AuthLatch
| 开发者 | madc0de |
|---|---|
| 更新时间 | 2026年8月27日 22:04 |
| PHP版本: | 8.0 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
AuthLatch helps site owners replace routine password logins with secure passwordless access.
Key features:
- One-time magic links requested by username or email, with expiry and one-use tokens.
- Passkey login using WebAuthn/FIDO2.
- Self-service AuthLatch sidebar page for selected user roles.
- Users can add, revoke, and name their own passkeys.
- Users can send a magic login link to their own account email.
- Per-role passkey access and per-user passkey limits.
- Branded responsive login screen with method tabs for magic links, passkeys, and password fallback.
- Single active session control.
- Admin-generated login links with optional IP binding and auto logout.
- Admin-scoped login links that can block selected admin menus for that session.
- Built-in SMTP settings for hosts where PHP mail delivery is disabled.
- Audit log for important authentication events.
- RTL-friendly login UI.
安装:
- Upload the plugin ZIP through Plugins > Add New > Upload Plugin.
- Activate AuthLatch.
- Open AuthLatch > Settings from the WordPress admin sidebar.
- Configure magic links, passkeys, self-service roles, branding, and SMTP if needed.
- Save settings.
- Send a test SMTP email before relying on email-only login.
常见问题:
Does AuthLatch require a separate SMTP plugin?
No. AuthLatch includes SMTP settings and uses WordPress PHPMailer.
Does passkey login require HTTPS?
Yes. WebAuthn passkeys require a secure browser context, usually HTTPS. Localhost is generally allowed for development.
Where does a user add a passkey?
Allowed users can open AuthLatch from the WordPress admin sidebar and use Add passkey. Passkeys can also be managed from the WordPress profile page.
Can administrators keep password login as a fallback?
Yes. The settings include an administrator password fallback option.
Can users request magic links for their own account?
Yes. If their role is selected in Self-Service Page settings, users can open AuthLatch in the sidebar and send a login link to their account email.
Does AuthLatch send data to an external service?
AuthLatch does not send authentication data to an AuthLatch service. If SMTP is enabled, email is sent through the SMTP server configured by the site administrator.
更新日志:
1.0.2
- Updated compatibility metadata for WordPress 7.1.
- Updated compatibility metadata for WordPress 7.0.
- Initial WordPress submission release.
- Added role-gated self-service AuthLatch sidebar page.
- Added user-managed passkey registration and revocation from the sidebar.
- Added user self-service magic-link email action.
- Added plugin action link for settings.