Auto Login for Sakura Rental Server
| 开发者 | sakurainternet |
|---|---|
| 更新时间 | 2025年12月3日 12:08 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 6.8 |
| 版权: | GPLv3 or later |
| 版权网址: | 版权信息 |
详情介绍:
Auto Login for Sakura Rental Server allows administrators to issue one-time, time-limited auto-login URLs using HMAC signatures.\
This is useful for secure temporary access or system integration.
Features:
- Secure auto-login with one-time tokens
- Tokens are HMAC-signed and invalidated after use
- Token issuance and usage history (up to 100 entries per user)
- Records IP address and username of the issuer
- Rate limiting: 1 request per second per IP
- WP-CLI commands for token generation and history inspection Example use cases:
- Temporarily granting admin access
- Safe automatic login from external systems
- Keeping an audit log of who issued a token and from where
安装:
- Upload the plugin to
/wp-content/plugins/auto-login-for-sakura-rental-server/. - Activate it through the Plugins menu in WordPress.
常见问题:
Can I revoke a token manually?
Yes. Run delete_transient('sakura_auto_login_token_<token>').
What happens if the URL leaks?
Anyone with the URL can log in as the target user until the token expires. Always use HTTPS and handle URLs carefully.
更新日志:
1.0.0
- Initial release
- Bugfix release