StoreToNative – Mobile App Builder for WooCommerce
| 开发者 | storetonative |
|---|---|
| 更新时间 | 2026年10月1日 07:31 |
| PHP版本: | 8.0 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
A WooCommerce mobile app builder that makes your store a real native Android and iOS app.
Most "website to app" tools load your site inside a WebView and call it an app. Your customers can tell — and so can Apple, whose review guidelines turn away apps that are little more than a repackaged website.
StoreToNative is different. Your storefront — home, catalogue, search, product pages, cart and account — renders natively on the device from your store's live data. Checkout runs on your store's own checkout page inside the app — or, if you switch on native checkout, shoppers fill in their details in a native form and only the payment step opens your checkout — so your existing payment gateways keep working untouched and StoreToNative never takes a cut of your sales.
This plugin is the WordPress half of that. It pairs your store with your app in one click, then handles the things that can only be done from inside WordPress.
What this plugin does
- 1-click connect. Paste a short pairing code from your StoreToNative console. No OAuth redirect, no "approve this application" screen to trip over on security-hardened sites.
- Deep-link hosting. Serves
.well-known/apple-app-site-associationand.well-known/assetlinks.jsonfrom your store's own domain — which is what iOS Universal Links and Android App Links require, and which nothing outside your site can do for you. - Smart app-install banner. Once your app is live on the App Store or Google Play, shows shoppers browsing your storefront on that kind of phone a lightweight banner to install it (you can switch it off), plus an
apple-itunes-appmeta tag so Safari's own native banner takes over on iOS. - Store readiness checks. Fourteen checks over your own WooCommerce settings for the things that quietly break a mobile app — "Coming soon" mode left switched on, no payment method enabled, Plain permalinks, no shipping zone, a stale product price index, downloadable products that both app stores reject — each in plain language, with what it costs you and exactly which screen to fix it on. They run entirely inside WordPress, and they work before you pair.
- Shopper sign-in. Shoppers sign in to your app with the WooCommerce account they already have. Passwords are checked by WordPress itself and never reach StoreToNative. Accounts that can run your store — administrators, shop managers, editors and anyone else who can write posts — cannot sign in to the app; to try your app as a shopper, use a customer account. If you protect
wp-login.phpby its address (a hidden login URL, an IP allowlist, or server password protection), apply the same protection to/wp-json/storetonative/v1/shopper/: it is a second place your site checks passwords.
- A native catalogue — swipeable galleries with pinch-zoom, colour swatches, a full variation picker, ratings and reviews, instant search, filters and a persistent wishlist
- A design studio with a live phone preview beside every control: colours, typography, product grid, storefront presets and a drag-to-reorder home screen
- Over-the-air updates — change your theme, banners and home layout, and installed apps pick it up on their own. No rebuild, no app-store re-review
- Push notifications: order-status updates and broadcast campaigns, plus abandoned-cart recovery on the Pro plan
- Signed Android builds, with guided checklists for Google Play and App Store submission — or direct APK distribution, no Play account required
- First-class Arabic and right-to-left layouts
- Your own payment gateways, and no commission on your sales
- WooCommerce must be installed and active. This plugin does nothing without it.
- A StoreToNative account. This is a companion plugin, not a standalone app builder. The app itself is built and published from the StoreToNative console, a paid subscription with a free trial; this plugin is what pairs your store with it.
- HTTPS. Pairing is refused on a plain-http site.
安装:
- Upload the plugin to
/wp-content/plugins/, or install it directly from the WordPress plugin directory. - Activate the plugin through the "Plugins" screen in WordPress. WooCommerce must already be installed and active.
- Go to the new "StoreToNative" menu in your wp-admin sidebar.
- Open your StoreToNative console, generate a pairing code for this store, and enter it on the connect screen.
- Read the Store readiness card and fix anything it flags — it works before you pair, too.
- Once paired, the dashboard shows your app's connection status, deep-link readiness, and the smart banner toggle.
屏幕截图:
常见问题:
Is this a WebView wrapper?
No. Your storefront — home, catalogue, search, product pages, cart and account — is drawn natively on the phone from your store's live data. Checkout runs on your store's own checkout page inside the app, so your payment gateways work unchanged; with native checkout switched on, shoppers fill in their details in a native form and only the payment step opens your checkout.
How much does it cost?
StoreToNative is a subscription with a 14-day free trial. Plans are Starter at $29 a month, Pro at $79 and Agency at $249. StoreToNative never takes a commission on your sales. This plugin itself is free.
Do I need an Apple or Google developer account?
To publish in the App Store or Google Play, yes: your app is published under your own Apple Developer and Google Play accounts, never ours. Android apps can also be installed straight from a download link with no Google Play account at all.
Can I try it before paying?
Yes. Preview your own store as an app at https://app.storetonative.com/demo, and run this plugin's store readiness checks before you connect anything.
Do I need a StoreToNative account?
Yes, to build and publish an app. This plugin pairs your store with a StoreToNative account — it isn't a standalone app builder. The store readiness checks work without one, and the plugin's connect screen links to a free trial.
Does this send data before I connect?
No. Installing or activating this plugin makes zero network requests. The very first request it ever makes is the pairing request, and only after you've pasted a pairing code into the connect screen yourself. See "External services" above for exactly what that first request contains.
Does it work without HTTPS?
No. This plugin refuses to pair — and therefore never talks to the StoreToNative API at all — unless your store itself is served over https. That check happens locally, before any network request is made, so a plain-http site can't even attempt it.
Pairing fails with "could not confirm this site" (site_unverified) — what does that mean?
During pairing, the StoreToNative platform makes one request back to your site — https://your-store/wp-json/storetonative/v1/pair-challenge — and your site has to answer it while the pairing request is still running. That fails on four kinds of setups: a security plugin, firewall or WAF that blocks anonymous requests to the WordPress REST API (allow that one route, or the StoreToNative platform's requests); a host that runs a single PHP worker, which cannot answer a second request while the first is waiting (the built-in php -S development server is the usual case — production hosts run several); an object cache that is private to each PHP process, so the worker answering the call cannot see what the pairing worker stored; and a host so slow that a fresh request takes more than ten seconds to answer. The code you typed is spent either way — generate a fresh one after fixing the cause.
What happens if I deactivate WooCommerce?
The plugin shows an admin notice explaining that WooCommerce is required and does not register any of its other functionality until WooCommerce is active again.
What happens if I uninstall the plugin?
Uninstalling removes all of this plugin's local data (pairing, settings, cache, and the WooCommerce API key it created for itself) and stops your store from syncing with your native app. It does not make any remote request — your StoreToNative console will simply notice the store has gone quiet the next time it checks in. Reconnecting later starts a fresh pairing.
Does this work on WordPress multisite?
This has not been tested on a multisite installation. Use on multisite at your own risk until this is verified.
Is this compatible with WooCommerce's High-Performance Order Storage (HPOS)?
Yes, compatibility is explicitly declared. The plugin does not read or write order data.
更新日志:
1.5.8
- The directory listing now says what StoreToNative is — a mobile app builder for WooCommerce — with answers on cost, WebView and developer accounts.
- New to StoreToNative? The connect screen now lets you preview your own store as an app and start a free trial, before the pairing steps.
- Once you confirm your app is live on Google Play, the dashboard says so and asks whether you'd leave a review (until you dismiss it).
- Native checkout in the app reads your store's checkout form again. Since 1.3.0 the plugin route it relies on failed on every store, so the app showed a generic form instead of asking for exactly what your own checkout page asks for.
- Requesting password-reset emails from the app no longer locks that shopper out of signing in for 15 minutes.
- A shopper account you later promote to shop staff (for example Shop manager) can no longer keep using its app sign-in. Staff accounts sign in to WordPress, not to the app.
- Store readiness: a new check tells you when WooCommerce creates customer accounts at checkout (or requires an account to check out). An app whose shoppers get accounts must offer account deletion, so the check points you to the Account deletion URL in the console's Legal settings.
- The app-install banner now shows in your store's language: its button, tagline and screen-reader labels are translatable like the rest of the plugin.
- Checkout field labels and country names in Arabic and other non-Latin scripts are no longer cut off mid-letter when they are long, which could stop the app loading your checkout form.
- The deep-link files under
.well-knownare only served when their contents are valid, and now tell browsers not to guess their type and to cache them for at most an hour. - Deactivating the plugin now stops its daily status check. Your connection is kept, so reactivating picks up where you left off.
- Uninstalling no longer leaves queued shopper password-reset emails in WordPress's scheduler. On a multisite network it now cleans up every site, including revoking the WooCommerce API key the plugin created on each one, instead of only the main site.
- The plugin now tells WooCommerce which versions it supports: WooCommerce 8.0 or newer, tested up to 11.1.
- Security: accounts that can run your store (administrators, shop managers, editors and anyone who can write posts) can no longer sign in to your app. The app's sign-in checks passwords outside
wp-login.php, so it could be used to test an administrator's password even if you had hidden or locked down your login page. A refused sign-in looks exactly like a wrong password. Customer accounts, including custom shopper roles such as wholesale customers, sign in as before.
- Security: the app-install banner now only accepts a real colour for its theme and a normal web address for its button and icon. Anything else is ignored instead of being placed on your storefront.
- The checkout form's field list is now remembered for ten minutes instead of being worked out on every request, which takes load off your site. Changing your selling countries or your ship-to setting refreshes it straight away.
- Security: the key your store uses to sign its requests to StoreToNative is no longer kept in WordPress's autoloaded options. WordPress reads those into memory on every page view, so anything else installed on your site could see it. It moves automatically the first time this version runs — nothing to do, and your connection keeps working.
- Security: another plugin or theme can no longer redirect this plugin's connection to a server we do not recognise. If you genuinely self-host the API, define STORETONATIVE_ALLOW_CUSTOM_API in wp-config.php with your API hostname.
- Uninstalling now removes the signing key as well.
- Security: resetting or changing a shopper's password now signs that shopper out of your app on every device. This works immediately, for apps already installed.
- Security: the app's sign-out can now end the session on your store rather than only clearing the app. This half needs an app build made with this release or later; apps already on shoppers' phones keep signing out locally until you publish an update.
- Security: new shopper passwords must be at least 8 characters, cannot be one of a short list of very common ones, and cannot be the shopper's own email address. Existing shoppers keep their current password and can still sign in.
- Password-reset emails are now sent in the background, so the reset screen answers at the same speed whether or not the address has an account. On hosts that turn off WP-Cron (DISABLE_WP_CRON) the email is still sent immediately instead, and the timing difference remains there.
- Sites behind a proxy or CDN can now rate-limit shopper sign-ins by the real visitor address by defining STORETONATIVE_TRUSTED_PROXIES in wp-config.php. Without it nothing changes.
- Uninstalling now removes the plugin's rate-limit data and shopper sign-out records, which earlier versions left behind.
- New: once your store is connected and checking in, the dashboard shows a small card asking for a wordpress.org review, with a "No thanks" that hides it for good. It appears only while the connection is healthy, sends nothing anywhere, and offers nothing in return.
- This is the first directory release after 1.4.1 and carries everything in 1.5.0 below. It also keeps both 1.4.1 fixes (the account-deletion re-authentication check and the dismissible deep-link notice), which the 1.5.0 build served from the StoreToNative console did not include.
- Security: Pairing now proves it came from your site. While your pairing request is in flight, the StoreToNative platform makes one request back to a new read-only route on your site (
storetonative/v1/pair-challenge) and your site answers with a one-way digest computed from the code you typed. Before this, anyone with a StoreToNative account who learned — or guessed at — your store's address could attach their own app to it; now only the site itself can complete a pairing (older plugin versions, until this plugin's 1.6 release, are instead checked by proving that the WooCommerce key they created can write to the store). Nothing new is sent to StoreToNative; see "External services". - New:
pair-challengeadded to the plugin's reported feature list. - Changed: the pairing request's timeout is now 25 seconds (it has to wait for the round trip above); every other request keeps its 10 seconds.
- New: a clearer error on the connect screen when that round trip fails, naming the things that usually block it; and a second Connect pressed while one is still running is refused without spending your code.
- Security: account deletion now re-checks who was actually re-authenticated. The "Delete account" flow asks for the shopper's password again before it will proceed. It previously accepted any successful re-authentication; on a site running a plugin that filters WordPress's authentication (single sign-on, social login), that could be a different account than the one the request was for. It now requires the re-authentication to come back as the same account the request is deleting, and refuses otherwise. Sign-in was hardened the same way.
- Fix: the notice warning that a file on your server is shadowing a deep-link file can now be dismissed, like the plugin's other admin notices.
- New: Downloadable-product check. The readiness card now warns when your catalogue contains products marked Downloadable — including the variations of a variable product. Apple and Google both require digital content to be sold through their own in-app purchase systems rather than your website checkout, and an app that sells it through the web checkout is rejected by both stores. The check deliberately ignores the Virtual box: in WooCommerce that means "no shipping required", not "digital", so appointments, bookings, classes, repairs and deliveries tick it — and both stores exempt real-world services. A service business is never flagged here. Setting a product's Catalog visibility to Hidden clears it from this check, though note that also hides it from your own website shop. This is a warning, not a blocker.
- New: Checkout fields. The plugin now serves a read-only route describing the shape of your own checkout form — your field labels, which fields you have marked required, which countries you sell to, and the state/governorate lists WooCommerce already has for them — so the app's native checkout screen asks for exactly what your own checkout page asks for, instead of a generic address form. It sends nothing anywhere; see "External services".
- New:
checkout-fieldsadded to the plugin's reported feature list.
- Fixed: after re-connecting this store to a different StoreToNative app, the deep-link files (
apple-app-site-association/assetlinks.json) could keep serving the previous app's identity for up to 12 hours from cache. The cache is now cleared whenever the connection changes, so a fresh connection always serves fresh files.
- New: Shopper sign-in. The native app can now sign a shopper in with their existing WooCommerce account (email + password), entirely through REST routes this plugin registers on your own site — no sign-in request, password or token ever reaches the StoreToNative platform. See "External services" for exactly what that involves.
- New: Shoppers can delete their own account from the app. The plugin re-checks their password, runs WooCommerce's own personal-data erasers (honouring your retention settings), deletes the WordPress user, and then sends StoreToNative a single signed notification so it can delete its own sign-in record for that shopper. That notification carries a one-time id, the deleted WordPress user id, and a one-way hash of the email address — never the address itself, never a password or token. It is the only thing this plugin ever sends that refers to an individual shopper; see "External services".
- New:
shopper-authadded to the plugin's reported feature list. - New: whether your store allows customer account registration is now included in the existing heartbeat (true/false only — see "External services"), so the app knows whether to offer sign-up.
- New: a Store readiness card on the StoreToNative screen. Twelve checks over your own WooCommerce configuration — "Coming soon" mode, HTTPS, published products, payment methods, permalinks, the product price index, shipping zones, guest checkout, the checkout page, your site icon, conflicting swatch plugins, and WordPress/WooCommerce/PHP versions — each explained in plain language with what it costs you and which screen to fix it on. Blocking problems come first, warnings next, everything that passed is tucked away.
- New: the card also renders before you connect, so you can fix your store first.
- New: a one-click Rebuild price index button for a stale product lookup table, which asks WooCommerce's own tool to do the work in the background.
- New: your store's readiness results (check names and one-word verdicts only — see "External services") are included in the existing daily heartbeat, so your console shows the same warnings.
- New:
readinessadded to the plugin's reported feature list. - Fix: the StoreToNative screen could keep showing "Connected" for up to half a day after the app was deleted or unpaired in your console. Opening this plugin's own screen now re-checks the connection (at most once a minute, and only there — no other wp-admin page checks any more often than before), and a new Check connection button on the connection card checks on the spot. Nothing new is sent: it is the same check-in the plugin already made, just sooner.
- Initial release: 1-click pairing with the StoreToNative console,
.well-knowndeep-link hosting for iOS Universal Links and Android App Links, a smart mobile install banner, and a periodic heartbeat that reports connection health back to your console.