JuanMa Garrido

Unlike basic JWT plugins that use single long-lived tokens, JWT Auth Pro implements modern OAuth 2.0 security best practices with short-lived access tokens and secure refresh tokens.
<h4>Why JWT Auth Pro?</h4>
The Problem with Basic JWT Plugins: 
* Long-lived tokens (24h+) = Higher security risk 
* No refresh mechanism = Tokens live until expiry 
* XSS vulnerable = Tokens stored in localStorage 
* No revocation = Can’t invalidate compromised tokens
JWT Auth Pro Solution: 
* Short-lived access tokens (1h default) = Minimal attack window 
* Secure refresh tokens = HTTP-only cookies, XSS protected 
* Automatic token rotation = Fresh tokens on each refresh 
* Complete session control = Revoke any user session instantly
<h4>Features</h4>
<ul>
<li>Simple JWT Authentication – Clean, stateless token-based auth</li>
<li>HTTPOnly Refresh Tokens – Secure refresh tokens in HTTP-only cookies</li>
<li>Token Rotation – Automatic refresh token rotation for enhanced security</li>
<li>CORS Support – Proper cross-origin request handling</li>
<li>Clean Admin Interface – Simple configuration in WordPress admin</li>
<li>Developer Friendly – Clear endpoints and documentation</li>
</ul>
<h4>Security Comparison</h4>
 Feature 
 Basic JWT Plugins 
 JWT Auth Pro
 Token Lifetime 
 Long (hours/days) 
 Short (1 hour)
 Refresh Tokens 
 None 
 Secure HTTP-only
 XSS Protection 
 Limited 
 HTTP-only cookies
 Token Revocation 
 Manual only 
 Automatic rotation
 Session Management 
 None 
 Database tracking
 Security Metadata 
 None 
 IP + User Agent
<h4>Perfect for:</h4>
<ul>
<li>Single Page Applications (React, Vue, Angular)</li>
<li>Mobile Applications (iOS, Android)</li>
<li>API Integrations (Third-party services)</li>
<li>Headless WordPress (Decoupled architecture)</li>
</ul>
<h4>API Endpoints</h4>
<ul>
<li><code>POST /wp-json/jwt/v1/token</code> – Login and get access token</li>
<li><code>POST /wp-json/jwt/v1/refresh</code> – Refresh access token</li>
<li><code>GET /wp-json/jwt/v1/verify</code> – Verify token and get user info</li>
<li><code>POST /wp-json/jwt/v1/logout</code> – Logout and revoke refresh token</li>
</ul>
<h3>Security</h3>
<ul>
<li>Stateless Authentication – JWT tokens contain all necessary information</li>
<li>HTTPOnly Cookies – Refresh tokens stored securely, inaccessible to JavaScript</li>
<li>Token Rotation – Refresh tokens automatically rotate on use</li>
<li>Configurable Expiration – Set custom expiration times</li>
<li>IP & User Agent Tracking – Additional security metadata</li>
</ul>
<h3>Support</h3>
For support and documentation, visit: https://github.com/juanma-wp/jwt-auth-pro-wp-rest-api
<h3>Privacy Policy</h3>
This plugin stores user session data including IP addresses and user agent strings for security purposes. This data is used solely for authentication and security monitoring.

JuanMa JWT Auth Pro

Modern JWT authentication with refresh tokens - built for SPAs and mobile apps with enterprise-grade security.

getatomx

AtomX Service is a plugin that integrates your WooCommerce store with the AtomX licensing system. It automatically generates unique purchase codes and tokens for your products and subscriptions.
Features:
<ul>
<li>Automatic generation of purchase codes for WooCommerce products</li>
<li>Support for WooCommerce Subscriptions with token management</li>
<li>Multiple subscription tiers (Personal, Business, Team)</li>
<li>Bundle support for multiple products</li>
<li>Automatic synchronization with AtomX API</li>
<li>Support for subscription status changes (active, on-hold, cancelled, expired)</li>
<li>Order status tracking (processing, completed, refunded, cancelled)</li>
<li>Display purchase codes to customers in order details</li>
</ul>
Requirements:
<ul>
<li>WooCommerce 5.0 or higher</li>
<li>WooCommerce Subscriptions plugin</li>
<li>AtomX Admin Panel account with API key</li>
</ul>
<h3>External services</h3>
This plugin relies on the AtomX API service to manage licensing and purchase codes for your WooCommerce products and subscriptions.
What the service does: 
The AtomX API (http://api.get-atomx.com) is a licensing management system that handles purchase code generation, validation, and tracking for the AtomX browser extension for Adobe After Effects and Premiere Pro.
What data is sent and when: 
The plugin sends the following data to the AtomX API automatically when: 
– A new order is placed (status: processing or completed) 
– An order is refunded or cancelled 
– A subscription is created, renewed, or status changes (active, on-hold, cancelled, expired)
Data transmitted includes: 
– Order/Subscription ID and status 
– Generated purchase code 
– Product pricing information (item price, subtotal, currency) 
– Billing information (first name, last name, company, email) 
– WooCommerce product ID and AtomX package ID 
– Subscription type (for subscriptions)
Service provider: 
AtomX Services 
– Terms of Service: https://get-atomx.com/legal/terms-and-conditions 
– Privacy Policy: https://get-atomx.com/legal/privacy-policy
Note: You need an Auth Key from the AtomX Admin Panel to use this plugin. The Auth Key is sent with each API request for authentication.

AtomX Services

Generation of purchase codes/tokens for AtomX extension (or based on AtomX) for products and subscriptions.

JuanMa JWT Auth Pro vs AtomX Services