Jafran Hasan

iclanzan

I have created this plugin because it is of great use to me and I hope it will be of use to others but it might break things. Please use it with caution and at your own risk. If you find bugs please get in touch with me or better yet help fix it on <a href="https://github.com/iclanzan/Passwordless" title="Passwordless on GitHub" rel="nofollow ugc">GitHub</a>.
<h4>Login process</h4>
Passwordless allows your site’s users to log in using only their email addresses. After submitting the login form with the email address filled in, the user will receive an email containing a login link which can only be used once. Clicking that link results in the user getting logged in for one year or until he logs out. Unused login links expire after one day.
<h4>New users</h4>
New users will have accounts created for them automatically when they try to log in for the first time. In this case their email will also act as the username. Their visible name will be set to ‘Annonymous’ but can obviously be changed on the profile page.
<h4>Login page</h4>
The plugin changes the login page URI to <code>example.com/login</code> from the default <code>example.com/wp-login.php</code>. If permalinks are disabled the login page will instead be <code>example.com/?login</code>.
The page can be customized using some of the same filters and action hooks that the original login page used. If a total overhaul of the page is desired, placing a <code>login.php</code> template file in the currently active theme directory will override the plugin’s login page.
<h4>Filters</h4>
I have included some new filter hooks to make it easy to change important aspects of the plugin’s inner workings.
<pre><code>passwordless_login_page applied to the login page URI. Filter function argument: string containing the login page URI. passwordless_pass_length applied to the length of the generated passwords/keys. Filter function argument: integer representing the number of characters. passwordless_key_expire applied to the number of seconds a login key is valid for. Filter function argument: integer number of seconds. passwordless_login_redirect applied to the URI where a user is sent after logging in. Filter function arguments: string URI, integer user id. passwordless_email_subject applied to the subject of the email that gets sent to users logging in. Filter function arguments: string email subject, string email address. passwordless_email_body applied to the body of the email that gets sent to users logging in. Filter function arguments: string email body, string email address. </code></pre>

Passwordless

Passwordless allows users to sign up and log in using only email addresses, removing the need for them to remember yet another password.

Anna Garcia

Are you or your customers tired of remembering passwords?
This plugin provides a secure and convenient solution to log into your WordPress website. With Beyond Identity, you can say goodbye to password fatigue and improve your website’s security.
Once activated, you will see:
<ul>
<li>
Passwordless UI that integrates seamlessly on with the WordPress login page.
</li>
<li>
Beyond Identity Settings page for WordPress admins to configure their Beyond Identity account.
</li>
<li>
Beyond Identity filter on the WordPress Dashboard’s Users page to view which users use passkeys.
</li>
</ul>
Before you begin
You will need a Beyond Identity account to configure this plugin. 
Beyond Identity currently uses “Universal Passkeys,” which are specific to Beyond Identity and have two benefits over your average FIDO2 passkeys. 
1. Universal Passkeys never leave the device on which they are created. This makes them much more secure. 
2. Universal Passkeys work everywhere. Some browsers (Firefox) do not support passkeys. Universal Passkeys work everywhere, even on Firefox.
Coming soon: Vanilla WebAuthn FIDO2 passkeys. These passkeys allow syncing between devices and work with passkey managers.
As a Beyond Identity admin, you will have several configuration options including selecting passkey flavors and customizing the login page.
<h3>Admin Set Up</h3>
First, sign up for a free developer account by visiting: https://www.beyondidentity.com/developers
Once you have a developer account you will need to set several values for the OIDC server. Follow the steps below to configure a Beyond Identity application. Most defaults are fine. However make sure the following are set:
<ol>
<li>In your Beyond Identity Console, navigate to the Apps tab under Authentication</li>
<li>Tap Add an application</li>
<li>Set Protocol to OIDC</li>
<li>Set Client Type to Confidential</li>
<li>Set PKCE to Disabled</li>
<li>Set Redirect URIs to include <code>https://${your-website-domain.com}/wp-admin/admin-ajax.php?action=openid-connect-authorize</code></li>
<li>Set Token Configuration > Subject to id</li>
<li>At the top of the page, navigate to your application’s Authenticator Config tab</li>
<li>Set Configuration Type to Hosted Web</li>
<li>The recommended defaults for Authentication Profile are fine but feel free to modify</li>
<li>Tap the Submit button to save your changes</li>
</ol>
Finally, go to your WordPress dashboard and find the Beyond Identity Settings page. You will need three generated values from your newly created application. You can find the Issuer URL, Client ID, and Client Secret in the Beyond Identity Console’s application that you just created.
For more information on how Beyond Identity works, visit the <a href="http://developer.beyondidentity.com" rel="nofollow ugc">developer documentation</a>.
For help, reach out on <a href="https://join.slack.com/t/byndid/shared_invite/zt-1anns8n83-NQX4JvW7coi9dksADxgeBQ" rel="nofollow ugc">Slack</a>.
<h3>Shortcodes</h3>
This plugin also provides shortcodes that can be used on any page or post. These include:
<pre><code>[beyond_identity_login_button] 
</code></pre>
Generates a button to log in with a Beyond Identity Universal Passkey.
<pre><code>[beyond_identity_auth_url] 
</code></pre>
Generates the authorize URL to log in with a Beyond Identity Universal Passkey.
For information on shortcode customization attributes, please refer to the documentation available in the Settings > Beyond Identity dashboard page after activating the plugin.

Beyond Identity Passwordless

A passwordless solution that allows users and admins to log into a WordPress website using passkeys with Beyond Identity.

Passwordless vs Beyond Identity Passwordless