AuthMe/AuthMeReloaded ? reverse-engineered prompt

Build me a Minecraft authentication plugin for a Bukkit and Spigot server that stops unverified players from moving, placing blocks, using commands, or opening inventory until they log in or register. It should help protect offline mode servers, but also add extra security for online mode servers.

I want support for login, registration, password recovery by email, session login, two factor auth, and premium account bypass so legitimate Mojang players can skip the password step. It should work with common server setups like Paper, Folia, BungeeCord, and Velocity, and store accounts in SQLite, MySQL, MariaDB, or PostgreSQL. Please include editable translations, good default messages, and a clean config where I can turn features on or off.

If it makes sense, add protection against bots and username spoofing, plus the usual admin commands for managing users and forcing logins. Look up current docs online if you need to, and make it feel polished enough to drop straight into a real server.