Understanding SideGate: The Hybrid Login Bridge for Minecraft Servers
Running a Minecraft server with online-mode set to true is the gold standard for security. It ensures every player connecting has a valid Mojang account, preventing impersonation and unauthorized access. But what happens when you want to welcome a few friends who do not own a premium account without compromising the entire server's integrity? Switching to offline mode opens the floodgates to anyone with any username, including potential griefers posing as your trusted staff. This is the exact dilemma that SideGate solves with surgical precision.
What Exactly Is SideGate?
SideGate is a Bukkit-compatible plugin designed for Spigot, Paper, and Purpur servers. It acts as a hybrid login bridge, allowing your server to maintain online-mode security for the majority of players while selectively granting guest access to specific non-premium usernames. Think of it as a controlled side entrance to your otherwise locked-down server. Premium players continue through the standard Mojang authentication pipeline, completely unaffected. Meanwhile, approved guest players are handled through a separate injection flow that applies configurable restrictions, visual labels, and gamemode limitations.
The plugin also intelligently detects Bedrock players if you have Floodgate or Geyser-Spigot installed, ensuring they remain on their own authentication path and are not mistakenly treated as SideGate guests. This layered approach keeps your server secure without forcing you into the all-or-nothing choice between online and offline mode.
Why Choose SideGate Over Offline Mode?
Many server owners resort to running their entire server in offline mode just to accommodate a handful of friends without premium accounts. This creates a massive security vulnerability. Anyone can join with any username, including those of your administrators, potentially causing chaos. SideGate eliminates this risk by keeping the server in online mode and only carving out a narrow, monitored exception for specific usernames you explicitly allow. You get the best of both worlds: robust Mojang authentication for the majority and controlled guest access for a select few.
Key Advantages at a Glance
- Preserved Premium Security: Normal players authenticate through Mojang's standard session verification, keeping their accounts and your server safe.
- Granular Guest Control: You decide exactly which usernames can join as guests, preventing unauthorized access.
- Clear Visual Distinction: Guests receive a configurable chat prefix, join titles, and messages, making their status immediately obvious to staff.
- Fail-Closed Authentication: If Mojang's API becomes unreachable, SideGate does not default to granting guest access. Players fall back to normal online-mode authentication, ensuring security is never compromised by an outage.
- Bedrock Compatibility: With Floodgate or Geyser installed, Bedrock players are automatically detected and routed correctly, avoiding conflicts with the guest system.
Core Features That Set SideGate Apart
SideGate is not simply a toggle between online and offline mode. It introduces a sophisticated authentication flow that evaluates each connection attempt against multiple criteria. Premium players pass through the standard Mojang authentication path without any interference. Guest candidates are injected into a separate flow where their username is checked against an allowed list. The plugin also supports an auto-detect feature that queries Mojang's API to determine if a username is premium, caching results for performance.
One particularly powerful feature is the premium session failure policy. When a player attempts to join with a username that is registered as a premium account but fails proper session verification, SideGate can either kick them with a custom message or, if you choose the fallback option, allow them in as a guest with an offline UUID. This is a high-risk setting that should be paired with strict permissions, but it provides flexibility for servers that need it. The manual premium override list lets you hardcode specific usernames to always follow the premium path, adding another layer of control.
Guest Handling and Customization
Once a player is classified as a guest, SideGate applies a suite of customizable restrictions. You can set a default gamemode, display a custom title and subtitle on join, and send tailored welcome messages. The chat prefix feature automatically labels guest messages, making it easy for moderators and other players to identify non-premium accounts. Runtime reloading via the /sidegate reload command allows you to tweak these settings without restarting the server, which is invaluable during live events or when testing configurations.
Installation and Setup Process
Getting SideGate running on your server is straightforward. The plugin requires ProtocolLib version 5.x or newer as a mandatory dependency, so install that first. If you want automatic Bedrock player detection, add Floodgate or Geyser-Spigot as optional integrations. Then place the SideGate jar file into your plugins folder, ensure online-mode remains true in server.properties, and restart the server. The plugin will generate a default configuration file that you can modify to suit your needs.
For those who prefer a streamlined setup experience, modern launchers can simplify the process of managing modded servers. For instance, the foxygame.net launcher offers a convenient and flexible way to handle Minecraft installations, allowing you to download and organize plugins directly from its menu without manually hunting down dependencies. This can be especially helpful when you are juggling multiple server-side mods like SideGate alongside ProtocolLib and Geyser.
Configuration Example
The configuration file is intuitive and well-documented. You define whether guest mode is enabled, toggle auto-detection of premium accounts, and specify the exact usernames allowed to join as guests. The premium session failure policy can be set to kick the player with a custom message or fall back to guest mode. Guest settings include the default gamemode, a chat prefix, and a series of join messages that can span multiple lines for clear communication.
A typical configuration might look like this:
- enable-guest-mode: true
- auto-detect-premium: true
- allow-all-guests: false
- premium-usernames: A list of usernames that always use premium authentication
- premium-session-failure: Action set to kick with a message or fallback to guest
- allowed-guests: A whitelist of specific usernames permitted to join as guests
- guest-settings: Gamemode, chat prefix, and customizable join messages
Security Considerations and Best Practices
SideGate is built with a security-first mindset, but it is not a magic shield. Guest access inherently carries impersonation risks because offline-mode players can choose any username. The plugin mitigates this by requiring you to explicitly whitelist guest usernames and by applying visible labels. However, for production servers, you should always pair SideGate with a robust permissions plugin and carefully audit your guest list. Never use the allow-all-guests option on a public server unless you fully understand the implications.
The fail-closed authentication design is a standout safety feature. If the Mojang API is unreachable, SideGate does not assume a player is a guest. Instead, it lets the normal online-mode authentication handle the login, preventing a network issue from becoming a security breach. The fallback-to-guest policy for premium session failures is explicitly flagged as high-risk and should only be used with UUID-based permission systems and additional authentication layers.
Technical Requirements
- Java 17 or higher
- Spigot, Paper, or Purpur server software
- ProtocolLib 5.x or newer
- Optional: Floodgate or Geyser-Spigot for Bedrock player support
Public API and Extensibility
For server owners who want to build custom integrations, SideGate exposes a public API that addon plugins can leverage. This allows developers to hook into the guest classification system, extend functionality, or create complementary tools without modifying the core plugin. The project is closed source, meaning modification and redistribution of SideGate itself are not permitted without explicit authorization, but normal server usage and API-based addons are fully allowed.
Final Thoughts on Hybrid Authentication
SideGate represents a thoughtful solution to a common Minecraft server dilemma. It respects the integrity of Mojang's authentication system while providing a controlled pathway for non-premium players. The plugin's granular configuration, fail-closed security model, and Bedrock compatibility make it a robust choice for server administrators who refuse to compromise on security but still want to welcome a broader community. By keeping your server in online mode and using SideGate to manage exceptions, you maintain a hardened perimeter without sacrificing inclusivity. The clear guest labeling and customizable restrictions ensure that everyone on the server knows exactly who is playing under what conditions, fostering transparency and trust among your player base.
--- **Update Jun 27, 2026:** Added 1 file for version —. --- **Update Sep 21, 2026:** Added 1 file for version 26.2, 26.1.2, 26.1.1, 26.1, 1.21.9, 1.21.8, 1.21.7, 1.21.6, 1.21.5-Snapshot, 1.21.5, 1.21.4, 1.21.3, 1.21.2, 1.21.11, 1.21.10, 1.21.1, 1.21, 1.20.6, 1.20.5-Snapshot, 1.20.5, 1.20.4, 1.20.3-Snapshot, 1.20.3, 1.20.2, 1.20.1, 1.20.