Storm Consultancy

Liam Gladdy

<p>A Twitter API 1.1 compliant wordpress plugin that provides an array of a users timeline from Twitter for use by theme developers.</p>
<p>The new Twitter API requires you be oAuth’d before you can request a list of tweets, this means that all of the existing Twitter plugins that simply make an AJAX request for to the JSON API endpoint broke in March 2013.</p>
<p>This wass a major problem for the vast majority of websites that are currently using twitter, so we built a PHP class that implements all the new requirements for authentication and gives you an array of tweets out of the other end, for you to use in your PHP applications, or WordPress theme.  You can find the stand-alone <a href="https://github.com/stormuk/storm-twitter" rel="nofollow ugc">StormTwitter</a> class on GitHub</p>
<p>This plugin wraps our Twitter class and provides a settings screen for easy integration into WordPress.  However, it’s definitely for developers – you only get a PHP array out of it that contains Twitter tweet objects. You’ll still need to style the output and make it comply with the new display requirements.</p>
<p>This plugin does not provide sidebar widgets, shortcodes or any other form of drop-in functionality.  You still need to do the styling, we’ve just done the heavy lifting for you!</p>
<p>Here’s some example code for outputting the tweets in HTML:</p>
<p>https://github.com/stormuk/storm-twitter-for-wordpress/wiki/Example-code-to-layout-tweets</p>
<h3>Credits</h3>
<p>Uses Abraham Williams’s Twitter OAuth class.</p>
<h3>About</h3>
<p>Version: 2.3.0</p>
<p>Written by Liam Gladdy of Storm Consultancy – <a href="http://www.stormconsultancy.co.uk" rel="nofollow ugc">http://www.stormconsultancy.co.uk</a></p>
<p>Storm Consultancy are a web design and development agency based in Bath, UK.</p>
<p>If you are looking for a <a href="http://www.stormconsultancy.co.uk" rel="nofollow ugc">Bath WordPress Developer</a>, then <a href="http://www.stormconsultancy.co.uk/contact" rel="nofollow ugc">get in touch</a>!</p>
<h3>License</h3>
<p>Copyright (c) 2016 Liam Gladdy and Storm Consultancy (EU) Ltd,<br />
<a href="https://gladdy.uk/" rel="nofollow ugc">https://gladdy.uk/</a>, <a href="http://www.stormconsultancy.co.uk/" rel="nofollow ugc">http://www.stormconsultancy.co.uk/</a></p>
<p>Permission is hereby granted, free of charge, to any person obtaining<br />
a copy of this software and associated documentation files (the<br />
“Software”), to deal in the Software without restriction, including<br />
without limitation the rights to use, copy, modify, merge, publish,<br />
distribute, sublicense, and/or sell copies of the Software, and to<br />
permit persons to whom the Software is furnished to do so, subject to<br />
the following conditions:</p>
<p>The above copyright notice and this permission notice shall be<br />
included in all copies or substantial portions of the Software.</p>
<p>THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND,<br />
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF<br />
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND<br />
NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE<br />
LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION<br />
OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION<br />
WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.</p>


oAuth Twitter Feed for Developers

For a developer, this is the best twitter plugin out there. Nice and simple. Very flexible. The correct solution.



The best way to connect to twitter.

Twitter API 1.1 compliant plugin that provides a function to get an array of tweets from the auth'd users Twitter feed for use in themes.

Justin Greer

Jayson T Cote

<p>Connect your app to WordPress or use SSO to connect multiple websites with the same username and passwords. No 3rd party servers are needed with WP OAuth Server. Everything you need is in this plugin.</p>
<span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/ZOUsY4Kp_6U?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span>
<h4>Features</h4>
<ul>
<li>WP REST API Authentication. Provides ability to make authorized calls to protected REST API endpoints.</li>
<li>WP REST API Lock Down. Prevent any calls to the REST API unless authorized</li>
<li>Unlimited OAuth 2.0 Clients</li>
<li>Support for Implicit Flow</li>
<li>Built-In Resource Server</li>
<li>Automated Authorization Flow (User does not have to see authorization screen)</li>
<li>Easily Extend/ Modify the Endpoints</li>
<li>OAuth 2.0 PKCE</li>
<li>Modern and Legacy JWT authorization support. OAuth 2.0 JSON Web Token Support</li>
</ul>
<h4>Supported Grant Types</h4>
<ul>
<li>Authentication Code w/Implicit</li>
<li>User Credentials (Pro)</li>
<li>Client Credentials (Pro)</li>
<li>Refresh Token (Pro)</li>
<li>OpenID Connect (Pro)</li>
<li>OpenID Discovery</li>
<li>Public Clients (Pro)</li>
<li>Public Client Proof of Key Exchange (PKCE)</li>
</ul>
<h4>Supports</h4>
<ul>
<li>Connecting any Custom Mobile and Desktop Application to WordPress’s Backend.</li>
<li>Any software or web platform utilizing OAuth 2.0.</li>
<li>Allows RocketChat to use WordPress as a Backend.</li>
<li>Connects Moodle LMS and use WordPress users.</li>
<li>Alexa Skills Authentication</li>
<li>Tribe.so Community OAuth 2 SSO Support</li>
</ul>
<h4>How to Use</h4>
<p>Visit https://wp-oauth.com/support/documentation/ for detailed documentation on installing, configuring and using<br />
WordPress OAuth Server.</p>
<h4>Licensing</h4>
<p>WP OAuth Server is free to use. Please support the project by licensing. You can view more information at<br />
https://wp-oauth.com.</p>
<h4>Minimum Requirements</h4>
<ul>
<li>PHP 5.6.4 or greater <em>(latest version recommended)</em></li>
<li>OpenSSL installed and enabled if you plan on using OpenID Connect</li>
</ul>
<h4>Other Information</h4>
<ul>
<li>NOTE: As of 3.0.0, there are no backward compatibility for any version older than 3.0.0</li>
<li>NOTE: Due to IIS’s inability play nice, WP OAuth Server may work but is very limited for Windows OS.</li>
</ul>
<h4>Support</h4>
<p>Support requests should be made by opening a support request at https://wp-oauth.com/support/submit-ticket/.</p>


WP OAuth Server (OAuth Authentication)

There is no answer even on the premium version website. The plugin is abandoned, with legacy code and some bugs. Please, choose an alternative decision. Didn't use this one!

Abandoned plugin


I just want to say thank you to the developer, you have done a great job and saved me a tonne of time :)


This plugin is really fantastic


I tested WP OAuth Server (OAuth Authentication) in integration with a client application and found a serious issue: even after the user logs out from WordPress, the issued access token is still accepted by the /oauth/me endpoint, returning all user data.



This means any client application that has stored the token can continue accessing private information indefinitely, until the token expires, without verifying if the session on the server has ended.



I tried to work around the issue by enabling the introspection endpoint and validating the token on each request, but the plugin does not revoke the token on logout, making introspection ineffective for detecting logouts.



This flaw breaks a basic security principle of OAuth 2.0 and may expose sensitive data. I do not recommend using this plugin until token revocation upon logout is implemented.


Serious security flaw — tokens remain valid after logout

Adds Authentication through OAuth 2. Provides the ability for Single Sign On for websites & Mobile Applications.

oAuth Twitter Feed for Developers vs WP OAuth Server (OAuth Authentication)