v0.4.0

What's Changed

• Magic link reusability in #2

Full Changelog: v0.3.2...v0.4.0

v0.3.2

Fixes

• preserve login tokens during HEAD requests by @ymilhahn in #1

Features

• added extensibility support for custom login validation (such as roles for example) after email validation through WordPress filters (wp_magic_link_auth_pre_login_check)
• enhanced support for return url after a successful login, now handled through the whole login process using the returnUrl querystring parameter. The return url priority now is:
  1. plugin settings
  2. shortcode parameter
  3. querystring paramter
• auth tokens are now stored into a custom table ($wpdb->prefix + magic_link_auth_requests). This fixes an issue with previous persistence on user meta which would cause a login error on repeated logins.

New Contributors

• @ymilhahn made their first contribution in #1

Full Changelog: v0.2.1...v0.3.2

v0.2.1

WP Magic Link Auth v0.2.1 - Admin support

This release introduced the admin page support. Some features are now parametric and their behavior can be customized using settings.

Email settings

• Email subject: set the custom subject for magic link mail
• Email body: set the body content with custom text and placeholders available
  • {magic_link}
  • {user_email}
  • {user_login},
  • {display_name}

Logging settings

An "Enable Console Logging for AJAX Calls" can enable or disable the console log for ajax calls from login form. Useful until custom message handling is implemented (see readme).

Form Settings

Customize login form labels

v0.1.0

WP Magic Link Auth v0.1.0 - Initial Release

This is the first release of WP Magic Link Auth! This version introduces the core functionality of passwordless login using secure magic links, offering a user-friendly and secure alternative to traditional password-based authentication.

Key Features

• Passwordless login: Users can log in securely using magic links sent to their email addresses.
• Enhanced Security: Session-based single-use tokens prevent replay attacks, and rate limiting protects against brute-force attempts.
• Customizable Redirects: Specify the redirect URL after successful login using the shortcode's returnUrl parameter.
• Flexible Integration: Easily integrate the login form into your custom pages using the provided shortcode and style it with CSS.
• JavaScript Events: Handle success and error scenarios on the page with custom JavaScript code using window.postMessage.