WP Support Access 1.1.0

Configure the page opened after magic login when embedding the package in your own plugin:

$support = new SupportAccess([
    'redirect_to' => 'admin.php?page=my-plugin-settings',
]);
$support->register();

$grant['url'] is ready to share as returned by issue(). Following it signs the user in and opens the configured settings page. No URL helper or manual query parameter is required.

• Supports wp-admin-relative paths and absolute URLs inside the current site's wp-admin, preserving query strings and fragments.
• Defaults to the wp-admin dashboard when omitted; invalid, external or traversing destinations fall back to the admin root.
• The destination is server configuration; incoming redirect_to query parameters do not override it. Existing links use the current configuration.
• Compatible with existing grants and storage; no migration is required.

Use nlproduction/wp-support-access: ^1.1 through the GitHub VCS repository and run composer update nlproduction/wp-support-access. See README for the complete embedding and magic-link creation examples.

Validation includes a real embedding host plugin, actual HTTP magic-login redirects and access to its registered settings page, relative/absolute/query/fragment cases, unsafe-target fallback, and the existing WordPress/MySQL lifecycle, nonce, session, revocation, expiry, deactivation and multisite suite. Browser UI automation and third-party security/cache integrations are not covered.

WP Support Access 1.0.0

Standalone PHP/Composer package and optional installable WordPress plugin for temporary support access, adapted from MapSVG.

• One-click administrator-issued magic links, reusable until expiration or revocation.
• Separate support account per grant; creation, expiration and last-used metadata.
• Random 256-bit bearer tokens with hash-only storage.
• Expiring WordPress sessions; revocation ends existing sessions and retires owned accounts.
• Site-scoped multisite behavior and network-deactivation cleanup.
• REST management API and Settings → Support access UI.
• GPL-2.0-or-later, no MapSVG or third-party runtime dependency.

Requires WordPress 5.9+ and PHP 7.4+. Upload the attached wp-support-access.zip through WordPress Plugins → Add New → Upload Plugin.

Composer installation and embedding examples are in the README; use the GitHub VCS repository until Packagist registration.

Verification: PHP syntax/Composer metadata, a disposable real WordPress/MySQL installation, HTTP login/cookies/nonces/revocation/expiry/deactivation and a real two-site multisite lifecycle. Browser automation and third-party security/cache-plugin compatibility were not exercised.