andrewheberle

This plugin allows sign in to WordPress using a JSON Web Token (JWT) contained in a HTTP Header that is added by a reverse proxy 
that sits in front of your WordPress deployment.
Authentication and optionally role assignment is handled by claims contained in the JWT.
Verification of the JWT is handled by either:
<ul>
<li>a shared secret key</li>
<li>retrieving a JSON Web Key Set (JWKS) from a configured URL</li>
</ul>
During the login process if the user does not exist an account will be created with a matching role from the JWT.
If the JWT did not contain a role claim then user is created with the role set in the plugin settings (by default this is the subscriber role).

AH JWT Auth

This plugin allows sign in to WordPress using a JSON Web Token (JWT) contained in a HTTP Header.

hippooo

hippoosupport

Hippoo Auth enhances the WooCommerce Store API by adding secure JWT-based authentication endpoints. It supports login and signup via Google, Facebook, Apple, or manually with email and password. Once authenticated, users can retrieve and update their billing/shipping information, view order history, and more — all via API.
Perfect for developers building API-driven themes, custom mobile apps, or headless WooCommerce experiences.
Use it to build:
<ul>
<li>Headless WooCommerce themes</li>
<li>Custom frontend apps (React, Vue, etc.)</li>
<li>Mobile apps using Flutter, React Native, or Kotlin</li>
<li>API-based user dashboards</li>
</ul>
With Hippoo Auth, users can register, login (manually or via Google, Apple, or Facebook), and securely access:
<ul>
<li>Order history and details </li>
<li>Billing and shipping addresses </li>
<li>JWT-based session tokens with refresh support </li>
</ul>
🔐 Auth is handled via JWT for secure stateless sessions, ideal for frontend-heavy or decoupled environments.
📘 Developer Docs: 
<a href="https://hippoo.app/hippoo-auth-web-service-documentation-for-authentication-and-user-management-in-woocommerce/" rel="nofollow ugc">https://hippoo.app/hippoo-auth-web-service-documentation-for-authentication-and-user-management-in-woocommerce/</a>
<h3>Features</h3>
<ul>
<li>REST API login with JWT tokens </li>
<li>Social login (Google, Facebook, Apple) </li>
<li>Secure signup and password reset </li>
<li>Access to orders and addresses via API </li>
<li>Built-in token refresh and logout endpoint </li>
<li>Compatible with WooCommerce stores and custom frontends </li>
<li>No dependency on the Hippoo App</li>
</ul>
<h3>External services</h3>
This plugin connects to third-party services for social authentication:
<ul>
<li>
Google OAuth API: Used to verify Google login tokens. Sends OAuth access token. 
<a href="https://policies.google.com/privacy" rel="nofollow ugc">Privacy Policy</a>, <a href="https://policies.google.com/terms" rel="nofollow ugc">Terms of Service</a>
</li>
<li>
Facebook Graph API: Used to fetch user info (ID, email, name). Sends OAuth access token. 
<a href="https://www.facebook.com/about/privacy" rel="nofollow ugc">Privacy Policy</a>, <a href="https://www.facebook.com/legal/terms" rel="nofollow ugc">Terms</a>
</li>
<li>
Apple ID Authentication API: Used for sign-in via Apple. Sends OAuth access token. 
<a href="https://www.apple.com/legal/privacy/en-ww/" rel="nofollow ugc">Privacy Policy</a>, <a href="https://www.apple.com/legal/internet-services/" rel="nofollow ugc">Terms</a>
</li>
</ul>
These are required for enabling social login functionality.
<h3>Credits</h3>
This plugin was built with the Hippoo team — creators of the <a href="https://hippoo.app" rel="nofollow ugc">Hippoo WooCommerce App</a>, a mobile app that helps you manage store orders, products, coupons, and more on the go.

Hippoo Auth

Extend your WooCommerce Store API with secure authentication endpoints for social and manual login. Ideal for custom apps, headless themes, or fronten …

AH JWT Auth vs Hippoo Auth