Digitaldive

WP OAuth2 adds “Login with WordPress.com” (OAuth2) to your WordPress login screen and a connect/disconnect widget on user profile pages. It’s designed for agencies and teams managing multiple sites who want a consistent WordPress.com login without installing Jetpack.
External Service: WordPress.com OAuth2 API 
– Service purpose: Authenticate users with their WordPress.com accounts. 
– Data sent: Client ID, redirect URI, OAuth authorization code, and standard HTTP request metadata during the OAuth flow. 
– Data received: WordPress.com user ID, email, and display name to link or create WordPress users. 
– Service terms: https://wordpress.com/tos/ 
– Privacy policy: https://automattic.com/privacy/
Features:
<ul>
<li>WordPress.com login (OAuth2 “auth” scope).</li>
<li>Link or unlink WordPress users to WordPress.com accounts.</li>
<li>Auto-create users when no matching email exists (optional).</li>
<li>Allowlist by email domain or WordPress.com user ID (optional).</li>
<li>Audit log of the last 20 OAuth attempts (optional).</li>
<li>Stores only WordPress.com user ID in user meta (no access tokens stored).</li>
<li>Short-lived OAuth state with HttpOnly cookie + transient for CSRF protection.</li>
</ul>
Setup requires creating a WordPress.com application and adding the redirect URI shown in the plugin settings. Feature toggles let you enable or disable the login button, profile widget, auto-create users, admin notices, allowlists, and the audit log.
<h3>Privacy</h3>
This plugin connects to WordPress.com to authenticate users. It stores the WordPress.com user ID in WordPress user meta to link accounts. OAuth access tokens are used during the login flow and are not stored. A short-lived HttpOnly cookie and transient are used for OAuth state validation and expire automatically. If the audit log is enabled, the last 20 OAuth attempts are stored (time, status, IP address, and basic details) in a non-autoloaded option. WordPress.com service terms: https://wordpress.com/tos/ and privacy policy: https://automattic.com/privacy/.

OAuth2 Account Login

Add WordPress.com OAuth2 login to WordPress. Let teams sign in with WordPress.com, link accounts, and avoid Jetpack. Not affiliated with Automattic.

Erik

gardenboi

memoryshadow

WordPress uses PHPMailer to send mail from with your local mail server, but it can happen that your mail were not accepted by mail providers… 
This can happen for several reasons, sometimes because the mail server is not configured or sometimes because the records DKIM, DMARC and SPF of the domain been set up correctly and so on… 
Anyway you can avoid any problems by using an external SMTP server and sending mail with it!
<h4>Additional features</h4>
✅ OAuth2 Authentication: Securely connect to Gmail and Microsoft Office 365 without needing to store passwords in your database or enable “less secure apps”. 
✅ Per-Form Custom Templates: Wrap CF7 emails with beautiful templates. You can now select a specific custom template for each form directly from the plugin settings! 
✅ Global or CF7-Only Mode: Choose whether to override all WordPress emails with this SMTP configuration or limit it exclusively to Contact Form 7 submissions. 
✅ Live testing: a module for testing e-mail settings with the Rest-Api (that avoid to reload the page for this kind of test). The entire output of the php mailer will be captured, which will be useful in case of configuration errors or to get the wrong parameter when is possible. 
✅ Automated Reports: choose when and what email you want to receive the report and I will send you a beautifully formatted HTML summary of sent and failed emails. Includes log retention settings to keep your database clean. 
✅ Advanced Headers & Security: Easily automatically set “Reply-To” headers, allow insecure options for self-signed certificates, and define custom “From Name” and “From Email” settings.
This plugin is ads free and I don’t want to try to sell you any pro version! 
If you want to contribute, there are many ways to do so, from simple suggestions and bug reports to translating and contributing code. 
See below how to do it!
<h3>SMTP</h3>
SMTP stands for ‘Simple Mail Transfer Protocol’. 
It is a connection-oriented, text-based network protocol of the Internet protocol family and as such is on the seventh layer of the ISO/OSI model, the application layer. 
Like any other network protocol, it contains the rules for proper communication between networked computers. 
SMTP is specifically responsible for sending and forwarding e-mails from a sender to a recipient. 
Since its release in 1982 as the successor to the ‘Mail Box Protocol’ in Arpanet, SMTP has become the standard protocol for sending e-mails. 
However, the SMTP procedure remains largely invisible to the normal consumer, as it is executed in the background by the e-mail programme used. 
Only if the software, the webmail application on the browser or the mobile e-mail application does not automatically determine the SMTP protocol when creating an account, does it have to be set manually to ensure smooth e-mail traffic.
<h4>SMTP presets</h4>
<ol>
<li>Aruba</li>
<li>Gmail (tls and ssl)</li>
<li>Yahoo (tls and ssl)</li>
<li>Outlook (tls and ssl)</li>
<li>Office365 (tls)</li>
</ol>
<h4>OAuth2 Setup</h4>
Google Gmail 
To use Gmail with OAuth2, you need to create a Google Cloud Project: 
1. Create Project: Go to <a href="https://console.cloud.google.com/" rel="nofollow ugc">Google Cloud Console</a> and create a new project. 
2. Enable Gmail API (Required): Go to APIs & Services > Library, search for Gmail API, and click Enable. 
3. Configure Consent Screen: Go to OAuth consent screen and create an External app. 
 * Scopes: Click Add or Remove Scopes, search for the Gmail API, and check the boxes for <code>.../auth/userinfo.email</code> and <code>.../auth/gmail.compose</code> (or <code>https://mail.google.com/</code>). 
 * Publishing Status: Click Publish App to push it to production (otherwise, your connection token will expire every 7 days). 
4. Create Credentials: Go to Credentials > Create Credentials > OAuth client ID. 
 * Application type: Web application. 
 * Authorized redirect URIs: Copy and paste the exact callback URL provided in your plugin settings. 
5. Connect: Copy the generated Client ID and Client Secret into the plugin settings and click Connect. 
6. Grant Permissions (Critical): During the Google login popup, click Advanced > Go to App if prompted with an “unverified app” warning. You must explicitly check the boxes that ask for permission to compose/send emails before clicking Continue.
Microsoft Office 365 
1. Go to the Azure Portal (portal.azure.com). 
2. Navigate to Azure Active Directory > App registrations > New registration. 
3. Enter an application name and set the Redirect URI (Web) to the exact URL provided in the plugin settings. 
4. Go to Certificates & secrets and create a new client secret. Copy the secret’s Value. 
5. Go to API permissions > Add a permission > Microsoft Graph > Delegated permissions and add <code>SMTP.Send</code> and <code>offline_access</code>. 
6. Copy the Application (client) ID and the Client Secret into the plugin settings. 
7. Click Connect with OAuth2.
Would you like to find more presets (that you think are useful to other users)? 
Open a request in the support form and provide the necessary connection data (auth, server address and port). 
In the next cf7-smtp version you will find the required configuration among the presets.
<h4>Security</h4>
It’s warmly advised to use OAuth2 for supported providers (Gmail, Office365) so no passwords are saved. If using basic SMTP authentication, it is highly recommended to store at least the password into wp-config.php as a constant. 
And in addition, it’s also very easy! It needs only to add
<pre><code>define( 'CF7_SMTP_USER_PASS', 'mySecr3tp4ssWord' );
</code></pre>
into your <code>wp-config.php</code> just before
<pre><code>/* That's all, stop editing! Happy publishing. */
</code></pre>
All passwords will be stored encrypted, but still it is not good practice to put it into database!
<h4>Quick setup</h4>
as with the user password other constants can also be defined. 
Available constant are CF7_SMTP_HOST, CF7_SMTP_PORT, CF7_SMTP_AUTH, CF7_SMTP_USER_NAME, CF7_SMTP_USER_PASS, CF7_SMTP_FROM_MAIL, CF7_SMTP_FROM_NAME
But, to quickly set up the plugin there is one constant that wraps all the others, so in case you manage multiple websites this will be very convenient!
<pre><code>define(
 'CF7_SMTP_SETTINGS',
 array(
 'host' => string,
 'port' => number,
 'auth' => ''|'tls'|'ssl',
 'user_name' => string,
 'user_pass' => string,
 'replyTo' => true|false,
 'insecure' => true|false,
 'from_mail' => email,
 'from_name' => string,
 'smtp_mode' => 'cf7'|'override',
 ));
</code></pre>
<h4>Template</h4>
Wouldn’t it be better to have a small container to make our mail a little prettier? 
Well we have it! You can now assign specific templates to each of your forms via the plugin settings dashboard. 
To use your own custom templates for emails, simply create them by following these steps: 
1. Create a folder named <code>cf7-smtp/</code> or <code>templates/cf7-smtp/</code> in your theme (or child theme) folder. 
2. Create a <code>.php</code> or <code>.html</code> template file inside it. 
3. Go to the plugin settings under Style > Form Email Templates, and select your newly found custom template from the dropdown menu for the desired form. 
4. (Optional) You can customize the logo, website link, and other template parts. Checkout the filter documentation on GitHub/wiki.
<h3>Support</h3>
Community support: via the <a href="https://wordpress.org/support/plugin/cf7-smtp/" rel="ugc">support forums</a> on wordpress.org 
Bug reporting (preferred): file an issue on <a href="https://github.com/erikyo/cf7-smtp" rel="nofollow ugc">GitHub</a>
<h4>Contribute</h4>
We love your input! 
We want to make contributing to this project as easy and transparent as possible, whether it’s:
<ul>
<li>Reporting a bug</li>
<li>Testing the plugin</li>
<li>Discussing the current state, features, improvements</li>
<li>Submitting a fix or a new feature</li>
</ul>
We use GitHub to host code, to track issues and feature requests, as well as accept pull requests. 
By contributing, you agree that your contributions will be licensed under its GPLv2 License.

SMTP for Contact Form 7

Secure your Contact Form 7 emails with this free SMTP plugin. It configures wp_mail() and features OAuth2, custom templates, and automated reports.

OAuth2 Account Login vs SMTP for Contact Form 7