go2glory

<p>G-SSO Wallet Authenticator enables passwordless authentication for your WordPress site using cryptocurrency wallets. Users can authenticate with MetaMask, Coinbase Wallet, Rainbow, and other popular web3 wallets.</p>
<h4>Features</h4>
<ul>
<li><strong>Passwordless Authentication</strong> – Users authenticate using their crypto wallet signature</li>
<li><strong>Multiple Wallets</strong> – Supports MetaMask, Coinbase Wallet, Rainbow, and more</li>
<li><strong>QR Code Support</strong> – Mobile wallet users can scan QR codes to authenticate</li>
<li><strong>Shortcode Support</strong> – Add wallet authentication button anywhere with [gsso_login]</li>
<li><strong>Flexible Placement</strong> – Use on any page, post, or login form</li>
<li><strong>Secure Authentication</strong> – Uses cryptographic signatures for verification</li>
<li><strong>WooCommerce Compatible</strong> – Works with WooCommerce via shortcode</li>
<li><strong>No External Dependencies</strong> – All libraries bundled locally (WordPress.org compliant)</li>
</ul>
<h4>How It Works</h4>
<ol>
<li>User clicks “Connect Wallet” button</li>
<li>User selects their preferred wallet (MetaMask, Coinbase, etc.)</li>
<li>User signs a verification message in their wallet</li>
<li>Plugin verifies the signature and authenticates user</li>
<li>User’s wallet address is linked to their WordPress account</li>
</ol>
<h4>Requirements</h4>
<ul>
<li>WordPress 5.8 or higher</li>
<li>PHP 7.4 or higher</li>
<li>G-SSO API credentials (Client ID and Client Secret)</li>
</ul>
<h3>External Services</h3>
<p>This plugin connects to external services to provide wallet authentication functionality. All connections use HTTPS encryption.</p>
<h4>G-SSO Authentication API</h4>
<p><strong>Service Provider:</strong> G-SSO Authentication Service<br />
<strong>Service URL:</strong> https://g-sso.com<br />
<strong>Purpose:</strong> Verifies cryptographic signatures from cryptocurrency wallets to authenticate users</p>
<p><strong>Data Sent:</strong><br />
* Wallet address (public blockchain information)<br />
* Cryptographic signature (for verification only)<br />
* Timestamp (to prevent replay attacks)<br />
* Chain ID (blockchain network identifier)</p>
<p><strong>When Data is Sent:</strong><br />
Only when a user clicks “Connect Wallet” and signs the authentication message in their wallet.</p>
<p><strong>Privacy Policy:</strong> https://g-sso.com/privacy<br />
<strong>Terms of Service:</strong> https://g-sso.com/terms</p>
<p><strong>Legal Basis:</strong><br />
G-SSO is operated by Go2Glory Ltd. Wallet addresses are public blockchain data and do not constitute personal information under GDPR. No personally identifiable information (PII) is collected without explicit user consent.</p>
<h4>QR Code Generation Service</h4>
<p><strong>Service Provider:</strong> goQR.me / QRServer.com<br />
<strong>Service URL:</strong> https://api.qrserver.com<br />
<strong>Documentation:</strong> https://goqr.me/api/<br />
<strong>Purpose:</strong> Generates QR codes for mobile wallet authentication</p>
<p><strong>Data Sent:</strong><br />
* Temporary authentication URL (session link with no personal data)<br />
* QR code styling parameters (size: 160×160 pixels, color: #667eea)</p>
<p><strong>When Data is Sent:</strong><br />
Only when the wallet connection modal is displayed and user is on a mobile device. QR codes are generated on-demand for that session only.</p>
<p><strong>Privacy Policy:</strong> https://goqr.me/privacy-safety-security<br />
<strong>Terms of Service:</strong> https://goqr.me/legal/tos-api.html</p>
<p><strong>Data Protection:</strong><br />
QR codes contain only temporary session URLs that expire after use. No personal or sensitive information is transmitted. The session URL is a one-time-use token that becomes invalid after authentication completes.</p>
<h4>Data Protection Summary</h4>
<ul>
<li><strong>HTTPS Encryption:</strong> All external connections use SSL/TLS encryption</li>
<li><strong>Public Data Only:</strong> Wallet addresses are public blockchain information</li>
<li><strong>No PII Collection:</strong> No names, emails, or personal data required</li>
<li><strong>Temporary Sessions:</strong> Authentication URLs expire after single use</li>
<li><strong>GDPR Compliant:</strong> Minimal data collection by design</li>
<li><strong>User Control:</strong> Users control wallet access via their wallet application</li>
</ul>
<h3>Third-Party Libraries</h3>
<p>This plugin includes the following third-party libraries, bundled locally for WordPress.org compliance:</p>
<h4>React 18.2.0</h4>
<ul>
<li>License: MIT</li>
<li>Source: https://reactjs.org/</li>
<li>Purpose: UI framework for wallet selection modal</li>
<li>Files: public/js/vendor/react.min.js</li>
</ul>
<h4>ReactDOM 18.2.0</h4>
<ul>
<li>License: MIT</li>
<li>Source: https://reactjs.org/</li>
<li>Purpose: React DOM rendering</li>
<li>Files: public/js/vendor/react-dom.min.js</li>
</ul>
<h4>G-SSO SDK</h4>
<ul>
<li>License: MIT</li>
<li>Source: https://github.com/g-sso/sdk</li>
<li>Purpose: Wallet detection and authentication flow</li>
<li>Files: assets/js/gsso.umd.js</li>
<li>Note: This is a compiled UMD bundle (not obfuscated code)</li>
</ul>
<p><strong>Important:</strong> All libraries are bundled within the plugin. No external network requests are made to CDNs.</p>
<h3>Privacy Policy</h3>
<p>This plugin stores the following user data in your WordPress database:</p>
<ul>
<li>Wallet addresses (Ethereum addresses, 42 characters)</li>
<li>Chain type (e.g., “ethereum”)</li>
<li>Last login timestamp</li>
<li>User ID association</li>
</ul>
<p>This data is stored locally in the <code>wp_gsso_wallet_users</code> table.</p>
<p><strong>External Connections:</strong></p>
<p>This plugin connects to the G-SSO API (https://g-sso.com) for wallet signature verification. See the “External Services” section above for complete details on data transmission, privacy policies, and terms of service.</p>
<p><strong>Data Retention:</strong><br />
* User data is deleted when the plugin is uninstalled<br />
* Individual wallet associations can be removed from user profile</p>
<p><strong>User Rights:</strong><br />
Users can disconnect their wallet at any time from their WordPress profile, which removes the wallet-to-account association from your database.</p>
<p>For complete privacy details, see:<br />
* G-SSO Privacy Policy: https://g-sso.com/privacy<br />
* QRServer Privacy Policy: https://goqr.me/legal/tos-api.html</p>
<h3>Support</h3>
<p>For support, please visit:</p>
<ul>
<li>Support Portal: https://g-sso.com/contact</li>
<li>Documentation: https://g-sso.com/docs</li>
<li>Email: support@go2glory.com</li>
</ul>
<h3>Development</h3>
<h4>Shortcode</h4>
<pre><code>[gsso_login] - Displays the wallet authentication button
</code></pre>
<p><strong>Usage Examples:</strong></p>
<p>In any page or post:<br />
    [gsso_login]</p>
<p>In PHP template files:
    </p>
<p>In WooCommerce My Account page:<br />
    [gsso_login]</p>
<h3>Credits</h3>
<p>Developed by Go2Glory Ltd<br />
Website: https://g-sso.com</p>


G-SSO Wallet Authenticator

Allow users to authenticate to your WordPress site using cryptocurrency wallets like MetaMask instead of traditional username/password.

G-SSO Wallet Authenticator vs Ethereum Wallet