manifest / integrations / wp-graphql-jwt-authentication
WPGraphQL JWT Authentication #6 in Integrations & APIs
JWT Authentication for WPGraphQL
by WPGraphQL, Jason Bahl · github.com/wp-graphql/wp-graphql-jwt-authentication · website
★ 363stars
1.2krelease downloads
131kcomposer installs
79forks
Install
The author publishes release zips, so WP-CLI can install straight from GitHub:
wp plugin install https://github.com/wp-graphql/wp-graphql-jwt-authentication/releases/download/v0.7.2/wp-graphql-jwt-authentication.zipAlso on Packagist as wp-graphql/wp-graphql-jwt-authentication:
composer require wp-graphql/wp-graphql-jwt-authenticationFrom the readme
WPGraphQL JWT Authentication
This plugin extends the WPGraphQL plugin to provide authentication using JWT (JSON Web Tokens)
JSON Web Tokens are an open, industry standard RFC 7519 method for representing claims securely between two parties.
This plugin was initially based off the wp-api-jwt-auth plugin by Enrique Chavez (https://github.com/Tmeister), but modified (almost completely) for use with the WPGraphQL plugin.
Install, Activate & Setup
You can install and activate the plugin like any WordPress plugin. Download the .zip from Github and add to your plugins directory, then activate.
JWT uses a Secret defined on the server to validate the signing of tokens.
It's recommended that you use something like the WordPress Salt generator (https://api.wordpress.org/secret-key/1.1/salt/) to generate a Secret.
You can define a Secret like so:
Or you can use the filter graphqljwtauthsecretkey to set a Secret like so:
This secret is used in the encoding and decoding of the JWT token. If the Secret were ever changed on the server, ALL tokens that were generated with the previous Secret would become invalid. So, if you wanted to invalidate all user tokens, you can change the Secret o
Read the full README on GitHub →
Releases
| Tag | Published | Asset | Downloads |
|---|---|---|---|
| v0.7.2 | Mar 13, 2026 | wp-graphql-jwt-authentication.zip | 1,147 |
| v0.7.1 | Mar 13, 2026 | wp-graphql-jwt-authentication.zip | 22 |
| v0.7.0 | Mar 31, 2023 | — | — |
| v0.6.0 | Oct 25, 2022 | — | — |
| v0.5.2 | May 16, 2022 | — | — |
| v0.5.1 | Apr 22, 2022 | — | — |
| v0.5.0 | Apr 15, 2022 | — | — |
| v0.4.1 | May 4, 2020 | — | — |
| v0.4.0 | Feb 20, 2020 | — | — |
| v0.3.5 | Jan 29, 2020 | — | — |
| v0.3.4 | Jan 21, 2020 | — | — |
| v0.3.3 | Oct 18, 2019 | — | — |
| V0.3.2 | May 18, 2019 | — | — |
| v0.3.1 | Mar 30, 2018 | — | — |
| v0.2.1 | Nov 4, 2017 | — | — |