JuanMa Garrido

<p>Unlike basic JWT plugins that use <strong>single long-lived tokens</strong>, JWT Auth Pro implements <strong>modern OAuth 2.0 security best practices</strong> with short-lived access tokens and secure refresh tokens.</p>
<h4>Why JWT Auth Pro?</h4>
<p><strong>The Problem with Basic JWT Plugins:</strong><br />
* Long-lived tokens (24h+) = Higher security risk<br />
* No refresh mechanism = Tokens live until expiry<br />
* XSS vulnerable = Tokens stored in localStorage<br />
* No revocation = Can’t invalidate compromised tokens</p>
<p><strong>JWT Auth Pro Solution:</strong><br />
* Short-lived access tokens (1h default) = Minimal attack window<br />
* Secure refresh tokens = HTTP-only cookies, XSS protected<br />
* Automatic token rotation = Fresh tokens on each refresh<br />
* Complete session control = Revoke any user session instantly</p>
<h4>Features</h4>
<ul>
<li><strong>Simple JWT Authentication</strong> – Clean, stateless token-based auth</li>
<li><strong>HTTPOnly Refresh Tokens</strong> – Secure refresh tokens in HTTP-only cookies</li>
<li><strong>Token Rotation</strong> – Automatic refresh token rotation for enhanced security</li>
<li><strong>CORS Support</strong> – Proper cross-origin request handling</li>
<li><strong>Clean Admin Interface</strong> – Simple configuration in WordPress admin</li>
<li><strong>Developer Friendly</strong> – Clear endpoints and documentation</li>
</ul>
<h4>Security Comparison</h4>
<p>  Feature<br />
  Basic JWT Plugins<br />
  JWT Auth Pro</p>
<p>  Token Lifetime<br />
  Long (hours/days)<br />
  Short (1 hour)</p>
<p>  Refresh Tokens<br />
  None<br />
  Secure HTTP-only</p>
<p>  XSS Protection<br />
  Limited<br />
  HTTP-only cookies</p>
<p>  Token Revocation<br />
  Manual only<br />
  Automatic rotation</p>
<p>  Session Management<br />
  None<br />
  Database tracking</p>
<p>  Security Metadata<br />
  None<br />
  IP + User Agent</p>
<h4>Perfect for:</h4>
<ul>
<li>Single Page Applications (React, Vue, Angular)</li>
<li>Mobile Applications (iOS, Android)</li>
<li>API Integrations (Third-party services)</li>
<li>Headless WordPress (Decoupled architecture)</li>
</ul>
<h4>API Endpoints</h4>
<ul>
<li><code>POST /wp-json/jwt/v1/token</code> – Login and get access token</li>
<li><code>POST /wp-json/jwt/v1/refresh</code> – Refresh access token</li>
<li><code>GET /wp-json/jwt/v1/verify</code> – Verify token and get user info</li>
<li><code>POST /wp-json/jwt/v1/logout</code> – Logout and revoke refresh token</li>
</ul>
<h3>Security</h3>
<ul>
<li><strong>Stateless Authentication</strong> – JWT tokens contain all necessary information</li>
<li><strong>HTTPOnly Cookies</strong> – Refresh tokens stored securely, inaccessible to JavaScript</li>
<li><strong>Token Rotation</strong> – Refresh tokens automatically rotate on use</li>
<li><strong>Configurable Expiration</strong> – Set custom expiration times</li>
<li><strong>IP & User Agent Tracking</strong> – Additional security metadata</li>
</ul>
<h3>Support</h3>
<p>For support and documentation, visit: https://github.com/juanma-wp/jwt-auth-pro-wp-rest-api</p>
<h3>Privacy Policy</h3>
<p>This plugin stores user session data including IP addresses and user agent strings for security purposes. This data is used solely for authentication and security monitoring.</p>


JuanMa JWT Auth Pro

Modern JWT authentication with refresh tokens - built for SPAs and mobile apps with enterprise-grade security.

WPExperts.io

myCRED

<p>📢🚨 <strong>Important Notice: myCred BP Group Leaderboards is now part of the <a href="https://wordpress.org/plugins/mycred-toolkit/" rel="ugc">myCred Toolkit</a> and will no longer receive updates here. Only security fixes will be provided.</strong></p>
<p>This add-on allows you to setup leaderboards for your BuddyPress groups that are based on the groups members balances. These leaderboards are generated automatically as soon as a group has more then one user and supports leaderboard setups for multiple point types. Leaderboards are cached to prevent unnecessary database queries and updated whenever a group member gains or loses points.</p>
<p>You can set the size of the leaderboard and the option to append members to the end of the leaderboard that might not had made it into set size. These settings can be set generically for all groups or you can let group admins change them for each group.</p>
<h4>myCred BP Group Leaderboards Features</h4>
<p>Here are the most notable features of myCred BP Group Leaderboards plugin.</p>
<ul>
<li><strong>Leaderboard Based on Current Balance (default):</strong> The leaderboard is based on a users current balance. This was the leaderboard this plugin rendered in previous versions.</li>
<li><strong>Leaderboard Based on Total Balance:</strong> This will generate a leaderboard based on a users total balance. Total balances are calculated by adding up all point gains a user has then deducting any manual adjustments an admin might have made.</li>
<li><strong>Leaderboard Based on Today’s Gains:</strong> This will generate a leaderboard based on members total accumulated points today. This is done by adding up all point gains and losses from the beginning of each day until now.</li>
<li><strong>Leaderboard Based on This Week’s Gains:</strong> This will generate a leaderboard based on members total accumulated points this week. This is done by adding up all point gains and losses from the the start of each week until now. Resets each week.</li>
<li><strong>Leaderboard Based on This Month’s Gains:</strong> This will generate a leaderboard based on members total accumulated points this month. This is done by adding up all point gains and losses from the start of each month until now.</li>
<li><strong>Leaderboard Based on Date Range:</strong> This option allows a leaderboard creation between two dates. When this option is selected, two hidden fields will become available where you can set the start and end date. These dates must be well formatted either YYYY-MM-DD or MM/DD/YYYY.</li>
</ul>
<h4>Caching</h4>
<ul>
<li>This version also includes caching of leaderboards to cut down on database queries. Each groups leaderboard(s) are cached until a member balance changes or if you save your leaderboard settings in your group admin area.</li>
</ul>
<h4>Plugin Requirements</h4>
<ul>
<li><a href="https://wordpress.org/plugins/mycred/" rel="ugc">myCred 1.8+</a></li>
<li><a href="https://wordpress.org/plugins/buddypress/" rel="ugc">BuddyPress 2.5+</a></li>
<li>WordPress 5.0+</li>
<li>PHP 5.3+</li>
</ul>
<h4>More myCred Freebies Integrations</h4>
<ul>
<li><a href="https://mycred.me/store/mycred-h5p" rel="nofollow ugc">myCred H5P</a></li>
<li><a href="https://mycred.me/store/mycred-credly" rel="nofollow ugc">myCred Credly</a></li>
<li><a href="https://www.mycred.me/store/mycred-learndash/" rel="nofollow ugc">myCred – Learndash</a></li>
<li><a href="https://www.mycred.me/store/mycred-lifterlms-integration" rel="nofollow ugc">LifterLMS Plugin Integration with myCred </a></li>
<li><a href="https://www.mycred.me/store/mycred-for-event-espresso-4" rel="nofollow ugc">myCred for Event Espresso 4.6+</a></li>
<li><a href="https://mycred.me/store/mycred-for-wp-pro-quiz/" rel="nofollow ugc">myCred for Wp-Pro-Quiz</a></li>
<li><a href="https://www.mycred.me/store/mycred-for-rating-form" rel="nofollow ugc">myCred for Rating Form</a></li>
<li><a href="https://www.mycred.me/store/mycred-birthdays" rel="nofollow ugc">myCred Birthdays</a></li>
<li><a href="https://www.mycred.me/store/mycred-for-wp-postviews" rel="nofollow ugc">myCred for WP-PostViews</a></li>
<li><a href="https://mycred.me/store/mycred-for-totalpoll" rel="nofollow ugc">myCred for TotalPoll</a></li>
<li><a href="https://www.mycred.me/store/mycred-gutenberg" rel="nofollow ugc">myCred Gutenberg</a></li>
<li><a href="https://www.mycred.me/store/mycred-for-events-manager-pro" rel="nofollow ugc">myCred for Events Manager Pro</a></li>
<li><a href="https://www.mycred.me/store/mycred-for-buddypress-compliments" rel="nofollow ugc">myCred for BuddyPress Compliments</a></li>
<li><a href="https://www.mycred.me/store/mycred-retro" rel="nofollow ugc">myCred Retro</a></li>
<li><a href="https://www.mycred.me/store/mycred-for-courseware" rel="nofollow ugc">myCred for Courseware</a></li>
<li><a href="https://www.mycred.me/store/mycred-for-gd-star-rating" rel="nofollow ugc">myCred for GD Star Rating</a></li>
<li><a href="https://mycred.me/store/mycred-for-buddypress-links" rel="nofollow ugc">myCred for BuddyPress Links</a></li>
<li><a href="https://mycred.me/store/mycred-for-bp-album-bp-gallery" rel="nofollow ugc">myCred for BP Album and BP Gallery</a></li>
<li><a href="https://mycred.me/store/mycred-elementor/" rel="nofollow ugc">myCred Elementor</a></li>
</ul>
<h4>DOCUMENTATION AND SUPPORT</h4>
<p>For more information visit our <strong><a href="http://codex.mycred.me/chapter-iv/freebies/bp-group-leaderboards/" rel="nofollow ugc">Documentation Page</a></strong>.</p>


myCred BP Group Leaderboards

📢🚨 Important Notice: myCred BP Group Leaderboards is now part of the myCred Toolkit and will no longer receive updates here.

JuanMa JWT Auth Pro vs myCred BP Group Leaderboards