Install
Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.
Install straight from GitHub with WP-CLI:
wp plugin install https://github.com/extra-chill/extrachill-users/releases/download/v0.52.3/extrachill-users.zipNo built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Network-wide user management for the Extra Chill platform.
What It Does
Extra Chill Users handles everything about user identity across the network:
- Authentication — Login, registration, Google OAuth, token-based API auth
- Profiles — Avatars, badges, ranks, artist relationships
- Onboarding — Guided first-time user experience
- Membership — Lifetime membership validation (ad-free benefit)
- Notifications — Network-wide idempotent delivery receipts and digest preferences
How It Works
┌─────────────┐ ┌─────────────┐ ┌─────────────┐
│ SIGNUP │ ──▶ │ ONBOARD │ ──▶ │ ACCESS │
│ Login/OAuth │ │ Profile, │ │ All network │
│ Turnstile │ │ Avatar │ │ sites │
└─────────────┘ └─────────────┘ └─────────────┘Users sign up once and get access to all Extra Chill network sites with a unified identity.
Features
| Feature | Description |
|---|---|
| Google OAuth | One-click sign-in with RS256 token verification |
| Token Auth | Bearer tokens for REST API access (mobile app, headless) |
| User Onboarding | Guided first-time setup via Gutenberg block |
| Avatar System | Upload and display with bbPress integration |
| Badge & Ranks | Tier system based on community participation |
| Membership | Lifetime membership with ad-free benefit |
| Notifications | Explicit producer/key contracts with per-recipient delivery receipts |
Auth Flow
- Registration — Email/password or Google OAuth with Turnstile captcha
- Login — Returns access + refresh tokens for API clients
- Refresh — Token refresh for long-lived sessions
- Cross-Domain — Network-wide authentication via multisite
REST API
All auth endpoints live in extrachill-api under extrachill/v1:
| Endpoint | Purpose |
|---|---|
POST /auth/login |
User login, returns tokens |
POST /auth/register |
User registration |
POST /auth/google |
Google OAuth authentication |
POST /auth/refresh |
Refresh access token |
POST /auth/logout |
Logout and token revocation |
GET /auth/me |
Current authenticated user |
Requirements
- WordPress Multisite
- PHP 7.4+
- WordPress 5.0+
- Requires:
extrachill-network,extrachill-api
Development
See AGENTS.md for technical implementation details.
# Build blocks
npm run build
# Package for distribution
homeboy review build extrachill-usersDocumentation
- AGENTS.md — Technical reference for contributors
- docs/CHANGELOG.md — Version history
- docs/gardner-persona.md — Canonical nontechnical power-user test contract
- docs/notifications.md — Notification producer and receipt contracts
Releases
Newest 25 of 60 recorded releases. Each count is every asset in that release; expand a row for the breakdown.
Active-site estimate ≈110 comes from the v0.49.3 cohort. Method.