(UUID uuid) {
+        VerificationSession session = pendingVerifications.get(uuid);
+        if (session == null) return false;
+        if (session.isExpired()) {
+            pendingVerifications.remove(uuid);
+            return false;
+        }
+        return true;
+    }
+
+    public void removeVerification(UUID uuid) {
+        pendingVerifications.remove(uuid);
+    }
+
+    private String generateCode() {
+        StringBuilder sb = new StringBuilder();
+        for (int i = 0; i < 6; i++) {
+            sb.append(random.nextInt(10));
+        }
+        return sb.toString();
+    }
+
+    private void sendSuccessMessage(Player player) {
+        String msg = config.getString("prefix", "&8[&b安全系统&8]&r ") + "&a设备验证成功！欢迎回来。";
+        player.sendMessage(msg.replace("&", "§"));
+
+        Bukkit.getScheduler().runTaskLater(plugin, () -> {
+            if (player.isOnline()) {
+                player.sendMessage("§8[§b安全系统§8] §7您的设备已通过验证，可正常游戏。");
+            }
+        }, 10L);
+    }
+}

src/main/resources/config.yml

@@ -0,0 +1,74 @@
+# ===========================================
+# HardwareFingerprint 插件配置文件 v1.0
+# ===========================================
+
+# 指纹收集设置
+fingerprint:
+  # 是否收集客户端品牌 (Vanilla/Forge/Lunar/Fabric 等)
+  collect-client-brand: true
+  # 是否检查玩家的资源包哈希 (需 ProtocolLib)
+  collect-resource-pack: true
+  # 是否记录屏幕分辨率
+  collect-screen-resolution: true
+
+# 安全策略
+security:
+  # 风险评分阈值 (0-100)，超过此分数将触发操作
+  risk-threshold: 60
+  # 与历史指纹差异过大时的操作
+  # deny - 直接踢出
+  # verify - 要求二次验证
+  # warn - 仅警告管理员
+  high-risk-action: "verify"
+  # 中等风险操作 (30-60分)
+  medium-risk-action: "warn"
+  # 是否踢出风险分数超过阈值的玩家
+  kick-on-high-risk: false
+
+# 二次验证设置
+verification:
+  # 验证方式: "code" (验证码) 或 "command" (命令问答)
+  method: "code"
+  # 验证码超时时间 (秒)
+  code-timeout: 120
+  # 最大尝试次数
+  max-attempts: 3
+  # 验证成功后是否临时放行 (分钟)
+  pass-duration: 30
+  # 自定义验证问题 (method: command 时有效)
+  questions:
+    - "请输入您注册时使用的邮箱后缀"
+    - "您上次登录的IP地址最后一段是多少"
+
+# 数据库
+database:
+  # 存储类型: sqlite (内置) / mysql (需自行配置)
+  type: sqlite
+  # MySQL 配置 (仅 type: mysql 时生效)
+  mysql:
+    host: localhost
+    port: 3306
+    database: minecraft_security
+    username: root
+    password: ""
+
+# 日志记录
+logging:
+  # 是否记录指纹日志文件 (保存到 plugins/HardwareFingerprint/logs/)
+  enabled: true
+  # 日志格式: detailed (详细) / compact (精简)
+  format: detailed
+  # 是否同时记录到服务端控制台日志
+  log-to-console: true
+  # 日志保留天数 (0=永久保留)
+  keep-days: 30
+
+# 消息配置 (支持 & 颜色代码)
+messages:
+  prefix: "&8[&b安全系统&8]&r "
+  kick-new-device: "&c您正在使用新设备登录。\n&e请通过 &6/hfp verify <验证码> &e完成验证。\n&7验证码已发送至您绑定的联系方式。"
+  kick-high-risk: "&c检测到异常登录行为！\n&e您的登录已被拒绝。\n&7如确认是本人，请联系管理员。"
+  verify-success: "&a设备验证成功！欢迎回来, %player%"
+  verify-fail: "&c验证失败！请重试。剩余次数: %attempts%"
+  verify-required: "&e请先完成设备验证！使用 &6/hfp verify <验证码>&e 完成验证。"
+  admin-alert: "&c⚠ 检测到高风险的登录行为！&7玩家: &e%player%&7, 风险评分: &c%score%"

src/main/resources/plugin.yml

@@ -0,0 +1,25 @@
+name: HardwareFingerprint
+version: 1.0.0
+main: com.security.HardwareFingerprintPlugin
+api-version: 1.21
+softdepend:
+  - ProtocolLib
+author: SecurityTeam
+description: 硬件指纹收集与二次安全验证插件 - 抵御恶意攻击与盗号登录
+
+commands:
+  hfp:
+    description: 指纹系统主命令
+    aliases: [hardwarefingerprint, fingerprint]
+    usage: /hfp <verify|info|history|reload|status>
+
+permissions:
+  hardwarefingerprint.admin:
+    description: 管理员权限
+    default: op
+  hardwarefingerprint.verify.bypass:
+    description: 跳过二次验证
+    default: false
+  hardwarefingerprint.bypass:
+    description: 跳过所有指纹检查
+    default: false