r0bodev

<p>Titan Social Login adds OAuth-based sign-in to WordPress so visitors can use their existing social accounts instead of creating new passwords.</p>
<h4>Included providers</h4>
<ul>
<li>Amazon</li>
<li>Facebook</li>
<li>Google</li>
<li>X (Twitter)</li>
<li>Microsoft</li>
</ul>
<h4>Key features</h4>
<ul>
<li>Adds login buttons to the WordPress login, registration, and lost password screens.</li>
<li>Optional social login on comment forms.</li>
<li>Account linking inside WordPress user profiles.</li>
<li>Shortcodes: [tsl_login], [tsl_account_links].</li>
<li>Popup or same-window authentication, configurable for desktop and mobile.</li>
<li>Custom redirect after login or first registration.</li>
<li>Design controls for layout, spacing, labels, and button styles.</li>
<li>Placeholder emails for providers that do not return an email address.</li>
</ul>
<p>This plugin uses external OAuth providers for authentication. See the “External Services” section for details.</p>
<h4>Privacy</h4>
<p>Titan Social Login does not collect or send any usage telemetry. OAuth requests go directly to the enabled provider during login. The plugin stores its configuration in your WordPress database.</p>
<h4>Additional features in the Pro version</h4>
<ul>
<li>30+ OAuth providers including Apple, Discord, GitHub, Steam, Telegram, Twitch, Spotify, and more.</li>
<li>Premium integrations for WooCommerce, BuddyPress, Ultimate Member, and Easy Digital Downloads.</li>
<li>Statistics dashboard to monitor social login performance.</li>
<li>Premium updates and priority support.</li>
</ul>
<p>Pro version and pricing: <a href="https://titan.r0bo.dev/#pro" rel="nofollow ugc">https://titan.r0bo.dev/#pro</a><br />
Demo: <a href="https://titan.r0bo.dev/wp-login.php" rel="nofollow ugc">https://titan.r0bo.dev/wp-login.php</a></p>
<h3>External Services</h3>
<p>Titan Social Login connects to third-party OAuth providers to authenticate users. Requests are made only when an administrator enables a provider and a user clicks a login button.</p>
<p>Data sent during OAuth:<br />
– Authorization request: client_id, redirect_uri, response_type, scope, state<br />
– Token exchange: code, client_id, client_secret (if required), redirect_uri<br />
– Profile request: access_token</p>
<p>Data received from providers:<br />
– Provider user ID, name, email address, and profile picture (when available)</p>
<p>Services used:<br />
– Google OAuth API (accounts.google.com, oauth2.googleapis.com, www.googleapis.com). Terms: https://policies.google.com/terms Privacy: https://policies.google.com/privacy<br />
– Facebook Login (www.facebook.com, graph.facebook.com). Terms: https://www.facebook.com/legal/terms Privacy: https://www.facebook.com/privacy/policy<br />
– Amazon Login (www.amazon.com, api.amazon.com). Terms: https://www.amazon.com/gp/help/customer/display.html?nodeId=508088 Privacy: https://www.amazon.com/gp/help/customer/display.html?nodeId=468496<br />
– Microsoft identity platform (login.microsoftonline.com, graph.microsoft.com). Terms: https://www.microsoft.com/servicesagreement Privacy: https://privacy.microsoft.com/privacystatement<br />
– X (Twitter) OAuth 2.0 (twitter.com, api.twitter.com). Terms: https://twitter.com/en/tos Privacy: https://twitter.com/en/privacy</p>
<p>No external requests are made unless the provider is enabled and a user initiates login.</p>
<h3>License</h3>
<p>PHP code (and any JS that links to WordPress APIs) is licensed under the GNU General Public License v2.0 or later (GPL-2.0-or-later). See /license.txt.<br />
Brand icons in /assets/images/icons are trademarks of their respective owners and are included for identification purposes only. See /THIRD-PARTY-NOTICES.txt.<br />
Trademarks belong to their respective owners; this plugin is not affiliated with or endorsed by them.</p>


Titan Social Login

One-click social login and account linking for Amazon, Facebook, Google, X (Twitter), and Microsoft.

Marcus Downing

Dani Llewellyn

<p>Whenever a site is under development, or its content should remain private, you want to prevent to general public<br />
from reading it – whether deliberately or by accident.</p>
<p>A comman way to do this is with <a href="http://httpd.apache.org/docs/2.4/howto/auth.html" rel="nofollow ugc">HTTP authorisation</a>,<br />
but this has some problems:</p>
<ul>
<li>Each user of your site has two different sets of username and password, one for the authorisation and one for<br />
WordPress login. It’s not uncommon for some users to find this confusing.</li>
<li>To set up authorisation you need access to your web server’s configuration (at least using the <code>.htaccess</code> file),<br />
which may not be available depending on your hosting supplier.<br />
You also need to learn how to configure the authorisation correctly, and risk breaking the site if you get it wrong.</li>
<li>When the time comes to remove the authorisation, you need to edit the configuration again.</li>
<li>In certain circumstances, combining authorisation with WordPress login can get a visitor into a circular redirect<br />
loop, where the result of logging in is to redirect to the login page.</li>
</ul>
<p>Site PIN solves these problems by replacing authorisation with a simple PIN. This has the following advantages:</p>
<ul>
<li>Everybody knows what a PIN is, and it’s clearly not the same as a password.</li>
<li>Logging into WordPress bypasses the PIN, so you can’t lock yourself out</li>
<li>It’s just a WordPress plugin, so no server configuration is necessary.</li>
<li>You can change or remove the PIN from WordPress admin.</li>
</ul>


Site PIN

Prevent careless visitors by locking your site down with a PIN

Titan Social Login vs Site PIN