WebPlatform Social Login

WebPlatform Social Login adds secure social sign-in buttons to WordPress. Features:

• Verifies Google ID token signatures using Google's published public keys.
• Supports Facebook OAuth, LinkedIn OpenID Connect and Microsoft OpenID Connect.
• Supports Sign in with Apple, including dynamic ES256 client assertions.
• Validates token audience, issuer, expiry, email verification and nonce.
• Protects login requests with short-lived, HttpOnly state cookies.
• Encrypts provider secrets and Apple private keys at rest using WordPress authentication salts.
• Connects existing users by verified email.
• Optionally creates new WordPress users.
• Displays on WooCommerce login and registration forms.
• Displays on standard WordPress login and registration forms.
• Optionally offers Google One Tap to logged-out visitors using the Google account active in their browser.
• Includes [webplatform_social_login] for custom pages.
• Supports local post-login redirects and optional email-domain restrictions.
• Integrates with WordPress personal-data export and erasure tools.

No Google Client Secret is stored or required. Other providers require their standard application credentials.

1. Upload the webplatform-social-login folder to /wp-content/plugins/.
2. Activate WebPlatform Social Login.
3. In Google Cloud, create an OAuth 2.0 Client ID of type Web application.
4. Add your HTTPS website origin under Authorized JavaScript origins.
5. Open Settings > WebPlatform Social Login and enter the Client ID.
6. Add [webplatform_social_login] to any custom login page, or enable WooCommerce placement.

For another provider, create its web application, copy the exact callback URL displayed in the plugin settings, enter the credentials, and enable the provider. The settings screen includes step-by-step examples for every provider, including the current site's exact origin, domain, callback URLs, required products and requested scopes.

1.4.4

• Renamed the plugin to WebPlatform Social Login.
• Restricted social-login account creation to the low-privilege Customer or Subscriber role.

1.4.3

• Added explicit external-script versioning and documented the required provider-identity lookup.

1.4.2

• Resolved WordPress Plugin Check internationalization, sanitization and compatibility findings.

1.4.1

• Prevented duplicate Google buttons and repeated front-end configuration.

1.4.0

• Added optional Google One Tap sign-in and registration prompts for logged-out visitors.
• Preserved explicit Facebook, LinkedIn, Microsoft and Apple authorization buttons.

1.3.0

• Added standard WordPress login and registration placement.
• Suppressed duplicate output from the obsolete WordPress Social Login plugin.
• Added migration guidance when the replaced plugin remains active.

1.2.0

• Added site-specific configuration examples for every provider.
• Added provider console links, required products, scopes, domains and callback instructions.

1.1.0

• Added Facebook OAuth login.
• Added LinkedIn OpenID Connect login.
• Added Microsoft OpenID Connect login.
• Added Sign in with Apple.
• Added encrypted credential storage and provider-specific callback settings.

1.0.0

• Initial release.