MksDdn Reddy Auth provides OTP-based authentication with:
<ul>
<li>WordPress cookie session login for the frontend (shortcode, or REST with <code>issue_session: true</code>).</li>
<li>Optional Bearer token issuing for REST clients (<code>issue_token: true</code>; cookie not set by default on REST login).</li>
<li>Rate limiting and one-time OTP verification.</li>
<li>Optional site and REST API protection for unauthenticated visitors.</li>
<li>Optional allowed request sources (Origin/Referer) for plugin REST endpoints.</li>
</ul>
The plugin maps each Reddy ID to a WordPress user and can create an account automatically on first successful login.
<h3>Getting Started</h3>
<h4>1. Configure the Reddy bot token</h4>
For production, define the token in <code>wp-config.php</code>:
<pre><code>define( 'MKSDDN_REDDY_BOT_TOKEN', 'your-bot-token' );
</code></pre>
For local development you can store the token in Settings > Reddy Auth instead. Use Bot connection test to verify delivery to a Reddy user.
<h4>2. Set up the login page</h4>
Create a WordPress page (for example, <code>/login/</code>) and insert:
<pre><code>[mksddn_reddy_login]
</code></pre>
Users enter their Reddy ID, receive a one-time code in Reddy, and sign in through the form.
<h4>3. Review protection settings</h4>
By default, both protection options are disabled so your site stays accessible after activation. Enable them only after the login page is configured:
<ul>
<li>Protect site content — redirects unauthenticated visitors to the login page.</li>
<li>Protect all REST API content — returns <code>401</code> for protected REST routes.</li>
</ul>
Public auth routes remain available without login:
<ul>
<li><code>POST /wp-json/mksddn-reddy-auth/v1/auth/send-code</code></li>
<li><code>POST /wp-json/mksddn-reddy-auth/v1/auth/login</code></li>
<li><code>GET /wp-json/mksddn-reddy-auth/v1/auth/intent-status</code></li>
<li><code>POST /wp-json/mksddn-reddy-auth/v1/auth/intent-status</code></li>
<li><code>POST /wp-json/mksddn-reddy-auth/v1/auth/complete-intent</code></li>
</ul>
Webhook callback route is also public for BotMother integration:
<ul>
<li><code>POST /wp-json/mksddn-reddy-auth/v1/auth/button-callback</code></li>
</ul>
<h4>4. Use REST API for headless clients</h4>
Typical flow:
<ol>
<li><code>POST /auth/send-code</code> with <code>{ "reddy_id": "123456" }</code></li>
<li><code>POST /auth/login</code> with <code>{ "reddy_id": "123456", "code": "111111", "issue_token": true }</code> for headless clients. Add <code>"issue_session": true</code> only when the browser must also receive a WordPress cookie (same-origin SPA).</li>
<li>Call protected REST routes with <code>Authorization: Bearer <token></code>.</li>
<li><code>GET /auth/me</code> to read the current user (Bearer or cookie session).</li>
<li><code>POST /auth/logout</code> to end the cookie session and revoke the Bearer token when provided.</li>
</ol>
One-click flow:
<ol>
<li><code>POST /auth/send-code</code> returns <code>intent_id</code> and <code>intent_secret</code> when one-click is enabled.</li>
<li>Poll <code>GET|POST /auth/intent-status</code> with <code>intent_id</code> + <code>intent_secret</code>.</li>
<li>After approval, finalize auth via <code>POST /auth/complete-intent</code> with <code>intent_id</code>, <code>intent_secret</code>, and optional <code>issue_token</code> / <code>issue_session</code>.</li>
</ol>
For one-click polling, <code>intent-status</code> supports both:
<ul>
<li><code>GET /auth/intent-status</code> with <code>intent_id</code> + <code>intent_secret</code> query params.</li>
<li><code>POST /auth/intent-status</code> with <code>intent_id</code> + <code>intent_secret</code> in JSON body.</li>
</ul>
Protect site content checks the WordPress cookie session (shortcode login or REST login with <code>issue_session: true</code>). It does not accept Bearer tokens. Protect all REST API content requires a Bearer token and ignores cookie-only sessions.
Download OpenAPI and Postman files from Settings > Reddy Auth > Developer Resources.
<h4>5. Optional: restrict REST callers by browser source</h4>
In Settings > Reddy Auth, Allowed request sources limits plugin REST traffic (<code>/mksddn-reddy-auth/v1/*</code>) to listed <code>Origin</code> or <code>Referer</code> URLs. Leave empty to allow any client (recommended for server-to-server integrations). This is a soft guard for browser apps, not a secret key.
<h4>6. Optional: harden one-click webhook verification</h4>
In Settings > Reddy Auth > One-Click Authorization, set Webhook secret (optional) to match BotMother webhook Secret.
<ul>
<li>With a configured secret, webhook signature verification uses <code>sha256(body + bot_token + "." + webhook_secret)</code>.</li>
<li>With an empty secret, compatibility mode uses <code>sha256(body + bot_token)</code>.</li>
</ul>
<h3>External services</h3>
This plugin connects to the Reddy bot API at <code>https://bot.reddy.team</code> to deliver one-time passwords and optional admin connection test messages.
What the service is used for
<ul>
<li>Deliver OTP codes to a Reddy user during login.</li>
<li>Send an optional admin “bot connection test” message from Settings > Reddy Auth.</li>
</ul>
What data is sent and when
<ul>
<li>OTP send / login: Reddy user ID (<code>userKey</code>) and message text containing the one-time code (and expiry hint). Message text is configurable in Settings > Reddy Auth > Bot Messages (placeholders <code>{code}</code>, <code>{ttl}</code>). Sent when a user requests a code via the login form or REST API.</li>
<li>Bot connection test: Reddy user ID (<code>userKey</code>) and a configurable test message from Settings > Reddy Auth > Bot Messages. Sent only when an administrator runs Bot connection test in Settings > Reddy Auth.</li>
<li>Bot token: Your bot token is included in the API request URL path (configured via <code>MKSDDN_REDDY_BOT_TOKEN</code> in <code>wp-config.php</code> or the development fallback field in settings). It is not sent to WordPress.org.</li>
</ul>
Data is transmitted only when OTP delivery or the connection test is triggered. The plugin does not send site content, post data, or WordPress user passwords to Reddy.
This service is provided by Reddy: terms of use and privacy policy at https://help.reddy.team/pages/user-agreement
No other third-party services are required for core plugin operation.

MksDdn Reddy Auth

Authenticate WordPress users via Reddy OTP flow for monolith and REST API clients.

miniOrange

geniuszealot

<a href="https://plugins.miniorange.com/woocommerce-order-status-notifications-and-otp-verification" rel="nofollow ugc">Features</a> | <a href="https://plugins.miniorange.com/woocommerce-order-notifications-plugin-setup-wordpress" rel="nofollow ugc">Setup Guide</a> | <a href="https://www.miniorange.com/contact" rel="nofollow ugc">Contact Us</a>
<h3>OTP Verification, SMS Order notification & Login-registration with Phone for WooCommerce</h3>
<a href="https://plugins.miniorange.com/woocommerce-order-status-notifications-and-otp-verification" rel="nofollow ugc">WooCommerce SMS Notifications</a> plugin allows you to send OTP, Order Notifications, and Order Status updates via SMS and WhatsApp to customers, admins, and vendors. It supports WCFM Vendor Forms, the WooCommerce Product Vendor Registration Form, and OTP Verification on Forms such as WooCommerce Registration, WooCommerce Login, WooCommerce Checkout, Password Reset, and Billing Address.
With features like Order Status Notifications via SMS & WhatsApp, Vendor Alerts (WCFM, Dokan), WooCommerce Checkout OTP, Password Reset via OTP, and Stock Notifications, it boosts both security and communication across your WooCommerce store. It enables phone number login, registration, and OTP verification on supported forms.
Check more about <a href="https://plugins.miniorange.com/woocommerce-order-status-notifications-and-otp-verification" rel="nofollow ugc">Order Notification / SMS Notifications / Login & Register with Phone</a>
If you require OTP verification for <a href="https://plugins.miniorange.com/otp-verification-forms" rel="nofollow ugc">other forms</a> such as Ninja Forms, Contact Form 7, Gravity Forms, or Login and Registration forms, please visit the product page for the <a href="https://plugins.miniorange.com/wordpress-otp-verification" rel="nofollow ugc">miniOrange OTP Verification plugin</a> and read our blog on <a href="https://www.miniorange.com/blog/otp-verification/" rel="nofollow ugc">OTP Verification</a>.
Enjoy 10 free email and SMS OTPs upon installation to experience the plugin’s functionality.
<h3>WooCommerce Notifications</h3>
The WooCommerce SMS Notifications plugin allows your site to send automated Order Status updates and Order Notifications via SMS and WhatsApp to customers, admins, and vendors. These alerts are automatically triggered upon changes in WooCommerce order or payment status. This enhances your WooCommerce store’s customer experience with real-time SMS notifications for every order status update.
<ul>
<li>WooCommerce Order Status Notifications</li>
<li>WCFM Vendor Notifications</li>
<li>Dokan Vendor Notifications</li>
<li>Notifications on Submission of Forms</li>
<li>Notifications on User Registration</li>
<li>Back In stock Notifications*</li>
</ul>
We support the below WooCommerce SMS Notifications for the Admins, Customers, and Vendors*:
<blockquote>
<ul>
<li>New Customer Registration Notification.</li>
<li>New Order Notification.</li>
<li>Order Cancellation Notification.</li>
<li>Order Fulfillment Notification.</li>
<li>Order Payment Notification.</li>
<li>Order Deletion Notification.</li>
<li>WooCommerce Low Stock & Out of Stock Notifications.</li>
<li>Refund Status Notification.</li>
</ul>
</blockquote>
<h3>[WooCommerce SMS Notifications and OTP Verification on WordPress](https://blog.miniorange.com/otp-verification/)</h3>
<h3>Key Features</h3>
👉 <a href="https://plugins.miniorange.com/register-login-account-phone-miniorange-otp" rel="nofollow ugc">Login with Phone & Registration with Phone</a> 
 👉 <a href="https://plugins.miniorange.com/woocommerce-order-notifications-plugin-setup-wordpress" rel="nofollow ugc">WooCommerce order status notifications to customers, admins, and vendors</a> 
 👉 <a href="https://plugins.miniorange.com/wcfm-notification-vendor-notification-otp-verification-plugin" rel="nofollow ugc">WCFM Vendor Notifications</a> 
 👉 <a href="https://plugins.miniorange.com/dokan-notification-vendor-notification-otp-verification-plugin" rel="nofollow ugc">Dokan Vendor Notifications</a> 
 👉 WooCommerce Stock Notifications. 
 👉 Notifications on Submission of WooCommerce forms. 
 👉 <a href="https://plugins.miniorange.com/register-login-account-phone-miniorange-otp" rel="nofollow ugc">Login and Register Using Phone</a> 
 👉 OTP Verification on all WooCommerce forms*. 
 👉 <a href="https://plugins.miniorange.com/geolocation-ip-base-country-code-dropdown" rel="nofollow ugc">Country code dropdown for the phone fields</a> 
 👉 <a href="https://plugins.miniorange.com/how-to-configure-woocommerce-password-reset-addon" rel="nofollow ugc">WooCommerce Password Reset over OTP verification</a> 
 👉 <a href="https://plugins.miniorange.com/supported-sms-email-gateways" rel="nofollow ugc">Custom SMS/SMTP Gateway</a> like Twilio, MSG91, AWS SNS Gateways are Supported. 
 👉 WhatsApp Notifications 
 👉 <a href="https://plugins.miniorange.com/configure-whatsapp-otp-verification-guide-wordpress" rel="nofollow ugc">WhatsApp OTP verification</a> 
 👉 <a href="https://plugins.miniorange.com/woocommerce-login-form-with-otp-verification-for-wordpress#step5" rel="nofollow ugc">Passwordless login with phone</a> 
 👉 <a href="https://plugins.miniorange.com/otp-on-selected-woocommerce-product-category" rel="nofollow ugc">OTP Verification on Selected WooCommerce product category</a>.
Follow this guide to Setup SMS Notifications, Order Notifications & OTP Verification on your WooCommerce site: <a href="https://plugins.miniorange.com/woocommerce-order-notifications-plugin-setup-wordpress" rel="nofollow ugc">Guide</a> 
Contact us at otpsupport@xecurify.com to know more.
<h3>Which forms can be used with OTP verification and SMS/WhatsApp notifications?</h3>
The WooCommerce OTP Verification plugin provides OTP Verification using Phone and Email on WooCommerce Login/ Registration/ Password reset/ Checkout forms.
<blockquote>
<ul>
<li><a href="https://plugins.miniorange.com/otp-verification-login-form" rel="nofollow ugc">WooCommerce Login form</a> OTP verification during WooCommerce site login. Log in using only your phone number. Passwordless login through OTP. </li>
<li><a href="http://plugins.miniorange.com/otp-verification-woocommerce-registration-form/" rel="nofollow ugc">WooCommerce registration form</a> OTP verification on the WooCommerce site on new user registration. Registration using a phone number only is supported.</li>
<li><a href="https://plugins.miniorange.com/otp-verification-woocommerce-checkout-form/" rel="nofollow ugc">WooCommerce checkout form</a> OTP verification when the user places an order on the WooCommerce site.</li>
<li><a href="https://plugins.miniorange.com/otp-verification-for-woocommerce-frontend-manager-form" rel="nofollow ugc">WooCommerce Frontend Manager form</a> OTP verification on the Multivendor form for Bookings and listing of WooCommerce frontend Manager.</li>
<li><a href="https://plugins.miniorange.com/otp-verification-for-woocommerce-social-login" rel="nofollow ugc">WooCommerce Social Login form</a> Enable OTP verification on the Social Login for seamless checkout and account creation with a layer of security.</li>
<li><a href="https://plugins.miniorange.com/otp-verification-for-woocommerce-product-vendor-registration-form" rel="nofollow ugc">WooCommerce Product Vendor Registration Form</a> OTP verification on the vendor registration forms on the WooCommerce store manager page.</li>
<li><a href="https://plugins.miniorange.com/otp-verification-woocommerce-billing-address-update-form/" rel="nofollow ugc">WooCommerce Billing Address Form</a> Enabled OTP verification when users changes the billing address.</li>
<li><a href="https://plugins.miniorange.com/checkout-wc-form-setup-for-wordpress-otp" rel="nofollow ugc">Checkout WC Form</a>: Enables OTP verification when users proceed with the checkout on the Checkout WC form.</li>
<li><a href="https://plugins.miniorange.com/woocommerce-account-detail-form-setup-otp-wordpress" rel="nofollow ugc">WooCommerce Account Details Form</a>: Enables OTP verification when a user changes the phone number or email address on the account page.</li>
<li><a href="https://plugins.miniorange.com/how-to-configure-wordpress-password-reset-addon" rel="nofollow ugc">WooCommerce Password Reset Form</a>: OTP verification when user reset their password using WooCommerce password reset page.</li>
<li><a href="https://plugins.miniorange.com/dokan-notification-vendor-notification-otp-verification-plugin" rel="nofollow ugc">Dokan</a> – Best WooCommerce Multivendor Marketplace: OTP Verification on Dokan Vendor Registration form. (For customers & vendors)</li>
</ul>
</blockquote>
<h3>WOOCOMMERCE ADDITIONAL FEATURE LIST</h3>
<ul>
<li>
<a href="https://plugins.miniorange.com/login-with-whatsapp-as-two-factor" rel="nofollow ugc">WhatsApp Order Notifications & WhatsApp OTP Verification</a> : 
Send OTPs and order notifications directly over WhatsApp using your own personal WhatsApp Business account, ensuring faster delivery and a more personalized customer experience.
</li>
<li>
<a href="https://plugins.miniorange.com/how-to-configure-register-using-only-phone-addon" rel="nofollow ugc">Register using Phone Number only</a> : 
Enable users to register on your WooCommerce site using only their phone number, eliminating the need for an email address and simplifying the registration process.
</li>
<li>
<a href="https://plugins.miniorange.com/wcfm-notification-vendor-notification-otp-verification-plugin" rel="nofollow ugc">WCFM Multivendor Notifications</a> : 
Send real-time order status update notifications to store vendors via SMS, keeping them informed about new orders, cancellations, and status changes to ensure timely processing.
</li>
<li>
<a href="https://plugins.miniorange.com/dokan-notification-vendor-notification-otp-verification-plugin" rel="nofollow ugc">Dokan Vendor Notifications</a> : 
Send SMS notifications to vendors whenever there’s a WooCommerce order status update, ensuring they stay informed about new orders, cancellations, and progress in real-time.
</li>
<li>
<a href="https://plugins.miniorange.com/otp-verification-for-selected-countries" rel="nofollow ugc">OTP Verification on Selected WooCommerce Product Category</a> : 
Enable OTP verification specifically for selected WooCommerce product categories, adding an extra layer of security for high-risk or premium products during checkout or user actions.
</li>
<li>
<a href="https://plugins.miniorange.com/how-to-configure-limit-otp-request-addon" rel="nofollow ugc">Limit OTP Request</a> : 
Limit OTP Request helps prevent misuse by restricting the number of OTP requests a user can make within a specific time frame, protecting against spam and malicious attempts.
</li>
<li>
Login with Phone Number : 
Allow users to log in to your WooCommerce site using only their phone number, eliminating the need for a username or email and streamlining the login experience.
</li>
<li>
<a href="https://plugins.miniorange.com/how-to-configure-woocommerce-password-reset-addon" rel="nofollow ugc">WooCommerce Password Reset Over OTP</a> : 
Allow users to reset their password securely by verifying their identity through an OTP sent to their registered phone number or email address.
</li>
</ul>
<h4>How does this plugin work?</h4>
<ol>
<li>Once the order is placed on the WooCommerce website the customer and admin will receive the SMS notifications of order status updates.</li>
<li>SMS Notification will be sent automatically once order status changes.</li>
<li>Users will need to verify their Phone Number/Email address before submitting the form.</li>
<li>Once OTP is verified, the user can submit the form.</li>
</ol>
=Why Choose miniOrange? = 
1. Send SMS Notifications to the customers, admins, and vendors for order status updates and much more! 
2. Verification of the user’s Phone Number or Email address during registration and login is a must these days. You can easily enable OTP verification on your login registration form using a plugin. 
3. WhatsApp order notifications and OTP Verification. 
4. WooCommerce SMS Order Status Notifications. 
5. Easy setup: <a href="https://plugins.miniorange.com/woocommerce-order-notifications-plugin-setup-wordpress" rel="nofollow ugc">Guide</a> 
6. 24*7 Support.
<h3>SUPPORT</h3>
24*7 customer support is available. 
For new feature requests or any queries, you can use WordPress <a href="https://wordpress.org/support/plugin/miniorange-sms-order-notification-otp-verification/" rel="ugc">support forum</a>. 
Email us at otpsupport@xecurify.com/info@xecurify.com.

miniOrange OTP Verification and SMS Notification for WooCommerce

OTP Verification via SMS, Email,or WhatsApp, and SMS Order Notifications, Vendor Notifications for WooCommerce.OTP Login and registration with Phone →

MksDdn Reddy Auth vs miniOrange OTP Verification and SMS Notification for WooCommerce