Elementor

<p>Sticklight Connector provides a structured way to use the WordPress user system in external or React-based applications.</p>
<p>The plugin extends the WordPress REST API with additional endpoints that allow authenticated clients to retrieve user context and interact with WordPress data, while fully respecting core authentication methods, roles, and capability checks.</p>
<p>Sticklight does not replace WordPress authentication. It relies on <code>wp_authenticate</code> for credential validation and WordPress Application Passwords for API access, and follows standard permission checks (<code>current_user_can</code>) for all requests.</p>
<h4>Typical use cases</h4>
<ul>
<li>React applications connected to a WordPress site</li>
<li>Headless or hybrid WordPress setups</li>
<li>Admin or user dashboards built outside wp-admin</li>
<li>External tools that require authenticated access to WordPress data</li>
</ul>
<h4>Features</h4>
<ul>
<li>Authenticates via <code>wp_authenticate</code> and issues Application Passwords for API access</li>
<li>Adds REST endpoints for login, logout, and retrieving current user context</li>
<li>Enforces WordPress capability checks on all requests</li>
<li>Supports cross-origin headless setups</li>
<li>Extensible via WordPress hooks and filters</li>
</ul>
<h3>Usage</h3>
<h4>Login</h4>
<p>Authenticate with username (or email) and password:</p>
<pre><code>POST /wp-json/sticklight/v1/auth/login
</code></pre>
<p>On success the response includes an Application Password for subsequent API requests and the authenticated user:</p>
<pre><code>{
  "app_password": "XXXX XXXX XXXX XXXX XXXX XXXX",
  "user": {
    "user_id": 1,
    "username": "admin",
    "display_name": "Admin",
    "email": "admin@example.com",
    "roles": ["administrator"]
  }
}
</code></pre>
<p>Use the returned <code>app_password</code> with HTTP Basic Authentication for all further requests.</p>
<h4>Current user</h4>
<p>Retrieve the current authenticated user:</p>
<pre><code>GET /wp-json/sticklight/v1/auth/me
</code></pre>
<h4>Logout</h4>
<p>Revoke the current Application Password session:</p>
<pre><code>POST /wp-json/sticklight/v1/auth/logout
</code></pre>
<h4>User registration</h4>
<p>User creation is handled through the built-in WordPress REST API (<code>POST /wp-json/wp/v2/users</code>) and requires administrator authentication.</p>
<h4>Accessing protected data</h4>
<p>Requests to any endpoint must pass standard WordPress permission checks. Sticklight does not bypass or override these checks.</p>
<h3>Security</h3>
<p>Sticklight follows WordPress security practices:</p>
<ul>
<li>Authenticates via <code>wp_authenticate</code>, which respects all security plugin hooks (rate limiting, two-factor authentication, brute-force protection)</li>
<li>Issues Application Passwords scoped to individual sessions</li>
<li>Does not provide user registration — accounts must be created by an administrator</li>
<li>Applies capability checks (<code>current_user_can</code>) on all endpoints</li>
<li>Does not expose private data without proper permissions</li>
</ul>
<p>For external applications, it is recommended to:</p>
<ul>
<li>Use HTTPS</li>
<li>Restrict allowed origins</li>
<li>Avoid exposing sensitive endpoints unnecessarily</li>
</ul>


Sticklight

Use WordPress authentication and permissions in external React applications via secure REST API endpoints.

anghelalexandra

cborodescu

abarbulescu

<p><strong>FEB 2020 UPDATE: A NEW & RESPONSIVE PWACOMMERCE THEME IS COMING SOON! STAY TUNED AT <a href="https://pwacommerce.com" rel="nofollow ugc">PWACOMMERCE.COM</a></strong></p>
<p><strong><a href="https://pwacommerce.com" rel="nofollow ugc">PWACommerce</a> is a mobile plugin that helps you transform your WooCommerce shop into a progressive mobile web application implemented with React, Redux and Semantic UI. It comes with multiple ecommerce app themes that you can purchase individually or as a bundle.</strong></p>
<p>PWACommerce is <strong>supported on</strong> iOS and Android smartphones and tablets. <strong>Compatible browsers</strong>: Safari, Google Chrome, Android – Native Browser.</p>
<p>It has been tested on WordPress 5.3.2 and later.</p>
<p>What PWACommerce enables you to do:</p>
<p><strong>Progressive Web Apps</strong></p>
<p>Some of the key features of progressive web apps are:</p>
<ul>
<li><strong>Add to Homescreen</strong>. Readers can add the mobile web application to their homescreen and run it in full-screen mode, making it easy to launch and return to your app.</li>
<li>Smooth animations, scrolling, and navigations keep the experience silky smooth.</li>
<li><strong>Responsive UI</strong>. The mobile web application is sensitive to various screen sizes and orientation changes: landscape, portrait. In other words, the look and feel of the mobile web app seamlessly morphs into the screen size of users’ devices.</li>
<li><strong>App Themes</strong>. You can offer your users an exceptional buying experience by giving them a mobile web application with a native app-like look & feel. The default theme comes with basic features/options, but more app themes will be made available at <a href="https://pwacommerce.com" rel="nofollow ugc">PWACommerce.com</a>.</li>
<li><strong>Analytics</strong>. PWACommerce easily integrates with Google Analytics.</li>
</ul>
<p>PWACommerce also comes with a <strong>PRO version</strong> suitable for online stores that want to take full advantage of the Progressive Web App technology and increase engagement and conversions. Some of the benefits of using <a href="https://pwacommerce.com" rel="nofollow ugc">PWACommerce.com</a> are:</p>
<ul>
<li>
<p><strong>Offline Mode</strong>. The app’s shell and content is cached using service workers. Categories and products are saved in the browser’s local storage while your users navigate through the app, together with products added to the shopping cart. This offers a full app-like experience to your users, allowing them to continue using the app even when they don’t have a network connection.</p>
</li>
<li>
<p><strong>Web Push Notifications</strong>. We have integrated with the OneSignal WordPress plugin, allowing you to engage users through push notifications. This is one of the most requested PWA features, proven to increase user engagement by up to 4x.</p>
</li>
<li>
<p>We take pride in offering fantastic <a href="https://pwacommerce.com" rel="nofollow ugc">PWACommerce</a> <strong>maintenance and hands-on support</strong>. Our team of friendly progressive web app experts makes sure technology doesn’t stand in your way.</p>
</li>
<li>
<p><strong>Access to multiple app themes</strong> that can be purchased individually or as a bundle.</p>
</li>
<li>
<p><strong>Web Push Notifications</strong>. We have integrated with the OneSignal WordPress plugin, allowing you to engage users through push notifications. This is one of the most requested PWA features, proven to increase user engagement by up to 4x.</p>
</li>
</ul>
<p>Your mobile users will be able to benefit from a rich mobile buying experience on their favorite mobile device without needing to go through an App Store and install anything.</p>
<p>Our <strong>tech stack for developing the mobile PWA</strong> includes:</p>
<ul>
<li><a href="https://github.com/facebook/create-react-app" rel="nofollow ugc">Create-React-App</a> for bootstrapping the project.</li>
<li><a href="https://react.semantic-ui.com/introduction" rel="nofollow ugc">React-Semantic-UI</a> (the official React integration for Semantic UI) for adding UI components such as buttons, grids, forms, etc.</li>
<li><a href="https://reacttraining.com/react-router/" rel="nofollow ugc">React-Router</a> for navigating between screens.</li>
<li><a href="https://redux.js.org/" rel="nofollow ugc">Redux</a> for managing the app state.</li>
<li><a href="https://jestjs.io/" rel="nofollow ugc">Jest</a> for unit testing.</li>
<li>Eslint and the <a href="https://github.com/airbnb/javascript" rel="nofollow ugc">Airbnb coding standard</a>.</li>
</ul>
<p>We enjoy writing and maintaining this plugin. If you like it too, please rate us. But if you don’t, let us know how we can improve it.</p>
<p>Have fun on your mobile adventures.</p>
<h3>Roadmap</h3>
<p>Our roadmap currently includes:<br />
* Adding a complete checkout process<br />
* Adding better variations support<br />
* Adding product search functionality</p>
<h3>Repositories</h3>
<p>We currently have two Github development repositories:</p>
<ul>
<li><a href="https://github.com/rock-solid/pwacommerce" rel="nofollow ugc">https://github.com/appticles/pwacommerce</a> – The plugin files, same as you will find for download on WordPress.org.</li>
<li><a href="https://github.com/rock-solid/pwa-theme-woocommerce" rel="nofollow ugc">https://github.com/appticles/pwa-theme-woocommerce</a> – Development files for the Progressive Web App implemented with React, Redux and Semantic UI.</li>
</ul>


PWACommerce – WooCommerce Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps

PWACommerce is a mobile plugin that helps you transform your WooCommerce shop into a progressive mobile web application.

Sticklight vs PWACommerce – WooCommerce Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps