NUMAN RASHEED

<p><strong>GateLink Client</strong> is the receiving end of the GateLink ecosystem. It pairs with <strong>GateLink Manager</strong> to deliver instant, passwordless admin access to your WordPress sites. Once installed and trusted, it accepts HMAC‑signed login links from your Manager site, validates them, and redirects the user straight to wp‑admin—no passwords, no hassle. Designed for developers, freelancers and site admins who maintain multiple installations, GateLink Client makes it easy to manage trust relationships and keep your sites secure.</p>
<h3>Key Features</h3>
<ul>
<li><strong>Trust Management</strong> – Explicitly approve or revoke which Manager sites can access your admin.  </li>
<li><strong>Quick Connect & Manual Pairing</strong> – Choose between instant pairing or manual shared token setup for finer control.  </li>
<li><strong>HMAC‑Signed Security</strong> – Enforces HMAC‑SHA256 signatures with TTL and replay protection for every login URL.  </li>
<li><strong>Health Monitoring</strong> – Provides a REST endpoint for status checks, so you know when connections are healthy.  </li>
<li><strong>Activity Logs</strong> – Tracks connection attempts and logins for auditing and troubleshooting.  </li>
<li><strong>Accessible Admin Interface</strong> – Built with modern design and accessibility support for a seamless user experience.</li>
</ul>
<h3>How It Works</h3>
<ol>
<li><strong>Establish Trust</strong> – Generate a Shared Token in the Manager and paste it under <strong>GateLink Client <span aria-hidden="true" class="wp-exclude-emoji">→</span> Trusted Manager</strong>.  </li>
<li><strong>Validate Links</strong> – When the Manager issues a login link, the Client verifies the HMAC signature and checks the timestamp.  </li>
<li><strong>Automatic Login</strong> – Upon successful validation, the user is logged into wp‑admin without needing credentials.  </li>
<li><strong>Expire & Revoke</strong> – Links expire after two minutes and can only be used once; you can revoke trust anytime via the admin interface.</li>
</ol>
<h3>Security & Privacy</h3>
<ul>
<li><strong>Short‑lived Tokens</strong> – Login URLs are valid for only a couple of minutes to minimize exposure.  </li>
<li><strong>Server‑Side Signing</strong> – All signatures are generated on the Manager; the Client never stores admin passwords.  </li>
<li><strong>HTTPS Recommended</strong> – Run both Manager and Client over HTTPS and avoid caching login requests.  </li>
<li><strong>Peer‑to‑Peer Communication</strong> – The Client only exchanges data (site info, tokens, timestamps) with your Manager sites; no third parties are involved.</li>
</ul>


GateLink Client – Passwordless SSO & One‑Click Admin Access

Secure, zero‑config SSO for WordPress sites—validate HMAC‑signed links and log users into wp‑admin automatically.

Freemius

<p><strong>GateLink Manager</strong> pairs with the companion GateLink Client to deliver secure, zero‑config single sign‑on for WordPress. Skip copying credentials across sites: connect your hub to client sites and teleport into their dashboards with a single click. Whether you’re a developer, freelancer or agency managing many installations, GateLink saves time and reduces risk by using cryptographically signed links that expire within minutes.</p>
<h3>Key Features</h3>
<ul>
<li><strong>Zero‑config, one‑click login</strong> – Jump straight into any connected site’s wp‑admin without passwords.  </li>
<li><strong>Passwordless SSO & HMAC security</strong> – Each login URL is HMAC‑signed and valid for only a short time.  </li>
<li><strong>Multi‑site management</strong> – Add, edit, delete, verify and log in to client sites from a single dashboard.  </li>
<li><strong>Free plan included</strong> – Manage up to 3 sites at no cost; upgrade to Pro (20 sites) or Business (unlimited) when needed.  </li>
<li><strong>Built‑in logs & metrics</strong> – View connection history and lightweight stats right from the dashboard.  </li>
<li><strong>Modern UI</strong> – Responsive admin interface styled with Tailwind, tuned for accessibility and ease of use.  </li>
</ul>
<h3>How It Works</h3>
<ol>
<li><strong>Add a site</strong> – Enter the client’s base URL on your Manager dashboard.  </li>
<li><strong>Share a token</strong> – Create or paste the Shared Token in Manager; paste the same token in the Client’s “Trusted Manager” screen.  </li>
<li><strong>Verify & trust</strong> – Click <strong>Verify</strong> to perform a health check and establish trust.  </li>
<li><strong>Login</strong> – Click <strong>Login</strong>; a short‑lived, HMAC‑signed URL opens the client site in a new tab, validates the signature and redirects to <code>/wp-admin</code>.  </li>
</ol>
<h3>Security & Privacy</h3>
<ul>
<li><strong>Cryptographically signed tokens</strong> – All login links use HMAC‑SHA256 signatures with nonce‑based replay protection.  </li>
<li><strong>Time‑limited links</strong> – Tokens expire after a few minutes to reduce attack windows.  </li>
<li><strong>No stored credentials</strong> – GateLink never stores your admin passwords; only minimal metadata and logs are kept locally.  </li>
<li><strong>HTTPS required</strong> – Both Manager and Client sites must run over HTTPS; allow‑list the login query parameters (<code>gatelink_login</code>, <code>cid</code>, <code>ts</code>, <code>sig</code>) in security/CDN tools if necessary.  </li>
</ul>
<h3>Plans & Licensing</h3>
<p>GateLink is free to use for up to three client sites. Professional and Business plans unlock higher site limits and additional support options. Licensing is handled through Freemius; no license key is required for the free tier.</p>
<h3>External Services</h3>
<p>GateLink communicates only with other WordPress sites that have the GateLink Client plugin installed. Data exchanged includes site URLs, shared tokens, and connection timestamps. Licensing and support are provided via the Freemius service; activating a paid license sends your site domain, license key, and environment info to Freemius for validation.</p>


GateLink Manager – Secure One‑Click Admin Login & WordPress SSO

Secure, passwordless admin access for multiple WordPress sites—one‑click, HMAC‑signed SSO for remote wp‑admin login.

GateLink Client – Passwordless SSO & One‑Click Admin Access vs GateLink Manager – Secure One‑Click Admin Login & WordPress SSO