=== Magic Login - Passwordless Authentication for WordPress === Contributors: handyplugins,m_uysl Tags: login, passwordless, passwordless-login, magic-login, magic-link Requires at least: 5.0 Tested up to: 6.3 Requires PHP: 7.2 Stable tag: 1.9 License: GPLv2 or later License URI: http://www.gnu.org/licenses/gpl-2.0.html Donate link: https://handyplugins.co/donate/ Passwordless login for WordPress. == Description == Easy, secure, and passwordless authentication for WordPress. Streamline the login process by sending links to your users. No more passwords to remember, no more password resets, and no more password strength requirements. **[Learn more about Magic Login](https://handyplugins.co/magic-login-pro/)** = How does it work? 🪄 = Magic login uses a technique called "magic links". The magic link is a unique link sent directly to your email inbox which allows you to authenticate. __Auto Login__: Magic Login also supports auto-login links for outgoing emails. It's useful when pending action from a user, such as reply a comment, complete the checkout, etc.. = PRO Features 🎩 = Here are the premium features that come with Magic Login Pro: - __CLI Command:__ Use WP-CLI to create login links. - __Brute Force Protection:__ Limit rate of login attempts and block IP temporarily. - __Login request throttling:__ Limit login link generation for a certain time of period. - __IP Check:__ Enhance the security by restricting users to log in from the same IP address that requested the link. - __Domain Restriction:__ Allow only certain domains to use the magic link. - __Login Email Customization:__ Customize login message by using email placeholders. - __Login Redirect:__ Redirect users to a specific page right after login. You can also redirect different pages based on the user role. By upgrading to Magic Login Pro you also get access to one-on-one help from our knowledgeable support team and our extensive documentation site. **[Learn more about Magic Login Pro](https://handyplugins.co/magic-login-pro/)** = Documentation = Our documentation can be found on [https://handyplugins.co/magic-login-pro/docs/](https://handyplugins.co/magic-login-pro/docs/) = Contributing & Bug Report = Bug reports and pull requests are welcome on [Github](https://github.com/HandyPlugins/magic-login). Some of our features are pro only, please consider before sending PR. __If you like Magic Login, then consider checking out our other projects:__ * Magic Login Pro – Easy, secure, and passwordless authentication for WordPress. * Easy Text-to-Speech for WordPress – Transform your textual content into high-quality synthesized speech with Amazon Polly. * Handywriter – AI-powered writing assistant that can help you create content for your WordPress. * PaddlePress PRO – Paddle Plugin for WordPress == Installation == = Manual Installation = 1. Upload the entire `/magic-login` directory to the `/wp-content/plugins/` directory. 2. Activate Magic Login through the 'Plugins' menu in WordPress. == Frequently Asked Questions == = What is passwordless authentication? = Passwordless authentication is an authentication method in which a user can log in to a computer system without entering (and remembering) a password. = Is the magic links are secure? = Yes! In fact, we thought this is more secure than the regular login due to most of the users are using weak passwords. Since magic login generates a random token for a limited time frame it makes the links quite strong and secure. = When do login links expire? = It expires in 5 minutes by default. You can change TTL under the "Token Lifespan" on the settings page. Enter "0" to disable automatic expiration. = Why am I not getting login links? = Magic Login uses WordPress built-in mail functions. So, it depends on your configuration. We highly recommend to use an SMTP service for better email delivery. = How can I use a passwordless login form on any page? = You can use `[magic_login_form]` shortcode or block. [Learn More.](https://handyplugins.co/magic-login-pro/docs/add-login-form-to-a-page/) == Screenshots == 1. Login Page 2. Settings Page 3. Login Email 4. Login Block == Changelog == = 1.9 (July 25, 2023) = * Added: AJAX support for login requests. * Bumped PHP requirement to 7.2+ * Small tweaks and improvements. * Tested with WP 6.3 = 1.8.1 (May 15, 2023) = * Added: Styling for two-factor plugin. * Minor UI changes. * Small tweaks and improvements. * Tested with WP 6.2 = 1.8 (February 18, 2023) = * New feature: Token Validity - allows to specify how many times a token can be used. * Improvements on the default login screen * i18n improvements * Added: German translation. * Added: Autocomplete support. * Added: New token `{{TOKEN_VALIDITY_COUNT}}` to customize email content. = 1.7 (January 21, 2023) = * PHP 8.1: fix deprecated 'FILTER_SANITIZE_STRING' * UI/UX improvements on default login screen * i18n improvements. Props [@emreerkan](https://github.com/emreerkan) * Fix: standard wordpress redirect functionality. Props [@maartenhunink](https://github.com/maartenhunink) * Fix: Skip the auto-login link for the magic login itself. * Fix: Send email only once. = 1.6 (October 26, 2022) = * New feature: Auto Login Links = 1.5.2 (September 27, 2022) = * Bug fix: token validation = 1.5.1 (September 26, 2022) = * Fixed: redirection issue. * Minor UI updates. * Small tweaks and improvements. * Tested with WP 6.1 = 1.5 (September 12, 2022) = * Fixed: save tokens hashed in DB. Props [@snicco](https://github.com/snicco/snicco) * Added: username-only mode. define `MAGIC_LOGIN_USERNAME_ONLY` in the config file to use it. * Email improvements: Check email contents before converting line breaks to `
` tags. * Small tweaks and improvements. = 1.3 (April 19, 2022) = * Tested with WP 6.0 * UI updates. * Fire `wp_login` hook as WP Core does on successful login. * Add new filter: `magic_login_email_headers`. * Fix email title html escaping. * Small tweaks and improvements. = 1.2.2 = * Tested with WP 5.9 * Update Shared UI * Fix compatibility issue with TML plugin * Add redirection cancellation option to the login block. * Check `logged-in` while saving the settings * Small tweaks and improvements. = 1.2.1 = * New: Integrate with the standard login form. * Fix: Enqueue admin assets on the settings page only. * Allow login block only once for a post. * Small tweaks and improvements. = 1.2 = * New: Magic Login Block - It's much easier to add and customize the login form in the block editor. * Customizable token intervals added. (removed 1-60 minutes restriction) * New placeholder added: {{EXPIRES_WITH_INTERVAL}} to display TTL with the interval. * Updated Shared UI * Improved documentation on settings page. * New: Show an error message when the user doesn't exist. * New filter: Added `magic_login_invalid_token_error_message` to customize error message. = 1.1.3 = * Fix: Scheduled expired token cleanup = 1.1.2 = * Update Shared UI * Shortcode `magic_login_form` now supports `redirect_to` attribute * fix: don't display login form if the user already logged-in = 1.1.1 = * Hotfix: return shortcode output instead of printing = 1.1 = * Tested with WP 5.8 * Shortcode `magic_login_form` support added! * fix: make sure `deactivate_plugins` exists when manually switching versions = 1.0.3 = * Update Shared UI * fix: add text-domain for missing strings = 1.0.2 = * Update Shared UI * Tested with WP 5.7 = 1.0.1 = * Update Shared UI = 1.0 = * First release == Upgrade Notice == = 1.5 = - The tokens will be hashed before saving in meta with this version. Due to this change, existing tokens will not work right after the update. = 1.0 = First Release