Description

4WP Account is a user account hub for WordPress: social sign-in (OAuth 2.0), a front-end account page, header account menu block, and optional WooCommerce login buttons.

Active in this release: Google and GitHub login when enabled in 4WP Account Auth. Facebook and TikTok appear in settings as coming soon — they are not available for login yet.

A plugin by 4wp.dev. 4WP is our project brand; the letters « WP » appear only as part of that brand name, not as a reference to WordPress. This plugin is not affiliated with, endorsed by, or sponsored by WordPress.

Source code: github.com/4wpdev/4wp-account

Key features

Google and GitHub OAuth sign-in (enable per provider in wp-admin)
Account page — [forwp_account] shortcode or forwp/account block (sign-in when logged out; cabinet when logged in)
Account menu — forwp/account-menu block or [forwp_account_menu] for header dropdown
Sign-in buttons — [forwp_account_signin_buttons] or forwp/auth-buttons block
REST API — /wp-json/forwp-account/v1/auth/{provider} and OAuth callbacks
WooCommerce — optional social buttons on My Account login/register forms
Subscriber options — hide admin bar, redirect subscribers away from wp-admin

Privacy

OAuth tokens are exchanged server-side. Profile email and name from the provider are stored in WordPress user records. No data is sent to 4wp.dev.

Development

Run tests: composer install && composer run lint && composer run test

External services

This plugin connects to third-party OAuth providers when a visitor starts social login and when an administrator saves API credentials.

Google

When: User clicks Google sign-in; server exchanges the authorization code and reads profile email.
Terms: Google API Terms of Service
Privacy: Google Privacy Policy

GitHub

When: User clicks GitHub sign-in; server exchanges the code and reads the primary verified email.
Terms: GitHub Terms of Service
Privacy: GitHub Privacy Statement

Meta (Facebook) — planned

When: Not enabled in this release. Listed in admin as coming soon.
Terms: Meta Platform Terms
Privacy: Meta Privacy Policy

TikTok — planned

When: Not enabled in this release. Listed in admin as coming soon.
Terms: TikTok Terms of Service
Privacy: TikTok Privacy Policy

Blocs

Cette extension fournit 4 blocs.

4WP Account Menu User icon with a classic cabinet dropdown — account sections, custom links, and log out.
4WP Account Link Header link with user icon — guest sign-in or account page when logged in.
4WP Sign-in Buttons Social sign-in buttons (Google, GitHub, …).
4WP Account Sign-in for guests or account cabinet with left menu for logged-in users.

Installation

Upload the plugin to /wp-content/plugins/4wp-account/ or install from the Plugins screen.
Activate 4WP Account.
Open 4WP Account Auth — enable Google and/or GitHub and paste OAuth credentials.
Copy each Redirect URI from settings into Google Cloud or GitHub OAuth app settings.
Create a page with [forwp_account] or add the Account block.

FAQ

Which providers work in 1.0.4?: Google and GitHub when enabled and configured. Facebook and TikTok are shown as coming soon in admin and cannot be used for login.
Where is the OAuth callback URL?: In 4WP Account Auth — use the Redirect URI shown for each provider (built with rest_url(), compatible with custom REST prefixes).
Does the plugin create WordPress users?: Yes. On first social login, a subscriber account is created from the provider email (required). Returning users are matched by email and logged in with WordPress auth cookies after OAuth state verification.

Avis

Il n’y a aucun avis pour cette extension.

Contributeurs/contributrices & développeurs/développeuses

« 4WP Account » est un logiciel libre. Les personnes suivantes ont contribué à cette extension.

4wpdev

Traduisez « 4WP Account » dans votre langue.

Le développement vous intéresse ?

Parcourir le code, consulter le SVN dépôt, ou s’inscrire au journal de développement par RSS.

Journal des modifications

1.0.4

Remove unused register_setting() calls (automated Plugin Check).
Plugin Check warnings: input sanitization, migration SQL %i, distignore moved to docs.

1.0.3

Review fixes: required OAuth state validation, rest_url() for callback URLs, readme aligned with active providers.
Account blocks and GitHub provider (from ongoing development).

1.0.2

WordPress.org packaging: readme, GPL license, text domain 4wp-account, quality toolchain.
Provider enable toggle respected before login.

1.0.1

Gmail OAuth, shortcodes, WooCommerce integration.