manifest / users / lotus-create-user

Lotus Create User

A plugin to create a new user via a secure REST API endpoint.

by Erfan Karami · github.com/erfankaramidev/lotus-create-user

★ 0stars

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/erfankaramidev/lotus-create-user/archive/refs/heads/main.zip

No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

Readme github.com/erfankaramidev/lotus-create-user ↗

Lotus Create User is a WordPress plugin that provides a secure REST API endpoint for creating new users remotely.

It was originally developed as part of a private project and later open-sourced. While it provides a secure and simple REST API for creating users, it may not be suitable for all scenarios.

Features

Provides a secure REST API endpoint at /wp-json/lotus/v1/create-user
Uses a Bearer token for authentication
Auto-generates and manages the token in the WordPress options table
Token can be viewed and reset in the WordPress admin settings
WooCommerce compatible (creates WordPress users with billing information)
Fully namespaced and PSR-4 autoloaded for clean code structure.

Installation

Since this plugin is currently an open-source raw plugin, you'll need to install it manually.

1. Clone the repository

git clone https://github.com/erfankaramidev/lotus-create-user.git

2. Install Composer dependencies

cd lotus-create-user
composer install

3. Publish as a production package

zip -r lotus-create-user.zip .

Then upload the zip file to your WordPress site.

Configuration

Once activated:

Go to Settings → Lotus User Create API in the WordPress admin.
Copy your API Token — it will look like a long random string.
If needed, click Reset Token to generate a new one.

Usage

Endpoint

POST /wp-json/lotus/v1/create-user

Headers

Authorization: Bearer <token>
Content-Type: application/json

Body

{
  "username": "newuser",
  "first_name": "John",
  "last_name": "Doe",
  "phone": "09123456789"
}

Response (201)

{
  "user_id": 1,
  "message": "User created successfully.",
  "created": true
}

Error (401 - Invalid Token)

{
  "code": "rest_forbidden",
  "message": "Missing or invalid authentication token.",
  "data": {
    "status": 401
  }
}

How it works

On activation, the plugin generates a secure token and saves it to the database (lotus_user_create_api_token).
The token is used to authenticate incoming REST API requests.
When a request passes authentication, a new WordPress user is created with the customer role.
Admins can view or reset the token from the plugin settings page.

Uninstallation

When the plugin is uninstalled, it automatically removes:

The stored API token (lotus_user_create_api_token) from the database.

Technical Details

Version: 1.1.0
PHP Requirement: 7.4

License

This plugin is distributed under the GPL-2.0-or-later license.