EffectIO JWT Authentication for WP-API 1.2.6

Description:

JWT Authentication for WP-API version 1.2.6 adds login via JSON Web Tokens to the WordPress REST API. On successful authentication it issues access tokens, and on each request it verifies token integrity. The vendor page lists these core authentication features for the WP.org version: basic JWT authentication, token generation, and token validation.

The plugin is intended for WordPress developers who only need to generate and validate tokens for a small project. It is the WP.org version of the vendor's JWT plugin, which the vendor reports is trusted by more than 60,000 active installs.

According to the vendor, both this version and the Pro edition add JWT to WordPress, and the difference is what happens after the token is issued. The Pro edition extends the free plugin with token management features, including secure token refresh with 64 character tokens and replay attack prevention, instant revocation, audit logs, a token dashboard, auto revocation on password, email, or role changes, an analytics dashboard, GeoIP tracking, IP based rate limiting, security headers, token family tracking, configuration through the WordPress UI, configurable signing algorithms, IP anonymization, data retention policies, priority support, documentation, and more than 30 developer hooks and filters. None of these features are included in the WP.org version listed here.

The vendor’s own page for JWT Authentication for WP-API has the full details.

Main Features of JWT Authentication for WP-API:

• Adds login via JSON Web Tokens, issues access tokens on successful auth, and verifies token integrity on each request
• Secure token refresh with 64 character tokens and replay attack prevention
• Instant revocation of compromised sessions, with auto revoke on password, email, or role change
• Token dashboard showing every active token, owner, expiry, and last activity
• IP based rate limiting with a configurable 60 req/min default and HTTP 429 responses
• GeoIP country detection via MaxMind GeoLite2 plus automatic security headers including HSTS
• Analytics dashboard with success and failure rates, response times, and 7d/30d/90d history

EffectIO members receive updates through the managed update channel. Install the EffectIO Connect plugin on your site and it handles activation, updates and licensing automatically.

Need a dashboard view of all your EffectIO assets? The EffectIO Dashboard shows what is installed, what is licensed, and what has an update available.

The 1.2.6 version stays on this update channel for the subscription year.