andrewheberle

<p>This plugin allows sign in to WordPress using a JSON Web Token (JWT) contained in a HTTP Header that is added by a reverse proxy<br />
that sits in front of your WordPress deployment.</p>
<p>Authentication and optionally role assignment is handled by claims contained in the JWT.</p>
<p>Verification of the JWT is handled by either:</p>
<ul>
<li>a shared secret key</li>
<li>retrieving a JSON Web Key Set (JWKS) from a configured URL</li>
</ul>
<p>During the login process if the user does not exist an account will be created with a matching role from the JWT.</p>
<p>If the JWT did not contain a role claim then user is created with the role set in the plugin settings (by default this is the subscriber role).</p>


AH JWT Auth

This plugin allows sign in to WordPress using a JSON Web Token (JWT) contained in a HTTP Header.

Sébastien Dumont

CoCart Headless

<p>This free add-on for <a href="https://cocartapi.com/?utm_medium=wp.org&utm_source=wordpressorg&utm_campaign=readme&utm_content=cocart" rel="nofollow ugc">CoCart</a> allows you to authenticate the Cart API via JSON Web Tokens as an authentication method.</p>
<p>JSON Web Tokens are an open standard <a href="https://datatracker.ietf.org/doc/html/rfc7519" rel="nofollow ugc">RFC 7519</a> for securely transmitting information between parties.</p>
<p><a href="https://github.com/cocart-headless/cocart-jwt-authentication/blob/master/docs/concepts.md" rel="nofollow ugc">Read the core concept for more information</a> on what this plugin does and can do.</p>
<p>★★★★★</p>
<blockquote>
<p>An excellent plugin, which makes building a headless WooCommerce experience a breeze. Easy to use, nearly zero setup time. <a href="https://wordpress.org/support/topic/excellent-plugin-8062/" rel="ugc">Harald Schneider</a></p>
</blockquote>
<h3>Key Features</h3>
<ul>
<li><strong>Standard JWT Authentication</strong>: Implements the industry-standard RFC 7519 for secure claims representation.</li>
<li><strong>Simple Endpoints</strong>: Offers clear endpoints for generating and validating tokens.</li>
<li><strong>Configurable Secret Key</strong>: Define your unique secret key via <code>wp-config.php</code> for secure token signing.</li>
<li><strong>Multiple signing algorithms</strong>: <code>HS256</code>, <code>HS384</code>, <code>HS512</code>, <code>RS256</code>, <code>RS384</code>, <code>RS512</code>, <code>ES256</code>, <code>ES384</code>, <code>ES512</code>, <code>PS256</code>, <code>PS384</code>, <code>PS512</code></li>
<li><strong>Rate Limiting</strong>: Controlled specifically for refreshing and validating tokens. Requires <a href="https://cocartapi.com/?utm_medium=website&utm_source=wpplugindirectory&utm_campaign=readme&utm_content=readmelink" rel="nofollow ugc">CoCart Plus</a></li>
<li><strong>Helpful Debugging</strong>: Detailed logs of authentication issues to help figure out exactly what happened and fix it faster.</li>
<li><strong>WP-CLI Commands</strong>: Useful <a href="https://github.com/cocart-headless/cocart-jwt-authentication/blob/master/docs/wp-cli.md" rel="nofollow ugc">commands to handle tokens</a> – whether you need to check, destroy or create new ones, or clean up old ones.</li>
<li><strong>Developer Hooks</strong>: Provides <a href="https://github.com/cocart-headless/cocart-jwt-authentication/blob/master/docs/filters.md" rel="nofollow ugc">filters</a> and <a href="https://github.com/cocart-headless/cocart-jwt-authentication/blob/master/docs/hooks.md" rel="nofollow ugc">hooks</a> for more configuration to your requirements.</li>
</ul>
<p>For support, please join the <a href="https://cocartapi.com/community/?utm_medium=wp.org&utm_source=wordpressorg&utm_campaign=readme&utm_content=cocart" rel="nofollow ugc">community on Discord</a>. For priority support, consider upgrading to <a href="https://cocartapi.com/?utm_medium=wp.org&utm_source=wordpressorg&utm_campaign=readme&utm_content=cocart" rel="nofollow ugc">CoCart Plus</a>.</p>
<h3>📄 Documentation</h3>
<p>See documentation on how to <a href="https://github.com/cocart-headless/cocart-jwt-authentication/blob/master/docs/guide.md" rel="nofollow ugc">get setup</a>, <a href="https://github.com/cocart-headless/cocart-jwt-authentication/blob/master/docs/filters.md" rel="nofollow ugc">filters</a> and <a href="https://github.com/cocart-headless/cocart-jwt-authentication/blob/master/docs/hooks.md" rel="nofollow ugc">hooks</a> with examples to help configure JWT Authentication to your needs.</p>
<p>Once ready to use, see the <a href="https://github.com/cocart-headless/cocart-jwt-authentication/blob/master/docs/quick-start.md" rel="nofollow ugc">quick start guide</a>. There is also an <a href="https://github.com/cocart-headless/cocart-jwt-authentication/blob/master/docs/advanced-configuration.md" rel="nofollow ugc">advanced configuration</a> for using RSA Keys.</p>
<p>★★★★★</p>
<blockquote>
<p>Amazing Plugin. I’m using it to create a react-native app with WooCommerce as back-end. This plugin is a life-saver! <a href="https://wordpress.org/support/topic/amazing-plugin-1562/" rel="ugc">Daniel Loureiro</a></p>
</blockquote>
<h4>👍 Add-ons to further enhance CoCart</h4>
<p>We also have other add-ons that extend CoCart to enhance your headless store development.</p>
<ul>
<li><strong><a href="https://wordpress.org/plugins/cocart-cors/" rel="ugc">CoCart – CORS</a></strong> enables support for CORS to allow CoCart to work across multiple domains.</li>
<li><strong><a href="https://wordpress.org/plugins/cocart-rate-limiting/" rel="ugc">CoCart – Rate Limiting</a></strong> enables the rate limiting feature.</li>
<li>and more add-ons in development.</li>
</ul>
<p>These add-ons of course come with support too.</p>
<p>For additional security, consider our <a href="https://apisecurity.pro/?utm_medium=wp.org&utm_source=wordpressorg&utm_campaign=readme&utm_content=cocart" rel="nofollow ugc">API Security</a> plugin that provides a firewall to block unknown outsiders, rate limit requests and protect data exposure – no configuration required.</p>
<h3>⌨️ Join our growing community</h3>
<p>A Discord community for developers, WordPress agencies and shop owners building the fastest and best headless WooCommerce stores with CoCart.</p>
<p><a href="https://cocartapi.com/community/?utm_medium=wp.org&utm_source=wordpressorg&utm_campaign=readme&utm_content=cocart" rel="nofollow ugc">Join our community</a></p>
<h3>🐞 Bug reports</h3>
<p>Bug reports for CoCart – JWT Authentication are welcomed in the <a href="https://github.com/cocart-headless/cocart-jwt-authentication" rel="nofollow ugc">CoCart – JWT Authentication repository on GitHub</a>. Please note that GitHub is not a support forum, and that issues that aren’t properly qualified as bugs will be closed.</p>
<h3>More information</h3>
<ul>
<li>The official <a href="https://cocartapi.com/?utm_medium=website&utm_source=wpplugindirectory&utm_campaign=readme&utm_content=readmelink" rel="nofollow ugc">CoCart API plugin</a> website.</li>
<li><a href="https://cocart.dev/?utm_medium=website&utm_source=wpplugindirectory&utm_campaign=readme&utm_content=readmelink" rel="nofollow ugc">CoCart for Developers</a>, an official hub for resources you need to be productive with CoCart and keep track of everything that is happening with the API.</li>
<li>The CoCart <a href="https://cocartapi.com/docs/?utm_medium=website&utm_source=wpplugindirectory&utm_campaign=readme&utm_content=readmelink" rel="nofollow ugc">Documentation</a></li>
<li><a href="http://eepurl.com/dKIYXE" rel="nofollow ugc">Subscribe to updates</a></li>
<li>Like, Follow and Star on <a href="https://www.facebook.com/cocartforwc/" rel="nofollow ugc">Facebook</a>, <a href="https://twitter.com/cocartapi" rel="nofollow ugc">Twitter</a>, <a href="https://www.instagram.com/cocartheadless/" rel="nofollow ugc">Instagram</a> and <a href="https://github.com/co-cart/co-cart" rel="nofollow ugc">GitHub</a></li>
</ul>
<h4>💯 Credits</h4>
<p>This plugin is developed and maintained by <a href="https://twitter.com/sebd86" rel="nofollow ugc">Sébastien Dumont</a>.<br />
Founder of <a href="https://twitter.com/cocartheadless" rel="nofollow ugc">CoCart Headless, LLC</a>.</p>


AH JWT Auth vs CoCart JWT Authentication