uukidev

YUI Preview Token solves the authentication problem in decoupled (headless) WordPress architectures. Application Passwords are a great built-in WordPress feature for this purpose, but they require managing long-lived secrets on the frontend side. This plugin instead issues per-post tokens that grant read access for a configurable period — no persistent secrets required.
The frontend (Astro, Next.js, Nuxt, etc.) receives a preview URL and can fetch the draft content directly via the REST API.
<h4>How it works</h4>
<ol>
<li>An authorized WordPress user generates a token from the Gutenberg sidebar, Quick Edit panel, or Classic Editor meta box.</li>
<li>The token is embedded in a preview URL pointing to your external frontend.</li>
<li>The frontend calls <code>/wp-json/yui-preview-token/v1/preview?token=…</code> to retrieve the draft content.</li>
<li>The token expires automatically; no manual cleanup needed.</li>
</ol>
<h4>Key Features</h4>
Token Management
<ul>
<li>Generate tokens with expiry presets: 1 hour, 24 hours, 30 days, custom date/time, or no expiry.</li>
<li>One token per post — issuing a new token invalidates the previous one.</li>
<li>Tokens are generated with <code>bin2hex(random_bytes(32))</code> (256-bit CSPRNG). The lookup key stored in <code>wp_options</code> is the SHA-256 hash of the raw token, not the token itself — so a database leak does not expose usable tokens directly.</li>
<li>Automatic cleanup of expired tokens via WP Cron (daily).</li>
</ul>
Editor Integration
<ul>
<li>Gutenberg: dedicated panel in the Document Settings sidebar.</li>
<li>Quick Edit: token controls directly in the post list.</li>
<li>Classic Editor: meta box in the editor sidebar.</li>
<li>Copy preview URL to clipboard with one click.</li>
<li>Update expiry without invalidating the current token.</li>
</ul>
Admin Settings
<ul>
<li>Set the external frontend URL (clicking “Open external preview” navigates directly to this URL).</li>
<li>Configure allowed CORS origins (multiple, with wildcard support — <code>https://*.example.com</code>).</li>
<li>Choose the minimum WordPress role required to issue tokens (Subscriber → Administrator).</li>
<li>Tune rate limiting (requests per time window).</li>
<li>Optionally permit no-expiry tokens.</li>
</ul>
Issued Tokens List
<ul>
<li>View all active and expired tokens with post title, status, expiry, and issuer.</li>
<li>Revoke individual tokens or bulk-delete expired ones — all from the Settings screen.</li>
</ul>
Security
<ul>
<li>HTTPS required for the preview endpoint (overridable for local development).</li>
<li>Per-IP rate limiting with configurable thresholds (default: 30 req / 60 s).</li>
<li>Role-based access control for token issuance.</li>
<li>CORS headers only sent for explicitly configured origins; WP core’s permissive echo-back is suppressed.</li>
<li><code>Referrer-Policy: no-referrer</code> prevents token leakage via referer headers.</li>
<li>Tokens are only valid for <code>draft</code>, <code>pending</code>, and <code>future</code> post statuses.</li>
<li>Admin-only settings page with defence-in-depth capability checks.</li>
<li>CSRF protection on all admin actions (nonce verification).</li>
</ul>
Audit Logging
<ul>
<li>Logs token issuance and usage events (post ID, user ID, client IP).</li>
<li>Logs security events: invalid token attempts, rate-limit violations, capability denials.</li>
<li>Output goes to <code>WP_DEBUG_LOG</code> by default; point to a dedicated file with <code>PVT_LOG_FILE</code>.</li>
</ul>
Internationalisation
<ul>
<li>Ships with Japanese (ja) and Simplified Chinese (zh_CN) translations.</li>
<li>All admin UI strings are translation-ready.</li>
</ul>
<h4>Developer Hooks</h4>
Filter
<ul>
<li><code>yuipt_preview_response_data</code> — Modify the REST API response data before it is sent.</li>
</ul>
Actions
<ul>
<li><code>yuipt_token_issued( int $post_id, int $user_id )</code> — Fires after a token is issued.</li>
<li><code>yuipt_token_used( int $post_id, int $user_id )</code> — Fires when a token is used successfully.</li>
<li><code>yuipt_invalid_token( string $ip )</code> — Fires on an invalid/expired token attempt.</li>
<li><code>yuipt_rate_limit_exceeded( string $ip, string $endpoint )</code> — Fires when rate limit is hit.</li>
<li><code>yuipt_capability_denied( int $user_id, int $post_id )</code> — Fires on a capability denial.</li>
</ul>
Constants (wp-config.php)
<ul>
<li><code>PVT_SKIP_HTTPS_CHECK</code> — Set to <code>true</code> to disable the HTTPS requirement (development only).</li>
<li><code>PVT_LOG_FILE</code> — Absolute path to a dedicated audit log file.</li>
</ul>
<h4>Use Case</h4>
This plugin is designed for headless WordPress setups where a decoupled frontend (e.g. Astro, Next.js, Nuxt, SvelteKit) renders content from the WordPress REST API. It gives content editors a simple, secure way to share draft previews with stakeholders without granting them WordPress accounts or exposing long-lived API credentials.

YUI Preview Token

Issue time-limited preview tokens for headless WordPress setups. Open drafts directly in your frontend URL without long-lived credentials.

BeycanPress LLC

What is TokenICO?
TokenICO, which is called Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop, is a plugin that offers you everything you need for your cryptocurrency projects. With TokenICO, you can create presales for your tokens on EVM networks (ERC20, BEP20), Solana SPL Tokens or other supported networks. To understand TokenICO in more detail, here are some of the features it has and will have.
How is TokenICO free?
So basically, yes, you can download TokenICO for free and install it on your WordPress site. However, while there will be free features, the features that are currently available are charged on a commission-based and per-transaction basis. For example, it costs 0.1 Native Coin (Example: ETH, BNB, AVAX, POL) to create a presale for EVM networks. This can be 0.1 ETH or 0.1 BNB, depending on the network. For the Solana network, the pre-sale creation fee is 0.5 SOL. However, the commission rate per sale on all networks is 3%. Since the person who will use this plugin will use it to make money, we don’t think you will complain about these fees. Because we need funding to continue developing this plugin. If you complain about these fees, you can use expensive alternatives like PinkSale.
Supported Networks:
<ul>
<li>All EVM based networks (Example: Ethereum, Binance Smart Chain, Avalanche, Polygon)</li>
<li>TON (The Open Network)</li>
<li>Solana</li>
<li>Tron</li>
</ul>
Feature list
<ul>
<li>Presale: Available</li>
<li>Airdrop: Available</li>
<li>Token creator: Coming soon</li>
</ul>
TokenICO Fee Information:
<ul>
<li>EVM:
<ul>
<li>Create presale: 0.1 Native Coin (Example: ETH, BNB, AVAX, POL)</li>
<li>Sale process: %3 commission per sale</li>
</ul>
</li>
<li>Solana:
<ul>
<li>Create presale: 0.5 SOL</li>
<li>Sale process: 3% commission per sale</li>
</ul>
</li>
<li>Tron:
<ul>
<li>Create presale: 500 TRX</li>
<li>Sale process: 3% commission per sale</li>
</ul>
</li>
<li>TON:
<ul>
<li>Create presale: 20 TON</li>
<li>Sale process: 3% commission per sale</li>
</ul>
</li>
</ul>
PinkSale Fee Information for Compare:
<ul>
<li>EVM:
<ul>
<li>Create presale: 0.2 ETH, 1 BNB (we don’t know for other chains)</li>
<li>Sale process: 5% commission per sale</li>
</ul>
</li>
<li>Solana:
<ul>
<li>Create presale: 3 SOL</li>
<li>Sale process: %5 commission per sale</li>
</ul>
</li>
<li>TON:
<ul>
<li>Create presale: 60 TON</li>
<li>Sale process: %5 commission per sale</li>
</ul>
</li>
<li>Tron: Not exists (we don’t know another service for Tron)</li>
</ul>
In this case, any kind of TokenICO seems more profitable and logical, right?
BUY TokenICO Premium
If you want to use TokenICO without any commission, you can buy the premium version.
In the premium version, users can create presales and airdrops, and there are no brand labels like “Powered by”.
Click and buy: <a href="https://beycanpress.com/checkout/?add-to-cart=14320&utm_source=wporg_page&utm_medium=buy_premium_tokenico" rel="nofollow ugc">TokenICO</a>
TokenICO Contract Deployed Networks
Since a significant amount of money has to be paid during the contract deployment, we have done contract deployments in some highly used networks. However, if you want to pre-sell on a network other than the ones below, this is not a problem. Because the contract will be automatically deployed and saved during pre-sale publishing. So after deploying once, you can publish presale again on the same network.
Contract deployed on these networks:
<ul>
<li>Ethereum (ERC20) – (Mainnet & Testnet)</li>
<li>BNB Smart Chain (BEP20) – (Mainnet & Testnet)</li>
<li>Avalanche – (Mainnet & Testnet)</li>
<li>Polygon – (Mainnet & Testnet)</li>
<li>Solana – (Mainnet & Testnet)</li>
<li>TON – (Mainnet & Testnet)</li>
<li>Tron – Only Testnet</li>
</ul>
Highlights:
<ul>
<li>Set presale start and end dates</li>
<li>Set minimum and maximum purchase limits</li>
<li>Frontend presale area with progress bar and timed</li>
<li>Easily add a presale area wherever you want with a shortcode</li>
<li>Supports all EVM based networks for example (Ethereum (ERC20), Binance (BNB) Smart Chain (BEP20), Avalanche, Polygon)</li>
<li>Instant delivery at the time of purchase and token request feature when presale ends (So users may or may not have the token before the presale ends)</li>
<li>Cheapest Solana SPL Token Presale, Launchpad, ICO & IDO, Airdrop, Token Program, Token Program 2022, Taxable SPL Token</li>
</ul>
See <a href="https://tokenico.beycanpress.net" rel="nofollow ugc">Demo</a> 
See <a href="https://beycanpress.gitbook.io/tokenico-docs/" rel="nofollow ugc">Documentation</a>
<h4>Translations</h4>
You can easily translate with Loco translate.

Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop by TokenICO

Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop, ERC20, BEP20, TRC20, SPL Token, Ethereum, Solana, BNB Smart Chain, Avalanche, Polygon

YUI Preview Token vs Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop by TokenICO