NKChakshu

<p>QROGIN is a developer-friendly QR based social login platform delivering FIDO2 passkey-powered passwordless authentication, combining enterprise-grade security with easy integration and seamless identity management.<br />
Using this plugin, developers will be able to generate tamper‑proof (time-limited & one-time use) QR codes and secure one‑click links(button) for QROGIN user-login/signup. The widgets talks to your QROGIN back‑end, displays a countdown, polls for authentication and then fires a JavaScript event so you can finish the flow your way.</p>
<p><strong>Features</strong></p>
<ul>
<li>Three modes: <code>QrWidget</code>, <code>QrWithLink</code>, <code>SecureLinkButton</code></li>
<li>Customise colours, labels and CSS classes from the shortcode</li>
<li>Accessible: countdown and refresh button included</li>
<li>Event‑driven – hook into <code>qrogin-authenticated</code> for SPA redirects</li>
<li>Works on any page/post or block editor pattern</li>
</ul>
<h3>Shortcode</h3>
<p>[qrogin_qr_widgets]</p>
<p>Attributes:<br />
See the “Attribute Reference” section below for all options.</p>
<h3>Attribute Reference</h3>
<ul>
<li>base_url (required) – Endpoint that returns QR payload</li>
<li>status_base (required) – Endpoint polled to read auth status</li>
<li>tenant_id (required) – Your tenant/account ID</li>
<li>api_key (required) – API key issued by QROGIN</li>
<li>mode – QrWidget (default), QrWithLink, or SecureLinkButton</li>
<li>ttl_ms – Time‑to‑live in milliseconds (default: 55000)</li>
<li>poll_interval – Polling gap in milliseconds (default: 5000)</li>
<li>class – Extra classes for the widget wrapper</li>
<li>button_label – Button inner HTML (default: “Secure one‑time link”)</li>
<li>button_class – Extra classes for the button</li>
<li>button_style – Inline CSS for the button</li>
</ul>
<h3>Usage example: catching the authentication event</h3>
<p>Add this script to your page (you can adjust the redirect URL):</p>
<pre><code><script>
document.querySelectorAll('.qrogin-qr-container').forEach(el => {
  el.addEventListener('qrogin-authenticated', e => {
    const { token, user_id } = e.detail;
    sessionStorage.setItem('qroginJwt', token);
    sessionStorage.setItem('userId', user_id);
    // Redirect to a safe location
    window.location.href = '/account'; // <- change this
  });
});
</script><h3>Privacy</h3>
</code></pre>
<p>This plugin sends only the fields you configure—<code>tenant_id</code> (also known as customer_id), <code>api_key</code>, and associated session data—to <strong>your own</strong> QROGIN back‑end. All traffic travels over <strong>HTTPS</strong> to QROGIN‑owned sub‑domains (<code>*.qrogin.com</code>) only. No data is transmitted to the plugin author or any other third‑party service.</p>


Qrogin QR Widgets

QROGIN offers passkey-based QR login with tamper-proof codes, one-click links, countdown timer, auth polling and JS event for easy integration.

susheelhbti

<p><strong>Keyless Login</strong> brings modern, phishing-resistant authentication to your WordPress site.</p>
<p>Log in with your fingerprint, face, or a hardware security key — no password ever required or transmitted. Implemented entirely in pure PHP using only the built-in <code>openssl</code> extension. No Composer, no vendor folder, no third-party libraries.</p>
<h4>How It Works</h4>
<p>KeylessWP implements the <a href="https://www.w3.org/TR/webauthn-2/" rel="nofollow ugc">W3C WebAuthn Level 2</a> specification from scratch:</p>
<ul>
<li>A custom CBOR decoder parses authenticator data</li>
<li>Custom ASN.1/DER builders construct public keys</li>
<li>PHP’s built-in <code>openssl_verify()</code> verifies ECDSA P-256 (ES256) and RSA-2048 (RS256) signatures</li>
<li>Credentials are stored in a dedicated database table with sign-count clone detection</li>
</ul>
<h4>Supported Authentication Methods</h4>
<ul>
<li>🖐 Fingerprint sensors (Touch ID, Windows Hello)</li>
<li>😊 Face recognition (Face ID, Windows Hello face camera)</li>
<li>🔑 Hardware security keys (YubiKey, Google Titan Key, Feitian)</li>
<li>🔐 Platform passkey managers (iCloud Keychain, Google Password Manager)</li>
</ul>
<h4>Features</h4>
<ul>
<li>Full FIDO2 / WebAuthn Level 2 implementation — pure PHP</li>
<li>ECDSA P-256 (ES256) and RSA-2048 (RS256) signature verification</li>
<li>Zero external libraries — only PHP’s built-in <code>openssl</code> extension required</li>
<li>Passkey registration and management from the user profile page</li>
<li>Per-credential device naming, creation date, and last-used tracking</li>
<li>Sign-count verification on every authentication (clone detection)</li>
<li>Phishing-resistant: credentials are cryptographically bound to your domain</li>
<li>Admin settings page with live usage statistics</li>
<li>Graceful fallback: the standard password form remains available</li>
<li>Translatable — all strings use <code>__()</code> with the <code>keylesswp</code> text domain</li>
</ul>
<h4>Privacy</h4>
<p>KeylessWP does not collect, transmit, or share any user data. No external services are contacted. Biometric data never leaves the user’s device — only a cryptographic public key is stored on the server.</p>


Keyless Login

Passwordless WebAuthn/FIDO2 login for WordPress. 100% pure PHP, zero external dependencies.

Qrogin QR Widgets vs Keyless Login