priority shift

ignoreCancelled seems to introduce the issue of completions not being filtered in some cases, and it shouldn't cause problems by running anyway

.github/FUNDING.yml

@@ -0,0 +1,12 @@
+# These are supported funding model platforms
+
+github: # Replace with up to 4 GitHub Sponsors-enabled usernames e.g., [user1, user2]
+patreon: # Replace with a single Patreon username
+open_collective: # Replace with a single Open Collective username
+ko_fi: YouHaveTrouble
+tidelift: # Replace with a single Tidelift platform-name/package-name e.g., npm/babel
+community_bridge: # Replace with a single Community Bridge project-name e.g., cloud-foundry
+liberapay: # Replace with a single Liberapay username
+issuehunt: # Replace with a single IssueHunt username
+otechie: # Replace with a single Otechie username
+custom: # Replace with up to 4 custom sponsorship URLs e.g., ['link1', 'link2']

.github/workflows/buildjar.yml

@@ -0,0 +1,36 @@
+name: Build CommandWhitelist Jar
+
+on:
+  push:
+    branches:
+      - master
+  pull_request:
+    branches:
+      - master
+
+jobs:
+  build:
+
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout Git repo
+        uses: actions/checkout@v1
+      - name: Restore Maven cache
+        uses: actions/cache@v1
+        with:
+          path: ~/.m2/repository
+          key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
+          restore-keys: |
+            ${{ runner.os }}-maven-
+      - name: Set up JDK 1.8
+        uses: actions/setup-java@v1
+        with:
+          java-version: 1.8
+      - name: Build with Maven
+        run: mvn package --file pom.xml
+      - name: Copy artifacts
+        uses: actions/upload-artifact@master
+        with:
+          name: CommandWhitelist
+          path: target/CommandWhitelist*.jar

pom.xml

@@ -6,7 +6,7 @@
 
     <groupId>eu.endermite</groupId>
     <artifactId>CommandWhitelist</artifactId>
-    <version>1.5.2</version>
+    <version>1.7.7</version>
     <packaging>jar</packaging>
 
     <name>CommandWhitelist</name>
@@ -74,13 +74,17 @@
             <id>papermc</id>
             <url>https://papermc.io/repo/repository/maven-public/</url>
         </repository>
+        <repository>
+            <id>velocity</id>
+            <url>https://repo.velocitypowered.com/snapshots/</url>
+        </repository>
     </repositories>
 
     <dependencies>
         <dependency>
             <groupId>org.spigotmc</groupId>
             <artifactId>spigot-api</artifactId>
-            <version>1.16.3-R0.1-SNAPSHOT</version>
+            <version>1.16.5-R0.1-SNAPSHOT</version>
             <scope>provided</scope>
         </dependency>
         <dependency>
@@ -95,10 +99,16 @@
             <version>1.16-R0.4-SNAPSHOT</version>
             <scope>provided</scope>
         </dependency>
+        <dependency>
+            <groupId>com.velocitypowered</groupId>
+            <artifactId>velocity-api</artifactId>
+            <version>1.1.0-SNAPSHOT</version>
+            <scope>provided</scope>
+        </dependency>
         <dependency>
             <groupId>com.comphenix.protocol</groupId>
             <artifactId>ProtocolLib</artifactId>
-            <version>4.5.0</version>
+            <version>4.6.0</version>
             <scope>provided</scope>
         </dependency>
     </dependencies>

readme.md

@@ -1,6 +1,9 @@
 Command  Whitelist is a plugin that allows you to control 
 precisely what commands players can see and use.
 
+<img src="https://img.shields.io/bstats/servers/8705?label=Spigot%20servers%20using%20CommandWhitelist&style=for-the-badge">
+<img src="https://img.shields.io/bstats/servers/8704?label=Proxy%20servers%20using%20CommandWhitelist&style=for-the-badge">
+
 <h3>Plugin Features</h3>
 
 <ul>

src/main/java/eu/endermite/commandwhitelist/api/CommandsList.java

@@ -2,37 +2,48 @@ package eu.endermite.commandwhitelist.api;
 
 import eu.endermite.commandwhitelist.bungee.CommandWhitelistBungee;
 import eu.endermite.commandwhitelist.spigot.CommandWhitelist;
-import net.md_5.bungee.api.connection.ProxiedPlayer;
-import org.bukkit.entity.Player;
+import eu.endermite.commandwhitelist.velocity.CommandWhitelistVelocity;
 import java.util.ArrayList;
 import java.util.List;
 import java.util.Map;
 
 public class CommandsList {
 
-    public static List<String> getCommands(Player player) {
+    public static List<String> getCommands(org.bukkit.entity.Player player) {
         List<String> commandList = new ArrayList<>();
         for (Map.Entry<String, List<String>> s : CommandWhitelist.getConfigCache().getPermList().entrySet()) {
-            if (player.hasPermission("commandwhitelist.commands." + s.getKey())) {
+            if (s.getKey().equalsIgnoreCase("default"))
                 commandList.addAll(s.getValue());
-            }
+            else if (player.hasPermission("commandwhitelist.commands." + s.getKey()))
+                    commandList.addAll(s.getValue());
         }
         return commandList;
     }
 
-    public static List<String> getCommands(ProxiedPlayer player) {
+    public static List<String> getCommands(net.md_5.bungee.api.connection.ProxiedPlayer player) {
         List<String> commandList = new ArrayList<>();
         for (Map.Entry<String, List<String>> s : CommandWhitelistBungee.getConfigCache().getPermList().entrySet()) {
-            if (player.hasPermission("commandwhitelist.commands." + s.getKey())) {
+            if (s.getKey().equalsIgnoreCase("default"))
+                commandList.addAll(s.getValue());
+            else if (player.hasPermission("commandwhitelist.commands." + s.getKey()))
                 commandList.addAll(s.getValue());
-            }
         }
         return commandList;
     }
 
-    public static List<String> getSuggestions(Player player) {
-        List<String> suggestionList = new ArrayList<>();
+    public static List<String> getCommands(com.velocitypowered.api.proxy.Player player) {
+        List<String> commandList = new ArrayList<>();
+        for (Map.Entry<String, List<String>> s : CommandWhitelistVelocity.getConfigCache().getPermList().entrySet()) {
+            if (s.getKey().equalsIgnoreCase("default"))
+                commandList.addAll(s.getValue());
+            else if (player.hasPermission("commandwhitelist.commands." + s.getKey()))
+                commandList.addAll(s.getValue());
+        }
+        return commandList;
+    }
 
+    public static List<String> getSuggestions(org.bukkit.entity.Player player) {
+        List<String> suggestionList = new ArrayList<>();
         for (Map.Entry<String, List<String>> s : CommandWhitelist.getConfigCache().getPermSubList().entrySet()) {
             if (player.hasPermission("commandwhitelist.subcommands." + s.getKey()))
                 continue;
@@ -52,4 +63,11 @@ public class CommandsList {
         return last;
     }
 
+    public static String getCommandLabel(String cmd) {
+        String[] parts = cmd.split(" ");
+        if (parts[0].startsWith("/"))
+            parts[0] = parts[0].substring(1);
+        return parts[0];
+    }
+
 }

src/main/java/eu/endermite/commandwhitelist/bungee/CommandWhitelistBungee.java

@@ -24,7 +24,6 @@ public final class CommandWhitelistBungee extends Plugin {
 
     @Override
     public void onEnable() {
-
         plugin = this;
         getLogger().info("Running on "+ ChatColor.DARK_AQUA+getProxy().getName());
         loadConfig();
@@ -40,18 +39,15 @@ public final class CommandWhitelistBungee extends Plugin {
 
         int pluginId = 8704;
         new BungeeMetrics(this, pluginId);
-
     }
 
     public static CommandWhitelistBungee getPlugin() {
         return plugin;
     }
-
     public static BungeeConfigCache getConfigCache() {
         return configCache;
     }
 
-
     public void loadConfig() {
         try {
             if (!getDataFolder().exists()) {
@@ -81,5 +77,4 @@ public final class CommandWhitelistBungee extends Plugin {
             sender.sendMessage(ChatColor.translateAlternateColorCodes('&', CommandWhitelistBungee.getConfigCache().getPrefix() + CommandWhitelistBungee.getConfigCache().getConfigReloaded()));
         });
     }
-
 }

src/main/java/eu/endermite/commandwhitelist/bungee/command/BungeeMainCommand.java

@@ -9,7 +9,6 @@ import java.util.ArrayList;
 import java.util.List;
 import java.util.Map;
 
-
 public class BungeeMainCommand extends Command implements TabExecutor {
 
     public BungeeMainCommand(String name) {

src/main/java/eu/endermite/commandwhitelist/bungee/listeners/BungeeChatEventListener.java

@@ -14,28 +14,20 @@ public class BungeeChatEventListener implements Listener {
 
     @EventHandler
     public void onChatEvent(net.md_5.bungee.api.event.ChatEvent event) {
-
         if (event.isCancelled())
             return;
-
         if (!(event.getSender() instanceof ProxiedPlayer))
             return;
-
         if (!event.isProxyCommand())
             return;
-
         ProxiedPlayer player = (ProxiedPlayer) event.getSender();
-
-        if (player.hasPermission("commandwhitelist.bypass")) {
+        if (player.hasPermission("commandwhitelist.bypass"))
             return;
-        }
-
         String command = event.getMessage().toLowerCase();
         boolean found = false;
         for (Map.Entry<String, List<String>> s : CommandWhitelistBungee.getConfigCache().getPermList().entrySet()) {
             if (!player.hasPermission("commandwhitelist.commands." + s.getKey()))
                 continue;
-
             for (String comm : s.getValue()) {
                 comm = comm.toLowerCase();
                 if (command.equalsIgnoreCase("/" + comm)) {

src/main/java/eu/endermite/commandwhitelist/bungee/listeners/WaterfallDefineCommandsListener.java

@@ -13,25 +13,17 @@ public class WaterfallDefineCommandsListener implements Listener {
 
     @EventHandler
     public void onProxyDefineCommandsEvent(io.github.waterfallmc.waterfall.event.ProxyDefineCommandsEvent event) {
-
         if (event.getReceiver() instanceof ProxiedPlayer) {
             ProxiedPlayer player = (ProxiedPlayer) event.getReceiver();
-
-            if (player.hasPermission("commandwhitelist.bypass")) {
+            if (player.hasPermission("commandwhitelist.bypass"))
                 return;
-            }
-
             HashMap<String, Command> commandHashMap = new HashMap<>();
             CommandsList.getCommands(player).forEach(cmdName ->
                     CommandWhitelistBungee.getPlugin().getProxy().getPluginManager().getCommands()
                             .stream()
                             .filter(commandEntry -> cmdName.equalsIgnoreCase(commandEntry.getValue().getName()))
                             .forEach(commandEntry -> commandHashMap.put(commandEntry.getKey(), commandEntry.getValue())));
-
             event.getCommands().values().removeIf((cmd) -> !commandHashMap.containsValue(cmd));
         }
-
-
     }
-
 }

src/main/java/eu/endermite/commandwhitelist/spigot/CommandWhitelist.java

@@ -2,15 +2,13 @@ package eu.endermite.commandwhitelist.spigot;
 
 import eu.endermite.commandwhitelist.spigot.command.MainCommand;
 import eu.endermite.commandwhitelist.spigot.config.ConfigCache;
-import eu.endermite.commandwhitelist.spigot.listeners.LegacyPlayerTabChatCompleteListener;
-import eu.endermite.commandwhitelist.spigot.listeners.PlayerCommandPreProcessListener;
-import eu.endermite.commandwhitelist.spigot.listeners.PlayerCommandSendListener;
-import eu.endermite.commandwhitelist.spigot.listeners.TabCompleteBlockerListener;
+import eu.endermite.commandwhitelist.spigot.listeners.*;
 import eu.endermite.commandwhitelist.spigot.metrics.BukkitMetrics;
 import org.bukkit.Bukkit;
 import org.bukkit.ChatColor;
 import org.bukkit.command.CommandSender;
 import org.bukkit.entity.Player;
+import org.bukkit.plugin.Plugin;
 import org.bukkit.plugin.java.JavaPlugin;
 
 public class CommandWhitelist extends JavaPlugin {
@@ -28,20 +26,27 @@ public class CommandWhitelist extends JavaPlugin {
 
         reloadPluginConfig();
 
+        Plugin protocollib = getServer().getPluginManager().getPlugin("ProtocolLib");
+
         getServer().getPluginManager().registerEvents(new PlayerCommandPreProcessListener(), this);
         if (!isLegacy) {
-            getServer().getPluginManager().registerEvents(new PlayerCommandSendListener(), this);
+            if (!getConfigCache().isUseProtocolLib() || protocollib == null || !protocollib.isEnabled()) {
+
+                getServer().getPluginManager().registerEvents(new PlayerCommandSendListener(), this);
+            } else {
+                PacketCommandSendListener.protocol(this);
+                getLogger().info(ChatColor.AQUA+"Using ProtocolLib for command filter!");
+            }
+            getServer().getPluginManager().registerEvents(new TabCompleteBlockerListener(), this);
         } else {
             getLogger().info(ChatColor.AQUA+"Running in legacy mode...");
-            if (getServer().getPluginManager().getPlugin("ProtocolLib") != null) {
+            if (protocollib != null) {
                 LegacyPlayerTabChatCompleteListener.protocol(this);
             } else {
                 getLogger().info(ChatColor.YELLOW+"ProtocolLib is required for tab completion blocking!");
             }
         }
 
-        getServer().getPluginManager().registerEvents(new TabCompleteBlockerListener(), this);
-
         getCommand("commandwhitelist").setExecutor(new MainCommand());
         getCommand("commandwhitelist").setTabCompleter(new MainCommand());
 

src/main/java/eu/endermite/commandwhitelist/spigot/command/MainCommand.java

@@ -58,7 +58,6 @@ public class MainCommand implements TabExecutor {
                 } else {
                     sender.sendMessage("/cw remove <group> <command>");
                 }
-
             } else {
                 sender.sendMessage(ChatColor.translateAlternateColorCodes('&', CommandWhitelist.getConfigCache().getPrefix() + CommandWhitelist.getConfigCache().getNoSubCommand()));
             }

src/main/java/eu/endermite/commandwhitelist/spigot/config/ConfigCache.java

@@ -17,6 +17,7 @@ public class ConfigCache {
     private final String prefix, commandDenied, noPermission, noSubCommand, configReloaded, whitelistedCommand,
             removedWhitelistedCommand, noSuchGroup, subCommandDenied;
     private final List<String> commandDeniedList;
+    private boolean useProtocolLib;
 
     public ConfigCache(FileConfiguration config) {
 
@@ -33,6 +34,8 @@ public class ConfigCache {
         removedWhitelistedCommand = config.getString("messages.removed-from-whitelist", "&eRemoved command &6%s &efrom permission &6%s");
         noSuchGroup = config.getString("messages.group-doesnt-exist", "&cGroup %s doesn't exist");
 
+        useProtocolLib = config.getBoolean("use-protocollib-to-detect-commands", false);
+
         Set<String> perms = config.getConfigurationSection("commands").getKeys(false);
         for (String s : perms) {
             this.permList.put(s, config.getStringList("commands."+s));
@@ -99,4 +102,7 @@ public class ConfigCache {
     public String getSubCommandDenied() {
         return subCommandDenied;
     }
+    public boolean isUseProtocolLib() {
+        return useProtocolLib;
+    }
 }

src/main/java/eu/endermite/commandwhitelist/spigot/listeners/LegacyPlayerTabChatCompleteListener.java

@@ -19,6 +19,7 @@ public class LegacyPlayerTabChatCompleteListener {
     public static void protocol(CommandWhitelist plugin) {
         ProtocolManager protocolManager = ProtocolLibrary.getProtocolManager();
         tabCompleteServerBound(protocolManager, plugin);
+        tabCompleteClientBound(protocolManager, plugin);
     }
 
     public static void tabCompleteServerBound(ProtocolManager protocolManager, Plugin plugin) {
@@ -27,9 +28,8 @@ public class LegacyPlayerTabChatCompleteListener {
             public void onPacketSending(PacketEvent event) {
                 try {
                     Player player = event.getPlayer();
-                    if (player.hasPermission("commandwhitelist.bypass")) {
+                    if (player.hasPermission("commandwhitelist.bypass"))
                         return;
-                    }
                     PacketContainer packet = event.getPacket();
                     String[] message = packet.getSpecificModifier(String[].class).read(0);
                     List<String> commandList = CommandsList.getCommands(player);
@@ -43,18 +43,43 @@ public class LegacyPlayerTabChatCompleteListener {
                             }
                         }
                     }
-
                     String[] toWrite = new String[components];
                     int counter = 0;
                     for (String cmd : finalList) {
                         toWrite[counter++] = cmd;
                     }
-
                     packet.getSpecificModifier(String[].class).write(0, toWrite);
-
                 } catch (Exception ignored) {}
             }
         });
     }
 
+    public static void tabCompleteClientBound(ProtocolManager protocolManager, Plugin plugin) {
+        protocolManager.addPacketListener(new PacketAdapter(plugin, ListenerPriority.HIGHEST, PacketType.Play.Client.TAB_COMPLETE) {
+            @Override
+            public void onPacketReceiving(PacketEvent event) {
+                try {
+                    Player player = event.getPlayer();
+                    if (player.hasPermission("commandwhitelist.bypass")) {
+                        return;
+                    }
+                    PacketContainer packet = event.getPacket();
+                    String command = packet.getSpecificModifier(String.class).read(0);
+                    String label = CommandsList.getCommandLabel(command);
+                    List<String> commandList = CommandsList.getCommands(player);
+                    if (command.equals("/"))
+                        return;
+                    for (String cmd : commandList) {
+                        if (cmd.startsWith("/"+label+" "))
+                            return;
+                    }
+                    event.setCancelled(true);
+
+                } catch (Exception e) {
+                    e.printStackTrace();
+                }
+
+            }
+        });
+    }
 }

src/main/java/eu/endermite/commandwhitelist/spigot/listeners/PacketCommandSendListener.java

@@ -0,0 +1,68 @@
+package eu.endermite.commandwhitelist.spigot.listeners;
+
+import com.comphenix.protocol.PacketType;
+import com.comphenix.protocol.ProtocolLibrary;
+import com.comphenix.protocol.ProtocolManager;
+import com.comphenix.protocol.events.ListenerPriority;
+import com.comphenix.protocol.events.PacketAdapter;
+import com.comphenix.protocol.events.PacketContainer;
+import com.comphenix.protocol.events.PacketEvent;
+import eu.endermite.commandwhitelist.api.CommandsList;
+import eu.endermite.commandwhitelist.api.RandomStuff;
+import eu.endermite.commandwhitelist.spigot.CommandWhitelist;
+import eu.endermite.commandwhitelist.spigot.config.ConfigCache;
+import org.bukkit.ChatColor;
+import org.bukkit.entity.Player;
+import org.bukkit.plugin.Plugin;
+import java.util.List;
+import java.util.Map;
+
+public class PacketCommandSendListener {
+
+    public static void protocol(CommandWhitelist plugin) {
+        ProtocolManager protocolManager = ProtocolLibrary.getProtocolManager();
+        commandExecListener(protocolManager, plugin);
+    }
+
+    public static void commandExecListener(ProtocolManager protocolManager, Plugin plugin) {
+        protocolManager.addPacketListener(new PacketAdapter(plugin, ListenerPriority.HIGHEST, PacketType.Play.Client.CHAT) {
+            @Override
+            public void onPacketReceiving(PacketEvent event) {
+                PacketContainer packet = event.getPacket();
+                String string = packet.getStrings().read(0);
+                if (!string.startsWith("/"))
+                    return;
+                Player player = event.getPlayer();
+                if (player.hasPermission("commandwhitelist.bypass"))
+                    return;
+                String cmd = string.replace("/", "");
+                String[] split = cmd.split("\\s+");
+                String command = split[0].toLowerCase();
+                for (Map.Entry<String, List<String>> s : CommandWhitelist.getConfigCache().getPermList().entrySet()) {
+                    if (!player.hasPermission("commandwhitelist.commands." + s.getKey()))
+                        continue;
+                    for (String comm : s.getValue()) {
+                        comm = comm.toLowerCase();
+                        if (command.equalsIgnoreCase(comm) || command.startsWith(comm + " ")) {
+                            List<String> bannedSubCommands = CommandsList.getSuggestions(player);
+                            for (String bannedSubCommand : bannedSubCommands) {
+                                if (cmd.startsWith(bannedSubCommand)) {
+                                    event.setCancelled(true);
+                                    ConfigCache config = CommandWhitelist.getConfigCache();
+                                    player.sendMessage(ChatColor.translateAlternateColorCodes('&', config.getPrefix() + RandomStuff.getMessage(config.getCommandDeniedList(), config.getSubCommandDenied())));
+                                    return;
+                                }
+                            }
+                            return;
+                        }
+                    }
+                }
+
+                event.setCancelled(true);
+                ConfigCache config = CommandWhitelist.getConfigCache();
+                player.sendMessage(ChatColor.translateAlternateColorCodes('&', config.getPrefix() + RandomStuff.getMessage(config.getCommandDeniedList(), config.getCommandDenied())));
+
+            }
+        });
+    }
+}

src/main/java/eu/endermite/commandwhitelist/spigot/listeners/PlayerCommandPreProcessListener.java

@@ -9,28 +9,28 @@ import org.bukkit.entity.Player;
 import org.bukkit.event.EventHandler;
 import org.bukkit.event.EventPriority;
 import org.bukkit.event.Listener;
-
 import java.util.List;
 import java.util.Map;
 
 public class PlayerCommandPreProcessListener implements Listener {
-
-    @EventHandler(priority = EventPriority.HIGHEST)
+    @EventHandler(priority = EventPriority.HIGHEST, ignoreCancelled = true)
     public void PlayerCommandSendEvent(org.bukkit.event.player.PlayerCommandPreprocessEvent event) {
         Player player = event.getPlayer();
         if (player.hasPermission("commandwhitelist.bypass"))
             return;
         String command = event.getMessage().toLowerCase();
+        if (command.startsWith("/"))
+            command = command.substring(1);
         for (Map.Entry<String, List<String>> s : CommandWhitelist.getConfigCache().getPermList().entrySet()) {
             if (!player.hasPermission("commandwhitelist.commands." + s.getKey()))
                 continue;
             for (String comm : s.getValue()) {
                 comm = comm.toLowerCase();
-                if (command.equalsIgnoreCase("/" + comm) || command.startsWith("/" + comm + " ")) {
+                if (command.equalsIgnoreCase(comm) || command.startsWith(comm + " ")) {
                     String rawCmd = event.getMessage();
                     List<String> bannedSubCommands = CommandsList.getSuggestions(player);
                     for (String bannedSubCommand : bannedSubCommands) {
-                        if (rawCmd.startsWith("/"+bannedSubCommand)) {
+                        if (rawCmd.startsWith(bannedSubCommand)) {
                             event.setCancelled(true);
                             ConfigCache config = CommandWhitelist.getConfigCache();
                             player.sendMessage(ChatColor.translateAlternateColorCodes('&', config.getPrefix() + RandomStuff.getMessage(config.getCommandDeniedList(), config.getSubCommandDenied())));
@@ -39,13 +39,10 @@ public class PlayerCommandPreProcessListener implements Listener {
                     }
                     return;
                 }
-
-
             }
         }
         event.setCancelled(true);
         ConfigCache config = CommandWhitelist.getConfigCache();
         player.sendMessage(ChatColor.translateAlternateColorCodes('&', config.getPrefix() + RandomStuff.getMessage(config.getCommandDeniedList(), config.getCommandDenied())));
     }
-
 }

src/main/java/eu/endermite/commandwhitelist/spigot/listeners/PlayerCommandSendListener.java

@@ -8,21 +8,12 @@ import org.bukkit.event.Listener;
 import java.util.*;
 
 public class PlayerCommandSendListener implements Listener {
-
-    @EventHandler(priority = EventPriority.HIGHEST)
+    @EventHandler(priority = EventPriority.NORMAL)
     public void PlayerCommandSendEvent(org.bukkit.event.player.PlayerCommandSendEvent event) {
         Player player = event.getPlayer();
-
-        if (player.hasPermission("commandwhitelist.bypass")) {
+        if (player.hasPermission("commandwhitelist.bypass"))
             return;
-        }
-
         List<String> commandList = CommandsList.getCommands(player);
-
         event.getCommands().removeIf((cmd) -> !commandList.contains(cmd));
-
     }
-
-
-
 }

src/main/java/eu/endermite/commandwhitelist/spigot/listeners/TabCompleteBlockerListener.java

@@ -8,7 +8,6 @@ import org.bukkit.event.Listener;
 import java.util.List;
 
 public class TabCompleteBlockerListener implements Listener {
-
     @EventHandler(priority = EventPriority.HIGHEST, ignoreCancelled = true)
     public void onCommandTabComplete(org.bukkit.event.server.TabCompleteEvent event) {
         if (!(event.getSender() instanceof Player))
@@ -22,12 +21,12 @@ public class TabCompleteBlockerListener implements Listener {
             String slast = CommandsList.getLastArgument(s);
             String scommand = s.replace(slast, "");
             cmd = cmd.replace(CommandsList.getLastArgument(cmd), "");
-            if (cmd.startsWith("/" + scommand + " ")) {
-                continue;
+            if (cmd.startsWith("/" + scommand)) {
+                try {
+                    while (suggestions.contains(slast))
+                        suggestions.remove(slast);
+                } catch (Exception ignored) {}
             }
-            try {
-                suggestions.remove(slast);
-            } catch (Exception ignored) {}
         }
         event.setCompletions(suggestions);
     }

src/main/java/eu/endermite/commandwhitelist/velocity/CommandWhitelistVelocity.java

@@ -0,0 +1,112 @@
+package eu.endermite.commandwhitelist.velocity;
+
+import com.moandjiezana.toml.Toml;
+import com.velocitypowered.api.command.CommandMeta;
+import com.velocitypowered.api.command.CommandSource;
+import com.velocitypowered.api.event.Subscribe;
+import com.velocitypowered.api.event.command.CommandExecuteEvent;
+import com.velocitypowered.api.event.command.PlayerAvailableCommandsEvent;
+import com.velocitypowered.api.event.proxy.ProxyInitializeEvent;
+import com.velocitypowered.api.plugin.Plugin;
+import com.velocitypowered.api.plugin.annotation.DataDirectory;
+import com.velocitypowered.api.proxy.Player;
+import com.velocitypowered.api.proxy.ProxyServer;
+import eu.endermite.commandwhitelist.api.CommandsList;
+import eu.endermite.commandwhitelist.velocity.command.VelocityMainCommand;
+import eu.endermite.commandwhitelist.velocity.config.VelocityConfigCache;
+import net.kyori.adventure.identity.Identity;
+import net.kyori.adventure.text.Component;
+import org.slf4j.Logger;
+import javax.inject.Inject;
+import java.io.File;
+import java.io.IOException;
+import java.io.InputStream;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.util.List;
+
+public class CommandWhitelistVelocity {
+
+    private static CommandWhitelistVelocity plugin;
+    private static ProxyServer server;
+    private static VelocityConfigCache configCache;
+    private static Path folder;
+
+    @Inject
+    public CommandWhitelistVelocity(ProxyServer server, Logger logger, @DataDirectory final Path folder) {
+        CommandWhitelistVelocity.server = server;
+        CommandWhitelistVelocity.folder = folder;
+        CommandWhitelistVelocity.plugin = this;
+    }
+
+    private static Toml loadConfig(Path path) {
+        File folder = path.toFile();
+        File file = new File(folder, "config.toml");
+        if (!file.getParentFile().exists())
+            file.getParentFile().mkdirs();
+
+        if (!file.exists()) {
+            try (InputStream input = CommandWhitelistVelocity.class.getResourceAsStream("/" + file.getName())) {
+                if (input != null) {
+                    Files.copy(input, file.toPath());
+                } else {
+                    file.createNewFile();
+                }
+            } catch (IOException exception) {
+                exception.printStackTrace();
+                return null;
+            }
+        }
+        return new Toml().read(file);
+    }
+
+    private static void reloadConfig() {
+        configCache = new VelocityConfigCache(loadConfig(folder));
+    }
+
+    public static void reloadConfig(CommandSource source) {
+        server.getScheduler().buildTask(plugin, () -> {
+            reloadConfig();
+            source.sendMessage(Identity.nil(), Component.text(getConfigCache().getConfigReloaded()));
+        }).schedule();
+    }
+
+    @Subscribe
+    public void onProxyInitialization(ProxyInitializeEvent event) {
+        reloadConfig();
+        CommandMeta commandMeta = server.getCommandManager().metaBuilder("vcw").build();
+        server.getCommandManager().register(commandMeta, new VelocityMainCommand());
+    }
+
+    @Subscribe
+    public void onUserCommandSendEvent(PlayerAvailableCommandsEvent event) {
+        if (event.getPlayer().hasPermission("commandwhitelist.bypass"))
+            return;
+        List<String> allowedCommands = CommandsList.getCommands(event.getPlayer());
+        event.getRootNode().getChildren().removeIf((commandNode) ->
+                 server.getCommandManager().hasCommand(commandNode.getName())
+                        && !allowedCommands.contains(commandNode.getName())
+        );
+    }
+
+    @Subscribe
+    public void onUserCommandExecuteEvent(com.velocitypowered.api.event.command.CommandExecuteEvent event) {
+        if (!(event.getCommandSource() instanceof Player))
+            return;
+        Player player = (Player) event.getCommandSource();
+
+        if (player.hasPermission("commandwhitelist.bypass"))
+            return;
+
+        List<String> allowedCommands = CommandsList.getCommands(player);
+        String command = event.getCommand().split(" ")[0];
+        if (server.getCommandManager().hasCommand(command)
+                && !allowedCommands.contains(command))
+            event.setResult(CommandExecuteEvent.CommandResult.forwardToServer());
+    }
+
+    public static VelocityConfigCache getConfigCache() {
+        return configCache;
+    }
+
+}

src/main/java/eu/endermite/commandwhitelist/velocity/command/VelocityMainCommand.java

@@ -0,0 +1,48 @@
+package eu.endermite.commandwhitelist.velocity.command;
+
+import com.velocitypowered.api.command.CommandSource;
+import com.velocitypowered.api.command.SimpleCommand;
+import eu.endermite.commandwhitelist.velocity.CommandWhitelistVelocity;
+import net.kyori.adventure.text.Component;
+
+import java.util.ArrayList;
+import java.util.Arrays;
+import java.util.List;
+import java.util.concurrent.CompletableFuture;
+
+public class VelocityMainCommand implements SimpleCommand {
+
+    @Override
+    public void execute(final Invocation invocation) {
+        CommandSource source = invocation.source();
+        String[] args = invocation.arguments();
+        if (args.length > 0) {
+            if (args.length == 1 && args[0].equalsIgnoreCase("reload")) {
+                if (source.hasPermission("commandwhitelist.reload")) {
+                    CommandWhitelistVelocity.reloadConfig(source);
+                } else {
+                    source.sendMessage(Component.text(CommandWhitelistVelocity.getConfigCache().getNoPermission()));
+                }
+            }
+        } else {
+            source.sendMessage(Component.text("&bCommand Whitelist by YouHaveTrouble".replaceAll("&", "§")));
+            if (source.hasPermission("commandwhitelist.reload")) {
+                source.sendMessage(Component.text("&9/vcw reload &b- Reload velocity plugin configuration".replaceAll("&", "§")));
+            }
+        }
+    }
+
+    @Override
+    public CompletableFuture<List<String>> suggestAsync(Invocation invocation) {
+        CommandSource source = invocation.source();
+        String[] args = invocation.arguments();
+        return CompletableFuture.supplyAsync(() -> {
+            List<String> suggestions = new ArrayList<>();
+            if (args.length == 1) {
+                if (source.hasPermission("commandwhitelist.reload") && "reload".startsWith(args[0]))
+                    suggestions.add("reload");
+            }
+            return suggestions;
+        });
+    }
+}

src/main/java/eu/endermite/commandwhitelist/velocity/config/VelocityConfigCache.java

@@ -0,0 +1,38 @@
+package eu.endermite.commandwhitelist.velocity.config;
+
+import com.moandjiezana.toml.Toml;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+
+public class VelocityConfigCache {
+
+    private HashMap<String, List<String>> permList = new HashMap<>();
+    private final String noPermission, noSubCommand, configReloaded;
+
+
+    public VelocityConfigCache(Toml config) {
+
+        Toml messages = config.getTable("messages");
+        noPermission = messages.getString("no-permission", "&cYou don't have permission to do this.");
+        noSubCommand = messages.getString("no-such-subcommand", "&cNo subcommand by that name.");
+        configReloaded = messages.getString("config-reloaded", "&eConfiguration reloaded.");
+
+        Toml groups = config.getTable("commands");
+
+        for (Map.Entry<String, Object> set : groups.entrySet()) {
+            this.permList.put(set.getKey(), (List<String>) set.getValue());
+        }
+    }
+
+    public HashMap<String, List<String>> getPermList() {
+        return permList;
+    }
+    public String getNoPermission() {
+        return noPermission.replaceAll("&", "§");
+    }
+    public String getNoSubCommand() {return  noSubCommand.replaceAll("&", "§");}
+    public String getConfigReloaded() {return  configReloaded.replaceAll("&", "§");}
+
+
+}

src/main/resources/bungeeconfig.yml

@@ -13,9 +13,7 @@ commands:
   # Permissions that control what commands players can use
   # you can add unlimited amount of whitelists
 
-  # commandwhitelist.commands.default
-  # this will NOT be automatically given to players by default!
-  # you have to give this permission to default droup by yourself as there is no automatic way to do it for a plugin
+  # this will be automatically given to players by default
   default:
     - glist
     - server

src/main/resources/config.toml

@@ -0,0 +1,24 @@
+# This is velocity version of the config.
+[messages]
+prefix="CommandWhitelist > "
+command-denied="No such command."
+subcommand-denied="You cannot use this subcommand"
+no-permission="&cYou don't have permission to do this."
+no-such-subcommand="&cNo subcommand by that name."
+config-reloaded="&eConfiguration reloaded."
+added-to-whitelist="&eWhitelisted command &6%s &efor permission &6%s"
+removed-from-whitelist="&eRemoved command &6%s &efrom permission &6%s"
+group-doesnt-exist="&cGroup doesn't exist or error occured"
+
+# Permissions that control what commands players can use
+# you can add unlimited amount of whitelists
+[commands]
+# this will be automatically given to players by default
+default= [
+  "velocity",
+  "server",
+]
+# commandwhitelist.commands.example
+example= [
+  "example"
+]

src/main/resources/config.yml

@@ -9,11 +9,15 @@ messages:
   removed-from-whitelist: "&eRemoved command &6%s &efrom permission &6%s"
   group-doesnt-exist: "&cGroup doesn't exist or error occured"
 
+# To cover the 1% of plugins that don't register their commands and/or aliases properly.
+# Do not enable if you don't have issues with aliased commands.
+# This requires server restart to take effect.
+use-protocollib-to-detect-commands: false
+
 commands:
   # Permissions that control what commands players can use
   # you can add unlimited amount of whitelists
 
-  # commandwhitelist.commands.default
   # this will be automatically given to players by default
   default:
     - help

src/main/resources/velocity-plugin.json

@@ -0,0 +1,9 @@
+{
+  "id":"commandwhitelist",
+  "name":"CommandWhitelist",
+  "version":"${project.version}",
+  "description":"Control what commands players can use",
+  "authors":["YouHaveTrouble"],
+  "dependencies":[],
+  "main":"eu.endermite.commandwhitelist.velocity.CommandWhitelistVelocity"
+}