Dropndot Solutions

<p>Dropndot Video Library is a powerful WordPress plugin that transforms your website into a comprehensive video management platform. Create, organize, and display videos from popular platforms like YouTube, Vimeo, Dailymotion, Facebook, TikTok, and more through an intuitive custom post type interface.</p>
<h3>Key Features</h3>
<ul>
<li><strong>Multi-Platform Support</strong>: Embed videos from YouTube, Vimeo, Dailymotion, Facebook, TikTok, and other video platforms</li>
<li><strong>Custom Post Type</strong>: Dedicated “Videos” post type with full WordPress integration</li>
<li><strong>Taxonomies</strong>: Organize videos with categories and tags</li>
<li><strong>REST API Support</strong>: Full REST API integration for headless implementations</li>
<li><strong>WPGraphQL Support</strong>: GraphQL API support for modern applications</li>
<li><strong>Custom Templates</strong>: Includes archive, single, and taxonomy templates</li>
<li><strong>Admin Interface</strong>: User-friendly video management interface</li>
<li><strong>Settings Page</strong>: Customize URL slugs for videos and archives</li>
<li><strong>Thumbnail Support</strong>: Featured image support for video thumbnails</li>
<li><strong>SEO Friendly</strong>: Proper meta descriptions and structured data support</li>
</ul>
<h3>Supported Video Platforms</h3>
<ul>
<li>YouTube</li>
<li>Vimeo</li>
<li>Dailymotion</li>
<li>Facebook</li>
<li>TikTok</li>
<li>And many more through embed URLs</li>
</ul>
<h3>External services</h3>
<p>This plugin connects to third-party video platform APIs to retrieve oEmbed/metadata so it can normalize URLs, generate embed links, and build thumbnails for videos saved in the Video post type.</p>
<h4>Vimeo API</h4>
<p>Used to fetch metadata and thumbnails for Vimeo URLs.<br />
Data sent: the video ID parsed from the URL.<br />
When sent: when a Vimeo URL is saved or processed.<br />
Terms: https://vimeo.com/terms<br />
Privacy policy: https://vimeo.com/privacy</p>
<h4>Facebook Graph oEmbed API</h4>
<p>Used to fetch oEmbed information for Facebook video URLs.<br />
Data sent: the original Facebook video URL and a site-configured access token (if provided via filter).<br />
When sent: when a Facebook video URL is saved or processed.<br />
If the oEmbed response does not provide a thumbnail URL, the plugin also fetches the original Facebook video page HTML and extracts the <code>og:image</code> meta tag to determine a thumbnail.<br />
Terms: https://www.facebook.com/legal/terms<br />
Privacy policy: https://www.facebook.com/privacy/policy/</p>
<h4>TikTok oEmbed API</h4>
<p>Used to fetch oEmbed information for TikTok video URLs.<br />
Data sent: the original TikTok video URL (when available/stored in post meta for normalization).<br />
When sent: when a TikTok URL is saved or processed.<br />
Fallbacks: if needed, the plugin fetches HTML from <code>https://www.tiktok.com/embed/{video_id}</code> and also tries <code>https://www.tiktok.com/v/{video_id}</code> to parse <code>og:image</code> and JSON-LD for a thumbnail.<br />
Terms: https://www.tiktok.com/legal/terms-of-service<br />
Privacy policy: https://www.tiktok.com/legal/privacy-policy</p>
<h4>Wistia API</h4>
<p>Used to fetch metadata for Wistia media URLs.<br />
Data sent: the Wistia media ID parsed from the URL.<br />
When sent: when a Wistia URL is saved or processed.<br />
Terms: https://wistia.com/terms<br />
Privacy policy: https://wistia.com/privacy</p>
<h4>Twitch Helix API</h4>
<p>Used to resolve Twitch stream/channel details for embed generation.<br />
Data sent: Twitch channel username (passed as <code>user_login</code>) to resolve live-stream thumbnails; the request includes a <code>Client-ID</code> header obtained via the filter <code>DROPNDOT_VIDEO_LIBRARY_twitch_client_id</code>.<br />
When sent: when a Twitch URL is saved or processed.<br />
Terms: https://www.twitch.tv/p/en/legal/terms-of-service/<br />
Privacy policy: https://www.twitch.tv/p/en/legal/privacy-notice/</p>
<h4>Veed oEmbed API</h4>
<p>Used to fetch oEmbed information for VEED links.<br />
Data sent: the original VEED video URL.<br />
When sent: when a VEED URL is saved or processed.<br />
Terms: https://www.veed.io/terms<br />
Privacy policy: https://www.veed.io/privacy</p>
<h4>Loom oEmbed API</h4>
<p>Used to fetch oEmbed information for Loom links.<br />
Data sent: the original Loom video URL.<br />
When sent: when a Loom URL is saved or processed.<br />
Terms: https://www.loom.com/terms<br />
Privacy policy: https://www.loom.com/privacy-policy</p>
<h4>Rumble Video Page Fetch</h4>
<p>Used to fetch the Rumble video page HTML to extract thumbnail metadata (Open Graph <code>og:image</code>).<br />
Data sent: the Rumble video page URL built from the video ID parsed from the embed URL.<br />
When sent: when generating fallback thumbnails for Rumble embed URLs (and when processing URLs where no provider API response is available).<br />
Terms: https://rumble.com/s/terms<br />
Privacy policy: https://rumble.com/s/privacy</p>
<h4>Streamable API</h4>
<p>Used to fetch metadata for Streamable URLs.<br />
Data sent: the Streamable video ID parsed from the URL.<br />
When sent: when a Streamable URL is saved or processed.<br />
Terms: https://streamable.com/terms<br />
Privacy policy: https://streamable.com/privacy</p>
<h4>Instagram oEmbed API</h4>
<p>Used to fetch oEmbed information for Instagram video URLs.<br />
Data sent: the original Instagram video URL.<br />
When sent: when an Instagram URL is saved or processed.<br />
Terms: https://help.instagram.com/581066165581870<br />
Privacy policy: https://privacycenter.instagram.com/policy</p>
<h4>Direct URL fetch for metadata parsing</h4>
<p>In some providers, the plugin requests the original video page URL to extract metadata when no provider API response is available.<br />
Data sent: a standard HTTP request to the video URL provided by the site editor.<br />
When sent: when processing supported non-API/fallback URL patterns.</p>
<h3>Support</h3>
<p>For support, bug reports, or feature requests, please visit:<br />
https://dropndot.com/support/</p>
<h3>Contributing</h3>
<p>We welcome contributions! Please see our GitHub repository for contribution guidelines.</p>
<h3>License</h3>
<p>Dropndot Video Library is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 2 of the License, or (at your option) any later version.</p>
<p>This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.</p>
<p>You should have received a copy of the GNU General Public License along with this program. If not, see https://www.gnu.org/licenses/gpl-2.0.html.</p>


Dropndot Video Library

Multi-platform video embeds as a custom post type with REST API and WPGraphQL support for WordPress.

Andrew Wilkinson

<p>A lightweight plugin that <strong>forces login for backend access</strong> in a headless WordPress setup. Keeps your WordPress dashboard private while allowing your front end (e.g. Astro, Next.js) to pull content via GraphQL/REST.</p>
<h4>What it does</h4>
<ul>
<li>Requires authentication for <code>/wp-admin/</code> and other backend pages</li>
<li>Always allows the login page to avoid redirect loops</li>
<li>Leaves key endpoints open for headless use:
<ul>
<li><code>/wp-json/</code> (REST API)</li>
<li><code>/graphql</code> (WPGraphQL)</li>
<li><code>/wp-admin/admin-ajax.php</code> (AJAX)</li>
<li><code>/wp-cron.php</code> (cron)</li>
<li><code>/robots.txt</code></li>
<li><code>/sitemap*.xml</code> (sitemaps and indexes)</li>
<li><code>/wp-content/uploads/*</code> (media)</li>
<li><code>/favicon.ico</code></li>
<li><code>/newrelic</code> (New Relic monitoring)</li>
</ul>
</li>
<li>Logged-in users visiting the backend root get redirected to the dashboard</li>
<li>Works with Bedrock layouts (handles root path vs <code>/wp/</code>)</li>
</ul>
<h4>Use case</h4>
<ul>
<li>WordPress is the content backend</li>
<li>Public site is built with Astro/Next.js/etc</li>
<li>Editors log in to WordPress. Visitors never see the backend</li>
<li>Front end builds and live pages can still query GraphQL/REST without authentication</li>
</ul>
<h4>Customization</h4>
<p>Developers can customize allowed endpoints using the <code>force_login_allowed_patterns</code> filter:</p>
<pre><code>add_filter('force_login_allowed_patterns', function($patterns) {
    $patterns[] = '#^/healthz$#';           // custom health check
    $patterns[] = '#^/status$#';            // uptime checks
    $patterns[] = '#^/wp-json/acf/v3/.*#';  // specific REST namespace
    return $patterns;
});
</code></pre>


Headless Login Guard

Forces login for backend access in headless WordPress setups while allowing GraphQL/REST API endpoints and essential paths.

Dropndot Video Library vs Headless Login Guard