WP Manifestindependent plugin directory
manifest / security / bedrock-auth

WP Bedrock Auth WP Registry grade A. No security issues foundWP RegistryNo security issues foundOpen the reportA

Environment-specific basic auth for the Bedrock WordPress framework

★ 3stars
821composer installs
1.1.0latest · 2 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/aprivette/bedrock-auth/archive/refs/heads/master.zip

On Packagist as aprivette/bedrock-auth:

composer require aprivette/bedrock-auth
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

A WordPress plugin designed to be an addon to the Bedrock WordPress framework.

It adds environment-specific basic authentication to WordPress sites. There are a few use cases for this. For example, if you were to set up a staging site and only wanted to protect only this setup while not affecting version control, then this package could be of use. Alternatively, you can exclusively protect wp-login.php to protect against brute force attacks.

Setup

  1. Add the package to your bedrock installation with composer require aprivette/bedrock-auth.
  2. Activate the plugin in WordPress.
  3. Add the BASIC_AUTH_USER and BASIC_AUTH_PASS variables to your .env file.
  4. Choose an authentication level by setting the BASIC_AUTH_LEVEL variable to either site or login. Choosing site will require auth for the entire site while login will exclusively protect wp-login.php.
  5. Navigate to the site and it should require you to login.

Releases

4 releases.

Tag
Published
1.1.0 latest
Feb 18, 2024 2 years ago
Jul 13, 2018 8 years ago
Jul 8, 2018 8 years ago
Jul 7, 2018 8 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

A grade

Security

WP Bedrock Auth 1.1.0 · audited by WP Registry

No security issues found.

Audited release
1.1.0
Findings
none
Worst severity
—
Content hash
4979bb820372098a64548e16…

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.