{"id":227842,"date":"2025-04-12T15:48:32","date_gmt":"2025-04-12T15:48:32","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/sign-in-with-bitbadges\/"},"modified":"2025-04-12T15:53:21","modified_gmt":"2025-04-12T15:53:21","slug":"sign-in-with-bitbadges","status":"publish","type":"plugin","link":"https:\/\/frp.wordpress.org\/plugins\/sign-in-with-bitbadges\/","author":23254451,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_crdt_document":"","version":"1.0.0","stable_tag":"1.0.0","tested":"6.7.5","requires":"5.0","requires_php":"7.0","requires_plugins":null,"header_name":"Sign In With BitBadges","header_author":"BitBadges (trevormil)","header_description":"Allows users to sign in to WordPress using their BitBadges account and gated claims. This plugin ONLY handles authentication - it does not restrict access to your site. For restricting access, we recommend using this plugin in conjunction with:","assets_banners_color":"105c88","last_updated":"2025-04-12 15:53:21","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/bitbadges.io","header_author_uri":"https:\/\/github.com\/trevormil","rating":0,"author_block_rating":0,"active_installs":0,"downloads":270,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","changelog"],"tags":{"1.0.0":{"tag":"1.0.0","author":"trevormil","date":"2025-04-12 15:53:21"}},"upgrade_notice":[],"ratings":[],"assets_icons":{"icon-256x256.png":{"filename":"icon-256x256.png","revision":3271536,"resolution":"256x256","location":"assets","locale":""}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3271536,"resolution":"1544x500","location":"assets","locale":""}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.0"],"block_files":[],"assets_screenshots":[],"screenshots":[],"jetpack_post_was_ever_published":false},"plugin_section":[],"plugin_tags":[710,240722,198085,240723,156271],"plugin_category":[38],"plugin_contributors":[240724],"plugin_business_model":[],"class_list":["post-227842","plugin","type-plugin","status-publish","hentry","plugin_tags-authentication","plugin_tags-bitbadges","plugin_tags-nft","plugin_tags-siwbb","plugin_tags-web3","plugin_category-authentication","plugin_contributors-trevormil","plugin_committers-trevormil"],"banners":[],"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/sign-in-with-bitbadges\/assets\/icon-256x256.png?rev=3271536","icon_2x":"https:\/\/ps.w.org\/sign-in-with-bitbadges\/assets\/icon-256x256.png?rev=3271536","generated":false},"screenshots":[],"raw_content":"<!--section=description-->\n<p>This plugin allows users to gate their site with BitBadges - claims, payments, NFT badges, and more!<\/p>\n\n<p>Important Note: This plugin ONLY handles authentication with BitBadges - it does not restrict access to your site by itself. For restricting access, we recommend using this plugin in conjunction with:<\/p>\n\n<ul>\n<li><a href=\"https:\/\/wordpress.org\/plugins\/wp-force-login\/\">Force Login<\/a> - Forces users to log in to view your site<\/li>\n<li><a href=\"https:\/\/wordpress.org\/plugins\/restrict-content\/\">Restrict Content<\/a> - Restrict content to logged-in users<\/li>\n<li><a href=\"https:\/\/wordpress.org\/plugins\/members\/\">Members<\/a> - Advanced user roles and permissions<\/li>\n<li>Or other plugins that restrict access to your site<\/li>\n<\/ul>\n\n<h3>Translation<\/h3>\n\n<p>The Sign In With BitBadges plugin is currently available in English only. The plugin is translation-ready and uses WordPress's internationalization system, making it easy to add support for additional languages in the future.<\/p>\n\n<h3>Configuration<\/h3>\n\n<ol>\n<li>Create a new application (OAuth App) in the <a href=\"https:\/\/bitbadges.io\/developer\">BitBadges Developer Portal<\/a><\/li>\n<li>Set your redirect URI to: <code>https:\/\/your-wordpress-site.com\/wp-login.php?action=bitbadges-callback<\/code><\/li>\n<li>Copy your Client ID and Client Secret<\/li>\n<li>Go to your WordPress admin panel &gt; Settings &gt; BitBadges SIWBB<\/li>\n<li>Enter your Client ID and Client Secret<\/li>\n<li>(Optional) Configure a claim ID to gate access and other additional settings<\/li>\n<li>Save the settings<\/li>\n<\/ol>\n\n<h3>Features<\/h3>\n\n<ul>\n<li>Adds a \"Sign in with BitBadges\" button to the WordPress login form<\/li>\n<li>Creates WordPress users automatically when they first sign in with BitBadges<\/li>\n<li>Secure OAuth 2.0 implementation with state verification<\/li>\n<li>Simple admin interface for configuration<\/li>\n<li>Optional exclusive BitBadges authentication mode (disable normal WordPress login)<\/li>\n<li>Claim-gated access support<\/li>\n<li>Emergency admin access URL for exclusive mode<\/li>\n<li>Customizable claim visibility on authorization page<\/li>\n<\/ul>\n\n<h3>Security<\/h3>\n\n<ul>\n<li>CSRF protection using state parameter<\/li>\n<li>Secure storage of client credentials<\/li>\n<li>WordPress nonce verification<\/li>\n<li>Input sanitization<\/li>\n<li>Proper error handling<\/li>\n<li>Secure admin access fallback<\/li>\n<li>Claim verification<\/li>\n<\/ul>\n\n<h3>User Experience<\/h3>\n\n<ul>\n<li>Clean, centered login button design<\/li>\n<li>Shortened wallet addresses for better readability<\/li>\n<li>Clear separation between traditional and BitBadges login<\/li>\n<li>Visible claim requirements before authentication<\/li>\n<li>Seamless first-time user setup<\/li>\n<\/ul>\n\n<h3>Requirements<\/h3>\n\n<ul>\n<li>WordPress 5.0 or higher<\/li>\n<li>PHP 7.0 or higher<\/li>\n<li>HTTPS enabled on your site (required for secure OAuth)<\/li>\n<\/ul>\n\n<h3>Support<\/h3>\n\n<p>For support or feature requests, please visit the <a href=\"https:\/\/bitbadges.io\">BitBadges website<\/a> or create an issue in the GitHub repository.<\/p>\n\n<h3>License<\/h3>\n\n<p>This plugin is licensed under the GPL v2 or later.<br \/>\nLicense URI: https:\/\/www.gnu.org\/licenses\/gpl-2.0.html<\/p>\n\n<h3>External Services<\/h3>\n\n<p>This plugin connects to BitBadges (https:\/\/bitbadges.io) for authentication and claim verification. BitBadges is a blockchain-based authentication and digital credentials platform.<\/p>\n\n<h4>Service Endpoints Used<\/h4>\n\n<ul>\n<li>Authentication: https:\/\/bitbadges.io\/siwbb\/authorize<\/li>\n<li>Token Management: https:\/\/api.bitbadges.io\/api\/v0\/siwbb\/token<\/li>\n<li>Claim Verification: https:\/\/api.bitbadges.io\/api\/v0\/claims\/success<\/li>\n<\/ul>\n\n<h4>Data Transmission<\/h4>\n\n<p>The plugin transmits the following data to BitBadges servers:<\/p>\n\n<ol>\n<li><p>During Authentication:<\/p>\n\n<ul>\n<li>Client ID and Secret (from your BitBadges OAuth app)<\/li>\n<li>Redirect URI (your WordPress login callback URL)<\/li>\n<li>State parameter (for security)<\/li>\n<\/ul><\/li>\n<li><p>During Claim Verification:<\/p>\n\n<ul>\n<li>User's BitBadges address<\/li>\n<li>Claim ID (if configured)<\/li>\n<li>API key (for authentication)<\/li>\n<\/ul><\/li>\n<li><p>Token Management:<\/p>\n\n<ul>\n<li>Access tokens are stored in WordPress user meta<\/li>\n<li>Tokens are used to verify user authentication status<\/li>\n<\/ul><\/li>\n<\/ol>\n\n<p>No personal user data beyond the BitBadges address is transmitted to our servers. All communication is done over HTTPS.<\/p>\n\n<h4>Service Documentation<\/h4>\n\n<ul>\n<li>Terms of Service: https:\/\/bitbadges.io\/policies<\/li>\n<li>Privacy Policy: https:\/\/bitbadges.io\/policies<\/li>\n<li>Developer Documentation: https:\/\/docs.bitbadges.io<\/li>\n<\/ul>\n\n<p>BitBadges is required for this plugin to function. Without access to BitBadges services, users will not be able to authenticate or verify claims.<\/p>\n\n<!--section=installation-->\n<ol>\n<li>Download the plugin files and upload them to your <code>\/wp-content\/plugins\/<\/code> directory<\/li>\n<li>Activate the plugin through the 'Plugins' menu in WordPress<\/li>\n<li>Go to Settings &gt; BitBadges SIWBB to configure the plugin<\/li>\n<\/ol>\n\n<!--section=changelog-->\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>Initial release with basic OAuth functionality<\/li>\n<li>Added exclusive authentication mode<\/li>\n<li>Added claim-gating support<\/li>\n<li>Added emergency admin access<\/li>\n<li>Improved user display names<\/li>\n<li>Enhanced UI\/UX for login button<\/li>\n<li>Added claim visibility options<\/li>\n<\/ul>","raw_excerpt":"This plugin allows users to gate their WordPress site with BitBadges \u2013 claims, payments, NFT badges, and more!","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/frp.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/227842","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/frp.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/frp.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/frp.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=227842"}],"author":[{"embeddable":true,"href":"https:\/\/frp.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/trevormil"}],"wp:attachment":[{"href":"https:\/\/frp.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=227842"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/frp.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=227842"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/frp.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=227842"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/frp.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=227842"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/frp.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=227842"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/frp.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=227842"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}