This plugin allows users to gate their WordPress site with BitBadges – claims, payments, NFT badges, and more!

trevormil

<p>This plugin allows users to gate their site with BitBadges – claims, payments, NFT badges, and more!</p>
<p>Important Note: This plugin ONLY handles authentication with BitBadges – it does not restrict access to your site by itself. For restricting access, we recommend using this plugin in conjunction with:</p>
<ul>
<li><a href="https://wordpress.org/plugins/wp-force-login/" rel="ugc">Force Login</a> – Forces users to log in to view your site</li>
<li><a href="https://wordpress.org/plugins/restrict-content/" rel="ugc">Restrict Content</a> – Restrict content to logged-in users</li>
<li><a href="https://wordpress.org/plugins/members/" rel="ugc">Members</a> – Advanced user roles and permissions</li>
<li>Or other plugins that restrict access to your site</li>
</ul>
<h3>Translation</h3>
<p>The Sign In With BitBadges plugin is currently available in English only. The plugin is translation-ready and uses WordPress’s internationalization system, making it easy to add support for additional languages in the future.</p>
<h3>Configuration</h3>
<ol>
<li>Create a new application (OAuth App) in the <a href="https://bitbadges.io/developer" rel="nofollow ugc">BitBadges Developer Portal</a></li>
<li>Set your redirect URI to: <code>https://your-wordpress-site.com/wp-login.php?action=bitbadges-callback</code></li>
<li>Copy your Client ID and Client Secret</li>
<li>Go to your WordPress admin panel > Settings > BitBadges SIWBB</li>
<li>Enter your Client ID and Client Secret</li>
<li>(Optional) Configure a claim ID to gate access and other additional settings</li>
<li>Save the settings</li>
</ol>
<h3>Features</h3>
<ul>
<li>Adds a “Sign in with BitBadges” button to the WordPress login form</li>
<li>Creates WordPress users automatically when they first sign in with BitBadges</li>
<li>Secure OAuth 2.0 implementation with state verification</li>
<li>Simple admin interface for configuration</li>
<li>Optional exclusive BitBadges authentication mode (disable normal WordPress login)</li>
<li>Claim-gated access support</li>
<li>Emergency admin access URL for exclusive mode</li>
<li>Customizable claim visibility on authorization page</li>
</ul>
<h3>Security</h3>
<ul>
<li>CSRF protection using state parameter</li>
<li>Secure storage of client credentials</li>
<li>WordPress nonce verification</li>
<li>Input sanitization</li>
<li>Proper error handling</li>
<li>Secure admin access fallback</li>
<li>Claim verification</li>
</ul>
<h3>User Experience</h3>
<ul>
<li>Clean, centered login button design</li>
<li>Shortened wallet addresses for better readability</li>
<li>Clear separation between traditional and BitBadges login</li>
<li>Visible claim requirements before authentication</li>
<li>Seamless first-time user setup</li>
</ul>
<h3>Requirements</h3>
<ul>
<li>WordPress 5.0 or higher</li>
<li>PHP 7.0 or higher</li>
<li>HTTPS enabled on your site (required for secure OAuth)</li>
</ul>
<h3>Support</h3>
<p>For support or feature requests, please visit the <a href="https://bitbadges.io" rel="nofollow ugc">BitBadges website</a> or create an issue in the GitHub repository.</p>
<h3>License</h3>
<p>This plugin is licensed under the GPL v2 or later.<br />
License URI: https://www.gnu.org/licenses/gpl-2.0.html</p>
<h3>External Services</h3>
<p>This plugin connects to BitBadges (https://bitbadges.io) for authentication and claim verification. BitBadges is a blockchain-based authentication and digital credentials platform.</p>
<h4>Service Endpoints Used</h4>
<ul>
<li>Authentication: https://bitbadges.io/siwbb/authorize</li>
<li>Token Management: https://api.bitbadges.io/api/v0/siwbb/token</li>
<li>Claim Verification: https://api.bitbadges.io/api/v0/claims/success</li>
</ul>
<h4>Data Transmission</h4>
<p>The plugin transmits the following data to BitBadges servers:</p>
<ol>
<li>
<p>During Authentication:</p>
<ul>
<li>Client ID and Secret (from your BitBadges OAuth app)</li>
<li>Redirect URI (your WordPress login callback URL)</li>
<li>State parameter (for security)</li>
</ul>
</li>
<li>
<p>During Claim Verification:</p>
<ul>
<li>User’s BitBadges address</li>
<li>Claim ID (if configured)</li>
<li>API key (for authentication)</li>
</ul>
</li>
<li>
<p>Token Management:</p>
<ul>
<li>Access tokens are stored in WordPress user meta</li>
<li>Tokens are used to verify user authentication status</li>
</ul>
</li>
</ol>
<p>No personal user data beyond the BitBadges address is transmitted to our servers. All communication is done over HTTPS.</p>
<h4>Service Documentation</h4>
<ul>
<li>Terms of Service: https://bitbadges.io/policies</li>
<li>Privacy Policy: https://bitbadges.io/policies</li>
<li>Developer Documentation: https://docs.bitbadges.io</li>
</ul>
<p>BitBadges is required for this plugin to function. Without access to BitBadges services, users will not be able to authenticate or verify claims.</p>


Alternatives to Sign In With BitBadges

Top alternatives