Extend your WooCommerce Store API with secure authentication endpoints for social and manual login. Ideal for custom apps, headless themes, or fronten …

hippooo

hippoosupport

Hippoo Auth enhances the WooCommerce Store API by adding secure JWT-based authentication endpoints. It supports login and signup via Google, Facebook, Apple, or manually with email and password. Once authenticated, users can retrieve and update their billing/shipping information, view order history, and more — all via API.
Perfect for developers building API-driven themes, custom mobile apps, or headless WooCommerce experiences.
Use it to build:
<ul>
<li>Headless WooCommerce themes</li>
<li>Custom frontend apps (React, Vue, etc.)</li>
<li>Mobile apps using Flutter, React Native, or Kotlin</li>
<li>API-based user dashboards</li>
</ul>
With Hippoo Auth, users can register, login (manually or via Google, Apple, or Facebook), and securely access:
<ul>
<li>Order history and details </li>
<li>Billing and shipping addresses </li>
<li>JWT-based session tokens with refresh support </li>
</ul>
🔐 Auth is handled via JWT for secure stateless sessions, ideal for frontend-heavy or decoupled environments.
📘 Developer Docs: 
<a href="https://hippoo.app/hippoo-auth-web-service-documentation-for-authentication-and-user-management-in-woocommerce/" rel="nofollow ugc">https://hippoo.app/hippoo-auth-web-service-documentation-for-authentication-and-user-management-in-woocommerce/</a>
<h3>Features</h3>
<ul>
<li>REST API login with JWT tokens </li>
<li>Social login (Google, Facebook, Apple) </li>
<li>Secure signup and password reset </li>
<li>Access to orders and addresses via API </li>
<li>Built-in token refresh and logout endpoint </li>
<li>Compatible with WooCommerce stores and custom frontends </li>
<li>No dependency on the Hippoo App</li>
</ul>
<h3>External services</h3>
This plugin connects to third-party services for social authentication:
<ul>
<li>
Google OAuth API: Used to verify Google login tokens. Sends OAuth access token. 
<a href="https://policies.google.com/privacy" rel="nofollow ugc">Privacy Policy</a>, <a href="https://policies.google.com/terms" rel="nofollow ugc">Terms of Service</a>
</li>
<li>
Facebook Graph API: Used to fetch user info (ID, email, name). Sends OAuth access token. 
<a href="https://www.facebook.com/about/privacy" rel="nofollow ugc">Privacy Policy</a>, <a href="https://www.facebook.com/legal/terms" rel="nofollow ugc">Terms</a>
</li>
<li>
Apple ID Authentication API: Used for sign-in via Apple. Sends OAuth access token. 
<a href="https://www.apple.com/legal/privacy/en-ww/" rel="nofollow ugc">Privacy Policy</a>, <a href="https://www.apple.com/legal/internet-services/" rel="nofollow ugc">Terms</a>
</li>
</ul>
These are required for enabling social login functionality.
<h3>Credits</h3>
This plugin was built with the Hippoo team — creators of the <a href="https://hippoo.app" rel="nofollow ugc">Hippoo WooCommerce App</a>, a mobile app that helps you manage store orders, products, coupons, and more on the go.

Alternatives to Hippoo Auth

Top alternatives