About this plugin
com” (OAuth2) to your WordPress login screen and a connect/disconnect widget on user profile pages. com login without installing Jetpack.
com OAuth2 API
com accounts.
– Data sent: Client ID, redirect URI, OAuth authorization code, and standard HTTP request metadata during the OAuth flow.
com user ID, email, and display name to link or create WordPress users.
com/tos/
com/privacy/
Features:
- WordPress.com login (OAuth2 “auth” scope).
- Link or unlink WordPress users to WordPress.com accounts.
- Auto-create users when no matching email exists (optional).
- Allowlist by email domain or WordPress.com user ID (optional).
- Audit log of the last 20 OAuth attempts (optional).
- Stores only WordPress.com user ID in user meta (no access tokens stored).
- Short-lived OAuth state with HttpOnly cookie + transient for CSRF protection.
com application and adding the redirect URI shown in the plugin settings. Feature toggles let you enable or disable the login button, profile widget, auto-create users, admin notices, allowlists, and the audit log.
Privacy
com to authenticate users. com user ID in WordPress user meta to link accounts. OAuth access tokens are used during the login flow and are not stored.
A short-lived HttpOnly cookie and transient are used for OAuth state validation and expire automatically. If the audit log is enabled, the last 20 OAuth attempts are stored (time, status, IP address, and basic details) in a non-autoloaded option. com/privacy/.