Andrew Wilkinson

<p>A lightweight plugin that <strong>forces login for backend access</strong> in a headless WordPress setup. Keeps your WordPress dashboard private while allowing your front end (e.g. Astro, Next.js) to pull content via GraphQL/REST.</p>
<h4>What it does</h4>
<ul>
<li>Requires authentication for <code>/wp-admin/</code> and other backend pages</li>
<li>Always allows the login page to avoid redirect loops</li>
<li>Leaves key endpoints open for headless use:
<ul>
<li><code>/wp-json/</code> (REST API)</li>
<li><code>/graphql</code> (WPGraphQL)</li>
<li><code>/wp-admin/admin-ajax.php</code> (AJAX)</li>
<li><code>/wp-cron.php</code> (cron)</li>
<li><code>/robots.txt</code></li>
<li><code>/sitemap*.xml</code> (sitemaps and indexes)</li>
<li><code>/wp-content/uploads/*</code> (media)</li>
<li><code>/favicon.ico</code></li>
<li><code>/newrelic</code> (New Relic monitoring)</li>
</ul>
</li>
<li>Logged-in users visiting the backend root get redirected to the dashboard</li>
<li>Works with Bedrock layouts (handles root path vs <code>/wp/</code>)</li>
</ul>
<h4>Use case</h4>
<ul>
<li>WordPress is the content backend</li>
<li>Public site is built with Astro/Next.js/etc</li>
<li>Editors log in to WordPress. Visitors never see the backend</li>
<li>Front end builds and live pages can still query GraphQL/REST without authentication</li>
</ul>
<h4>Customization</h4>
<p>Developers can customize allowed endpoints using the <code>force_login_allowed_patterns</code> filter:</p>
<pre><code>add_filter('force_login_allowed_patterns', function($patterns) {
    $patterns[] = '#^/healthz$#';           // custom health check
    $patterns[] = '#^/status$#';            // uptime checks
    $patterns[] = '#^/wp-json/acf/v3/.*#';  // specific REST namespace
    return $patterns;
});
</code></pre>


Headless Login Guard

Forces login for backend access in headless WordPress setups while allowing GraphQL/REST API endpoints and essential paths.

formatocd

<p>FormatoCD Publish with Buffer is a powerful, lightweight plugin that automates the publishing of your WordPress posts to your social media channels using the modern Buffer GraphQL API.</p>
<p>Stop copying and pasting links! With this plugin, you can easily share your content across multiple social networks as soon as you hit “Publish”, or schedule them to be added to your Buffer queue.</p>
<h4>🚀 Features</h4>
<ul>
<li><strong>Automatic Publishing:</strong> Automatically sends your WordPress posts to Buffer the moment they are published.</li>
<li><strong>Scheduled Posts Support:</strong> Works seamlessly with native WordPress scheduled posts (<code>publish_future_post</code>).</li>
<li><strong>Multiple Publishing Modes:</strong> Choose between Share Now, Add to Queue, or Custom Scheduled.</li>
<li><strong>Customizable Message Templates:</strong> Create your own message format using dynamic variables like <code>{title}</code>, <code>{url}</code>, <code>{author}</code>, and more.</li>
<li><strong>Smart Hashtags:</strong> Automatically converts your WordPress tags into #hashtags for social media.</li>
<li><strong>Category Filtering:</strong> Restrict automatic Buffer posting only to posts belonging to a specific category.</li>
<li><strong>Featured Image Support:</strong> Automatically attaches the post’s featured image to the Buffer publication.</li>
<li><strong>Duplicate Prevention:</strong> Internally tracks when a post has already been shared to Buffer to avoid duplicate submissions upon post updates.</li>
<li><strong>Translation Ready (i18n):</strong> Fully prepared for translation. English and Spanish (<code>es_ES</code>) languages are included by default.</li>
</ul>
<h3>External Services</h3>
<p>This plugin connects to the third-party Buffer GraphQL API (https://api.buffer.com) to automatically publish or schedule your social media posts.</p>
<p>Data is sent to Buffer ONLY when a WordPress post is published (or automatically published via WordPress cron) and the user has actively checked the “Send to Buffer on publish” option.</p>
<p>The specific data sent to the Buffer API includes:<br />
* Post Title<br />
* Post URL<br />
* Post Excerpt<br />
* Author Display Name<br />
* Post Categories and Tags (formatted as #hashtags)<br />
* Featured Image URL</p>
<p>This service is provided by Buffer. By using this plugin, you agree to their legal terms:<br />
* Buffer Terms of Service: https://buffer.com/legal/terms<br />
* Buffer Privacy Policy: https://buffer.com/legal/privacy</p>
<p>API Documentacion can be found here: https://developers.buffer.com</p>


FormatoCD Publish with Buffer

Generates Buffer posts automatically from WordPress posts. Connect your site to the Buffer GraphQL API.

Headless Login Guard vs FormatoCD Publish with Buffer