EgyDevInfo Sign In with Google
| 开发者 | egydevinfo |
|---|---|
| 更新时间 | 2026年10月7日 05:24 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
Most "Sign in with Google" setups fail in the Google Cloud console, not in WordPress: a redirect URI pasted slightly wrong, an app left in "Testing" mode so real visitors are blocked, or a site moved to a new domain and login silently breaking. This plugin is built around fixing that.
A setup page that walks you through Google Cloud
- Step-by-step instructions with direct links to the right Google Cloud pages.
- The exact redirect URI and authorized domain for your site, each with a copy button.
- Warnings for the common traps: publishing the app so it is not stuck in "Testing", and why not to upload a logo (it triggers a brand verification review).
- A Run test sign-in button that performs a real Google sign-in without logging you in, and explains any failure in plain language (wrong Client ID/Secret, redirect URI mismatch, server cannot reach Google).
- If your site address changes (staging copy, new domain, http to https, www change), you get a clear notice with the new redirect URI to add in Google.
- The button is a plain link that runs a server-side sign-in. It needs no JavaScript on your pages and carries no nonce, so full-page caching and JavaScript "delay/defer/combine" optimizers do not break it.
- Works on the WordPress login and registration pages, the WooCommerce My Account login and registration forms, and the WooCommerce checkout for guests — both the classic checkout and the Checkout block.
- A shortcode for anywhere else:
[egydevinfo_siwg_button]. - Light, dark and neutral styles following Google's sign-in button guidelines. RTL-ready.
- Accounts are matched on Google's permanent account ID, not the email address.
- An existing account is linked automatically only when Google is authoritative for the email address (a verified Gmail or Google Workspace address). Anyone else logs in with their password once and clicks "Connect Google account".
- Administrators, editors and shop managers are never linked automatically unless you allow it.
- ID tokens are checked for signature, issuer, audience, expiry and a one-time nonce; the sign-in uses a one-time state value bound to the visitor's browser, plus PKCE.
- New accounts follow your site's registration settings (or your choice), and new users only ever get a role without back-end editing powers (Customer with WooCommerce).
- Optional: restrict sign-in to your company's Google Workspace domain.
- Users can connect and disconnect Google from their profile or the WooCommerce "Account details" page.
安装:
- Install and activate the plugin. You are taken straight to the setup wizard.
- Follow the wizard (about five minutes). Your site must use HTTPS — Google requires it.
- Afterwards, find the wizard again any time from Settings → Sign In with Google → Change credentials.
wp-config.php instead of the database:
define( 'EGYDEVINFO_SIWG_CLIENT_ID', '...' );
define( 'EGYDEVINFO_SIWG_CLIENT_SECRET', '...' );常见问题:
Google says "Error 400: redirect_uri_mismatch"
The redirect URI in your Google OAuth client does not match your site. Reopen the setup wizard (Settings → Sign In with Google → Change credentials → Back to the OAuth client step), copy the redirect URI again, and paste it into "Authorized redirect URIs" exactly. It can take a few minutes for Google to apply the change.
Visitors see "Access blocked" but it works for me
Your Google app is still in "Testing" mode, where only listed test users can sign in. Open Google Auth Platform → Audience and click "Publish app".
Does it work with page caching (LiteSpeed Cache, WP Rocket, etc.)?
The button is a plain link with no nonce and no JavaScript, so cached pages keep working. The sign-in endpoints themselves send no-cache headers. Please still test once on your live site after setup.
Does it work with the WooCommerce Checkout block?
Yes. The button is added above the Checkout block for guests, and above the classic checkout form on shortcode-based checkouts.
A customer already has an account with the same email. What happens?
If the address is a verified Gmail or Google Workspace address, the accounts are linked automatically and the customer is signed in. Otherwise, for safety, they are asked to log in with their password once and connect Google from their account page.
Can I use it for staff only / my company domain only?
Yes. Set "Allowed email domains" to your Google Workspace domain, and set "New accounts" to "Never" if staff accounts are created manually.
Does it support Facebook or X?
Not at the moment. This plugin focuses on Google only.
更新日志:
1.1.2
- Enhancement: redesigned the setup wizard — a connected step indicator (numbered circles, checkmarks for completed steps), a clearer required/optional badge on the Google Cloud field table, and a more polished card layout, shared with the simplified settings page.
- Plugin Check: addressed all warnings/errors from a Plugin Check run (nonce-verification and input-sanitization notes on the credentials save handler, false-positive "offloaded content" flags on Google-domain placeholder/help text, and a false-positive unprefixed-constant flag on the required
DONOTCACHEPAGEconstant name).
- Fix: a "Passing null to strip_tags()" PHP deprecation notice on activation/wp-admin, caused by hiding the setup wizard's Dashboard menu entry with
remove_submenu_page()— that also broke WordPress's own page-title lookup for that page. The entry is now hidden with CSS instead, so the page stays properly registered.
- New: a guided setup wizard opens automatically right after activation (also reachable any time from Settings → "Change credentials"), replacing the old numbered steps on the settings page.
- Fix: Google Cloud's client-creation page now shown with both fields in Google's own order — "Authorized JavaScript origins" before "Authorized redirect URIs" — with a warning against pasting the redirect URI into the origins box, the single most common setup mistake.
- Fix: the wizard's first step now asks whether you already have a Google Cloud project for this site and skips straight to the OAuth client step if so, instead of assuming a blank-slate Google account.
- Fix: "Run test sign-in" now returns to wherever it was launched from (the wizard or the settings page) instead of always landing on the settings page.
- The settings page is now settings only (placement, accounts, button style); Client ID/Secret are managed from the wizard.
- First release.