Digitaldive

<p>WP OAuth2 adds “Login with WordPress.com” (OAuth2) to your WordPress login screen and a connect/disconnect widget on user profile pages. It’s designed for agencies and teams managing multiple sites who want a consistent WordPress.com login without installing Jetpack.</p>
<p>External Service: WordPress.com OAuth2 API<br />
– Service purpose: Authenticate users with their WordPress.com accounts.<br />
– Data sent: Client ID, redirect URI, OAuth authorization code, and standard HTTP request metadata during the OAuth flow.<br />
– Data received: WordPress.com user ID, email, and display name to link or create WordPress users.<br />
– Service terms: https://wordpress.com/tos/<br />
– Privacy policy: https://automattic.com/privacy/</p>
<p>Features:</p>
<ul>
<li>WordPress.com login (OAuth2 “auth” scope).</li>
<li>Link or unlink WordPress users to WordPress.com accounts.</li>
<li>Auto-create users when no matching email exists (optional).</li>
<li>Allowlist by email domain or WordPress.com user ID (optional).</li>
<li>Audit log of the last 20 OAuth attempts (optional).</li>
<li>Stores only WordPress.com user ID in user meta (no access tokens stored).</li>
<li>Short-lived OAuth state with HttpOnly cookie + transient for CSRF protection.</li>
</ul>
<p>Setup requires creating a WordPress.com application and adding the redirect URI shown in the plugin settings. Feature toggles let you enable or disable the login button, profile widget, auto-create users, admin notices, allowlists, and the audit log.</p>
<h3>Privacy</h3>
<p>This plugin connects to WordPress.com to authenticate users. It stores the WordPress.com user ID in WordPress user meta to link accounts. OAuth access tokens are used during the login flow and are not stored. A short-lived HttpOnly cookie and transient are used for OAuth state validation and expire automatically. If the audit log is enabled, the last 20 OAuth attempts are stored (time, status, IP address, and basic details) in a non-autoloaded option. WordPress.com service terms: https://wordpress.com/tos/ and privacy policy: https://automattic.com/privacy/.</p>


OAuth2 Account Login

Add WordPress.com OAuth2 login to WordPress. Let teams sign in with WordPress.com, link accounts, and avoid Jetpack. Not affiliated with Automattic.

LCMAquino

<h3>Introduction</h3>
<p>Subscriber Login for YouTube is a WordPress plugin for Google OAuth 2.0 authentication with YouTube Google account.</p>
<h3>Features</h3>
<ul>
<li>Authentication — get the user coming from Google authentication;</li>
<li>Get user information — get the user data from their Google account;</li>
<li>Refresh token — refresh the user’s access token;</li>
<li>Revoke token — revoke the user’s access token;</li>
<li>Check if an user is subscribed on a given YouTube channel;</li>
</ul>
<p>For more information about Google OAuth 2.0, please see <a href="https://developers.google.com/identity/protocols/oauth2/web-server" rel="nofollow ugc">Using OAuth 2.0 for Web Server Applications</a></p>
<h3>Requirements</h3>
<ul>
<li>PHP 7.0 or later;</li>
<li>WordPress 4.4 or later;</li>
</ul>
<h3>Setting</h3>
<p>Before using Subscriber Login for YouTube, you need to set up an Google project for web application in <a href="https://console.developers.google.com/" rel="nofollow ugc">Google Console</a>. It’s a <strong>Google requirement</strong> for users to login! The web application project will provide: <code>GOOGLE_CLIENT_ID</code>, <code>GOOGLE_CLIENT_SECRET</code>, and <code>GOOGLE_REDIRECT_URI</code>.</p>
<p>Activate the “YouTube Data API v3” in your project and add the scopes <code>openid</code>, <code>email</code>, and <code>https://www.googleapis.com/auth/youtube.readonly</code> for its consent screen. See more details in <a href="https://support.google.com/cloud/answer/6158849?hl=en" rel="nofollow ugc">Setting up OAuth 2.0</a>.</p>
<h3>Access Scopes</h3>
<p>The scopes are used by Google to limit your application access to the user account data. Read more about <a href="https://developers.google.com/youtube/v3/guides/auth/server-side-web-apps?hl=pt-br" rel="nofollow ugc">YouTube Data API</a> scopes.</p>
<h3>Usage</h3>
<p>After you activated the plugin, then the plugin will automatically:</p>
<ul>
<li>add the “Sign in with YouTube” button to the WordPress login page. See screenshot #1.</li>
<li>add the “Revoke access” link to the WordPress profile page. See screenshot #2.</li>
</ul>
<h3>License</h3>
<p>Subscriber Login for YouTube is open-sourced software licensed under the <a href="https://github.com/lcmaquino/subscriber-login-for-youtube/blob/main/LICENSE" rel="nofollow ugc">GPL v2.0 or later</a>.</p>


OAuth2 Account Login vs Subscriber Login for YouTube