DocCheck agency (antwerpes)

Important notice: This plugin is being discontinued.
The DocCheck login system based on the DocCheck CReaM platform will be shut down on June 30. From that date onward, this plugin will no longer be functional.
The successor plugin, DocCheck Access <a href="https://wordpress.org/plugins/doccheck-access/" rel="ugc">https://wordpress.org/plugins/doccheck-access/</a>, is built on the new DocCheck Access platform and replaces this plugin. 
Please migrate your website to the new plugin before June 30 to ensure uninterrupted authentication for your users.
This plugin is no longer being developed and will no longer receive updates, security patches, or support.
This open source plugin provides a solution for the technical implementation of the DocCheck login onto WordPress websites and authenticates verified healthcare professionals, thus securing your website according to the German Health Services and Products Advertising Act.
Features:
<ul>
<li>Login-iFrame in 4 different sizes and 6 languages (GER, EN, FR, NL, IT, ES)</li>
<li>DocCheck login integration with shortcode</li>
<li>Protected websites in your navigation bar can be hidden from non-authorised users</li>
<li>Information on public websites that is subject to the German Health Services and Products Advertising Act can be hidden from non-authorised users</li>
<li>User authentication with OAuth2</li>
</ul>
User authentication with OAuth2 provides a high security standard and is part of the paid DocCheck <a href="https://more.doccheck.com/fileadmin/user_upload/files/industry/b2b-landingpage/industry-erste-hilfe-kasten-login_licences_en.pdf#page=4" rel="nofollow ugc">Economy</a> and <a href="https://more.doccheck.com/fileadmin/user_upload/files/industry/b2b-landingpage/industry-erste-hilfe-kasten-login_licences_en.pdf#page=5" rel="nofollow ugc">Business</a> license. This is why the WordPress plugin is not available for Basic login clients.
DocCheck is not the author and can therefore not provide support for this plugin.
If you have questions regarding the plugin, please direct them to the support forum.
If you have any questions regarding the DocCheck login service and the DocCheck licenses, you can contact the DocCheck support.

DocCheck Login

Open source DocCheck plugin for authenticating healthcare professionals via secure DocCheck login integration.

The DocCheck Access plugin integrates DocCheck’s OAuth2 authentication system into your WordPress site, allowing medical professionals to log in using their DocCheck credentials.
Note: Using DocCheck Access requires the Economy or Business license model. This plugin cannot be used with the Basic license model. Please contact DocCheck for details on available license models.
<h4>Features</h4>
<ul>
<li>Adds a DocCheck login button via shortcode or automatic page-level protection</li>
<li>OAuth 2.0 Authorization Code flow with PKCE for secure authentication</li>
<li>Two authentication modes: Anonymous Session and WordPress User creation</li>
<li>Per-page and global content protection with role-based access control</li>
<li>Configurable scope and user metadata mapping</li>
<li>Template override support for protected pages</li>
<li>Hooks and filters for developers to customize behavior</li>
</ul>
<h4>External Services</h4>
This plugin connects to the following external services:
DocCheck OAuth Server (<code>https://auth.doccheck.com</code>)
Used to exchange the OAuth authorization code for an access token and to retrieve the authenticated user’s profile data. This connection is only made when a visitor actively clicks the DocCheck login button. Please refer to the <a href="https://www.doccheck.com/privacy" rel="nofollow ugc">DocCheck Privacy Policy</a> and <a href="https://www.doccheck.com/terms" rel="nofollow ugc">DocCheck Terms of Service</a>.
DocCheck CDN (<code>https://dccdn.de</code>)
The DocCheck login button is a web component whose script is served from DocCheck’s CDN. It is loaded only on pages where the <code>[docacc_login]</code> shortcode or page-level protection is active — not on every page. Please refer to the <a href="https://www.doccheck.com/privacy" rel="nofollow ugc">DocCheck Privacy Policy</a>.
No data is transmitted to any other third-party service.
<h4>Requirements</h4>
<ul>
<li>WordPress 5.0 or higher</li>
<li>PHP 7.2 or higher</li>
<li>A DocCheck OAuth client ID and client secret (obtainable from DocCheck)</li>
</ul>
<h4>General Settings</h4>
Go to Settings > DocCheck Login in your WordPress admin to configure the plugin. You can also open the settings directly from the Settings link on the WordPress plugins overview screen.
OAuth Credentials
<ul>
<li>Client ID — Your DocCheck OAuth Client ID.</li>
<li>Client Secret — Your DocCheck OAuth Client Secret.</li>
<li>Redirect URI — Auto-generated based on your site URL. Copy this value into your DocCheck application settings.</li>
</ul>
Redirection & Debug
<ul>
<li>Default Target Page — The page users land on after a successful login.</li>
<li>Debug Mode — Logs detailed API and authentication information. Disable on production sites.</li>
</ul>
Content Protection
<ul>
<li>Make all Pages Private — Requires DocCheck login for every page on the site.</li>
<li>Auto-assign Parent Configurations — Child pages automatically inherit their parent page’s protection status.</li>
<li>Login Button Version — Pin a specific component version (e.g. <code>3.2.7</code>) or use <code>@latest</code> to always load the most recent version.</li>
</ul>
<h4>User Management</h4>
Authentication Modes
<ul>
<li>Anonymous Session — Users are authenticated via DocCheck but no WordPress user account is created. Data is held only for the duration of the PHP session and is not stored permanently.</li>
<li>WordPress User — A WordPress user account is created or linked on the visitor’s first DocCheck login. Allows persistent storage of user properties and role-based access control.</li>
</ul>
Role & Metadata
<ul>
<li>Default User Role — The WordPress role assigned to newly created DocCheck users. Only low-privilege roles (those without <code>manage_options</code> or <code>edit_others_posts</code> capabilities) are available for selection. Administrator and Editor roles cannot be assigned to DocCheck users.</li>
<li>Automatic User Creation — Disabled by default. In WordPress User mode, local user creation for first-time DocCheck logins must be explicitly enabled by an administrator.</li>
<li>Scope & Property Selection — Choose which DocCheck scopes to request and which user properties to store as WordPress user metadata.</li>
</ul>
<h4>Developer Hooks</h4>
Actions
<ul>
<li>
<code>docacc_user_created</code> — Fires after a new WordPress user is created via DocCheck login. 
Parameters: <code>$user_id</code> (int), <code>$user_data</code> (array)
</li>
<li>
<code>docacc_user_logged_in</code> — Fires when an existing user logs in via DocCheck. 
Parameters: <code>$user_id</code> (int), <code>$user_data</code> (array)
</li>
<li>
<code>docacc_session_created</code> — Fires when a user is authenticated in anonymous session mode. 
Parameters: <code>$user_data</code> (array)
</li>
</ul>
Filters
<ul>
<li>
<code>docacc_map_role</code> — Customize role assignment based on DocCheck user data. 
Parameters: <code>$current_role</code> (string), <code>$user_data</code> (array), <code>$user_id</code> (int) 
Note: roles with <code>manage_options</code> or <code>edit_others_posts</code> capabilities are silently rejected for security reasons.
</li>
<li>
<code>docacc_protected_template</code> — Override the template used for protected pages. 
Parameters: <code>$template</code> (string)
</li>
<li>
<code>docacc_is_authenticated</code> — Override the authentication check result. 
Parameters: <code>$authenticated</code> (bool)
</li>
<li>
<code>docacc_user_data</code> — Modify the DocCheck user data array before it is used. 
Parameters: <code>$user_data</code> (array)
</li>
</ul>
<h4>Template Functions</h4>
<pre><code>// Check if the current visitor is authenticated via DocCheck
docacc_is_authenticated(); // returns bool

// Get the authenticated user's DocCheck profile fields
docacc_get_user_data(); // returns array, empty if not authenticated
</code></pre>
Example in a theme template:
<pre><code><?php if ( docacc_is_authenticated() ) : ?>
 <div class="hcp-content">Visible only to DocCheck users.</div>
<?php else : ?>
 <?php echo do_shortcode( '[docacc_login]' ); ?>
<?php endif; ?>
</code></pre>
<h4>Custom Protected Page Template</h4>
Create <code>doccheck-protected.php</code> in your active theme directory — the plugin uses it automatically. Or override via filter:
<pre><code>add_filter( 'docacc_protected_template', function( $template ) {
 return get_stylesheet_directory() . '/my-protected-template.php';
} );
</code></pre>
<h4>User Metadata Stored</h4>
In WordPress User mode, the following meta fields are stored per user (subject to selected scopes):
<ul>
<li><code>docacc_unique_id</code> — DocCheck unique identifier (always stored)</li>
<li><code>docacc_profession</code> — Profession name</li>
<li><code>docacc_country</code> — Country ISO code</li>
<li><code>docacc_language</code> — Interface language</li>
<li><code>first_name</code>, <code>last_name</code> — Name fields</li>
<li><code>docacc_email</code> — Email address</li>
<li><code>docacc_discipline_name</code> — Medical discipline</li>
<li><code>docacc_activity_name</code> — Activity type</li>
<li><code>docacc_area_code</code>, <code>docacc_street</code>, <code>docacc_city</code>, <code>docacc_state</code> — Address fields</li>
<li><code>docacc_last_login</code> — Timestamp of last DocCheck login</li>
</ul>

DocCheck Access

Integrate DocCheck OAuth2 login functionality into your WordPress site.

DocCheck Login vs DocCheck Access