This plugin seamlessly extends CoCart enabling robust and secure authentication using JSON Web Tokens (JWT).
- Standard JWT Authentication: Implements the industry-standard RFC 7519 for secure claims representation.
- Simple Endpoints: Offers clear endpoints for generating and validating tokens.
- Configurable Secret Key: Define your unique secret key via
wp-config.phpfor secure token signing. - Multiple signing algorithms:
HS256,HS384,HS512,RS256,RS384,RS512,ES256,ES384,ES512,PS256,PS384,PS512 - Rate Limiting: Controlled specifically for refreshing and validating tokens. - Requires CoCart Plus
- Helpful Debugging: Detailed logs of authentication issues to help figure out exactly what happened and fix it faster.
- WP-CLI Commands: Useful commands to handle tokens - whether you need to check them, create new ones, or clean up old ones.
- Developer Hooks: Provides filters and hooks for customizing token behavior and more configurations to your requirements.
JSON Web Tokens are an open, industry standard method for representing claims securely between two parties.
For more information, read the core concept on what this plugin does and can do.
See documentation on how to get setup, filters and hooks with examples to help configure JWT Authentication to your needs.
Once ready to use, see the quick start guide. There is also an advanced configuration for using RSA Keys.
We aim to provide regular support for the CoCart plugin via our Discord community server. Please understand that we do prioritize support for our paying customers.
If you find an issue, please report the issue. If you believe you have found a security issue then read the security policy.
We have different channels at your disposal where you can find information about the CoCart project, discuss it and get involved:
- 📖 Documentation: this is the place to learn how to use CoCart API. Get started!
- 👪 Community: use our Discord chat room to share any doubts, feedback and meet great people. This is your place too to share how are you planning to use CoCart!
- 🐞 GitHub: we use GitHub for bugs and pull requests, doubts are solved with the community.
- 🐦 Social media: a more informal place to interact with CoCart users, reach out to us on X/Twitter.
Released under GNU General Public License v3.0.
Website cocartapi.com · GitHub @cocart-headless · X/Twitter @cocartapi · Facebook · Instagram
CoCart JWT Authentication is developed and maintained by Sébastien Dumont. Founder of CoCart Headless, LLC.
Website sebastiendumont.com · GitHub @seb86 · Twitter @sebd86