外掛說明
YukDigitalz Login is an enterprise-grade social login extension designed specifically to streamline the customer checkout flow. It is highly optimized for stores selling digital products, where checkout speed and conversion rates are critical.
By allowing buyers to authenticate instantly with their Google accounts, the plugin automatically populates billing email, first name, and last name at the checkout page, eliminating manual input.
This plugin connects to Google OAuth Services to authenticate users. By using this plugin, you agree to Google’s terms and privacy policies.
Privacy Policy: https://google.com
Terms of Service: https://google.com
Key Enterprise Security Features
- Anti-CSRF Session Footprint: Token state validation combined with browser user-agent integrity checks.
- Database Leak Protection: The Google Client Secret is encrypted in the database using modern AES-256-CTR encryption utilizing secret salts defined in wp-config.php.
- Anti-Hijacking Account Verification: Require confirmation via verification email before linking a Google login with an existing manual account.
- Corporate Domain Restriction: Easily restrict registration and login to specific domains (e.g., only allow logins from @yourcompany.com).
- Audit Trail Logging: Logs all authentication events, verification attempts, and CSRF alerts directly to WooCommerce status logs.
- Google Branding Compliant: Button visual designs comply with official Google Sign-In design guidelines.
安裝方式
- Upload the yukdigitalz-login folder to the /wp-content/plugins/ directory.
- Activate the plugin through the ‘Plugins’ menu in WordPress.
- Go to WooCommerce > Google Login Settings in your WordPress dashboard.
- Input your Google Client ID and Google Client Secret (refer to the built-in guide on the settings page to obtain keys).
- Tick the “Enable Google Login & Registration” option and Save Changes.
常見問題集
-
Where can I get Google API credentials?
-
Please refer to the Google API Console Guide card inside the plugin settings page. You will need to create a project in Google Cloud Console, obtain Client Credentials, and register the displayed Redirect URI callback.
-
Can I use this for corporate employees only?
-
Yes, you can input allowed corporate domains (e.g., company.com) in the “Domain Restriction” settings field in the admin panel to restrict login access.
使用者評論
這個外掛目前沒有任何使用者評論。
參與者及開發者
變更記錄
1.0.0
- Initial release. Fully OOP modular architecture.
- Enterprise Database Cryptographic Encryption.
- Anti-hijacking secure linking verification email flow.
- Express checkout promotional banner on checkout page.