WP Manifestindependent plugin directory
manifest / security / wordpress-oauth

[LW] OAuth SSO GitLab

Simple OAuth Single Sign On for Wordpress

by Jay Williams · gitlab.com/littlewonders/plugins/wordpress-oauth

0stars
21composer installs
0forks

Install

No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:

wp plugin install https://gitlab.com/littlewonders/plugins/wordpress-oauth/-/archive/main/wordpress-oauth-main.zip

Also on Packagist as littlewonders/wordpress-oauth:

composer require littlewonders/wordpress-oauth

From the readme

Wordpress OAuth A bare-minimum Wordpress plugin to allow single-sign-on via OAuth. Tested with Amazon Cognito but should work with any OAuth compliant server. Originally forked from the wordpress plugin (oauth-client-for-user-authentication)[https://wordpress.org/plugins/oauth-client-for-user-authentication/], as when testing that plugin I found many security vulnerabilities so I decided to use it as a base and strip it back as much as possible to make the code easy to audit and understand. The plugin scope is designed to be deliberately very simple. It supports: - Adding a button to the login form to begin SSO - Authenticating with a single Identity Provider - Automatically redirecting /wp-login.php to begin the OAuth process with the IDP - Finding a user by any attribute returned by your IDP, against any wordpressusers column - Redirecting a user to your IDP's logout endpoint after logging out of Wordpress It does not, and will not, support: - Editing plugin settings from the wp-admin interface - Registering/making new users for IDP users - Syncing from / authenticating to LDAP - Multiple Identity Providers - OpenID Connect It does not currently support, but suppo

Read the full README on GitLab →