SpigotBuyerCheck

About - Why would you need this?
This J2EE application was created to provide an online web interface that fetches the buyers of your premium plugins so you can check if a user is in it. The reason why you may want to use this might be to provide a site where other users that wan't to help others can check if users actually bought your plugin - or if you want to automatically check specific users to be in your buyers.

About - How does it work?
This is a J2EE application using the SpigotSite core. It will log in using your credentials you add to a config file. Since this is a tool that will be used for premium developers you will have a 2FA key. The way this works: instead of having a phone that you have to get a token from it will "act" like the phone to generate those tokens on the fly, this will allow you to let the application run without interfering every 30 days. You can still use the access token in Google Authenticator on your phone.

Once logged in, the application will update all buyers every 30 minutes (currently not configurable). The public site has a simple form where you can enter a username. The username will first be checked to see if its actually a real spigot name. After that it will check if its in the buyer lists of one of your buyers. This checking is done using the cached buyers that are updated every 30 minutes.

It will output a list of all plugins the username bought from you.

Requirements
- A JBoss server (I use Wildfly 9 and 10)
- Your 2FA access token code:

1. If you did not store the 2FA key you will have to regenerate it (or extract it).
2. Go to "Two step verification"
   
3. Confirm your password
4. Enable "Verification with App", if its already enabled - disable and enable again
   
5. Copy the code on the bottom to the config.yml
   
6. Scan the QR code with the Google Authenticator App to generate a verification token and "Confirm"