JuanMa Garrido

<p>Unlike basic JWT plugins that use <strong>single long-lived tokens</strong>, JWT Auth Pro implements <strong>modern OAuth 2.0 security best practices</strong> with short-lived access tokens and secure refresh tokens.</p>
<h4>Why JWT Auth Pro?</h4>
<p><strong>The Problem with Basic JWT Plugins:</strong><br />
* Long-lived tokens (24h+) = Higher security risk<br />
* No refresh mechanism = Tokens live until expiry<br />
* XSS vulnerable = Tokens stored in localStorage<br />
* No revocation = Can’t invalidate compromised tokens</p>
<p><strong>JWT Auth Pro Solution:</strong><br />
* Short-lived access tokens (1h default) = Minimal attack window<br />
* Secure refresh tokens = HTTP-only cookies, XSS protected<br />
* Automatic token rotation = Fresh tokens on each refresh<br />
* Complete session control = Revoke any user session instantly</p>
<h4>Features</h4>
<ul>
<li><strong>Simple JWT Authentication</strong> – Clean, stateless token-based auth</li>
<li><strong>HTTPOnly Refresh Tokens</strong> – Secure refresh tokens in HTTP-only cookies</li>
<li><strong>Token Rotation</strong> – Automatic refresh token rotation for enhanced security</li>
<li><strong>CORS Support</strong> – Proper cross-origin request handling</li>
<li><strong>Clean Admin Interface</strong> – Simple configuration in WordPress admin</li>
<li><strong>Developer Friendly</strong> – Clear endpoints and documentation</li>
</ul>
<h4>Security Comparison</h4>
<p>  Feature<br />
  Basic JWT Plugins<br />
  JWT Auth Pro</p>
<p>  Token Lifetime<br />
  Long (hours/days)<br />
  Short (1 hour)</p>
<p>  Refresh Tokens<br />
  None<br />
  Secure HTTP-only</p>
<p>  XSS Protection<br />
  Limited<br />
  HTTP-only cookies</p>
<p>  Token Revocation<br />
  Manual only<br />
  Automatic rotation</p>
<p>  Session Management<br />
  None<br />
  Database tracking</p>
<p>  Security Metadata<br />
  None<br />
  IP + User Agent</p>
<h4>Perfect for:</h4>
<ul>
<li>Single Page Applications (React, Vue, Angular)</li>
<li>Mobile Applications (iOS, Android)</li>
<li>API Integrations (Third-party services)</li>
<li>Headless WordPress (Decoupled architecture)</li>
</ul>
<h4>API Endpoints</h4>
<ul>
<li><code>POST /wp-json/jwt/v1/token</code> – Login and get access token</li>
<li><code>POST /wp-json/jwt/v1/refresh</code> – Refresh access token</li>
<li><code>GET /wp-json/jwt/v1/verify</code> – Verify token and get user info</li>
<li><code>POST /wp-json/jwt/v1/logout</code> – Logout and revoke refresh token</li>
</ul>
<h3>Security</h3>
<ul>
<li><strong>Stateless Authentication</strong> – JWT tokens contain all necessary information</li>
<li><strong>HTTPOnly Cookies</strong> – Refresh tokens stored securely, inaccessible to JavaScript</li>
<li><strong>Token Rotation</strong> – Refresh tokens automatically rotate on use</li>
<li><strong>Configurable Expiration</strong> – Set custom expiration times</li>
<li><strong>IP & User Agent Tracking</strong> – Additional security metadata</li>
</ul>
<h3>Support</h3>
<p>For support and documentation, visit: https://github.com/juanma-wp/jwt-auth-pro-wp-rest-api</p>
<h3>Privacy Policy</h3>
<p>This plugin stores user session data including IP addresses and user agent strings for security purposes. This data is used solely for authentication and security monitoring.</p>


JuanMa JWT Auth Pro

Modern JWT authentication with refresh tokens - built for SPAs and mobile apps with enterprise-grade security.

nes07

<p><strong>Design Tokens Manager for Elementor</strong> gives you complete control over your Elementor design system.</p>
<h4>Key Features</h4>
<ul>
<li><strong>Bulk Editing</strong> – Paste multiple colors/fonts at once</li>
<li><strong>Fluid Typography</strong> – Full clamp() support for responsive sizing</li>
<li><strong>ID Preservation</strong> – Maintains token references across saves</li>
<li><strong>Two-Way Sync</strong> – Pull from or Push to Elementor Site Settings</li>
<li><strong>Import/Export</strong> – Backup or migrate your design tokens</li>
<li><strong>Smart Tab Persistence</strong> – Stays on your current section after saving</li>
<li><strong>WP-CLI Support</strong> – Automate token management</li>
</ul>
<h4>Perfect For</h4>
<ul>
<li>Design system managers</li>
<li>Agencies managing multiple sites</li>
<li>Developers wanting programmatic control</li>
<li>Anyone tired of clicking 50+ times to update colors</li>
</ul>
<h4>Bulk Format Examples</h4>
<p><strong>Colors:</strong><br />
    Primary: #FF5733<br />
    Secondary: #00A8E8</p>
<p><strong>Fonts:</strong><br />
    Heading: Inter, clamp(3rem, 2.5rem + 2vw, 4rem), 700, 1.2em<br />
    Body: Roboto, 1 rem, 400, 1.5em</p>
<h4>Requirements</h4>
<ul>
<li>WordPress 5.6 or higher</li>
<li>Elementor (free or Pro)</li>
<li>PHP 7.0 or higher</li>
</ul>
<h3>Additional Info</h3>
<p><strong>WP-CLI Commands:</strong></p>
<pre><code>wp edtm export --file=tokens.json --source=kit --preserve-ids
wp edtm import tokens.json --mode=merge
wp edtm sync
</code></pre>
<p><strong>GitHub:</strong> https://github.com/dani3lphp/design-tokens-manager-for-elementor.git</p>
<h3>Support</h3>
<p>For bug reports and feature requests, please use the WordPress.org support forum.</p>
<h3>Credits</h3>
<p>Developed by nes07</p>


Design Tokens Manager for Elementor

Manage Elementor Global Colors and Fonts with clamp() support, ID preservation, bulk editing, and seamless Site Settings sync.

JuanMa JWT Auth Pro vs Design Tokens Manager for Elementor