| 开发者 | lucasmacon |
|---|---|
| 更新时间 | 2026年3月23日 22:00 |
| PHP版本: | 8.0 及以上 |
| WordPress版本: | 6.9 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
No. This plugin is an integration with the Alter Product platform.
No. API requests are disabled until credentials are saved.
Design assets and rendering are handled by Alter Product infrastructure.
No. Checkout flow remains unchanged. The plugin only adds configuration data and possibility to edit/view design.
No. The configurator runs inside an isolated iframe application.
Yes. WooCommerce must be installed and active.
The embed session token is requested server-side via a WordPress REST API endpoint protected by a valid X-WP-Nonce (wp_rest). The request is made from the same-origin storefront (parent page). After the token is issued, it is securely passed to the embedded iframe using postMessage with origin verification and a handshake mechanism. The iframe itself does not have direct access to WordPress API credentials. All API secrets remain on the server.