README

Contributors: marius1hello, dickhardt, remotelychris, rohanharikr
Donate link: https://www.hello.dev/
Tags: security, login, oauth2, openidconnect, apps, authentication, sso
Requires at least: 4.9
Tested up to: 6.4
Stable tag: 1.5.4
Requires PHP: 7.4
License: GPLv2 or later
License URI: http://www.gnu.org/licenses/gpl-2.0.html

Free and simple to setup plugin provides registration and login with the Hellō Wallet. Users choose from popular social login, email, or phone.

Description

Provide your users registration and login using their choice of popular social login, email, or phone. No need for you to configure your application at each provider or pay for a premium plugin.

Hellō Login verifies your users' email addresses so you don't have to. No longer do they have to manage another username and password to use your site.

Hellō is a cloud identity wallet cooperatively operated with a mission to empower users to control their identity. Learn more at hello.coop.

Hellō Login installs with Hellō Quickstart to get you up and running in 7 clicks.
Users manage how they login at wallet.hello.coop. No need for you to manage how they login or help them recover their account.
Hellō Login uses the Hellō service, which provides login and verified email for free. See hello.dev/pricing for details.

Documentation, configuration, and settings can be found in Settings > Hellō Login

Watch a video showing installation and key features, and how Hellō Login relates to popular alternatives.

Installation

Automatic Installation

Search for “hello openid” through 'Plugins > Add New' interface.
Find the plugin box of Hellō Login and click on the Install Now button.
Activate the Hellō Login plugin, then click Settings.
Click the Quickstart button and complete the Quickstart flow.
Once back at the Hellō Login Settings page, link your admin account with your Hellō Wallet.

Manual Installation

Download Hellō Login.
Upload Hellō Login through 'Plugins > Add New > Upload' interface or upload hello-login folder to the /wp-content/plugins/ directory.
Activate the Hellō Login plugin, then click Settings.
Click the Quickstart button and complete the Quickstart flow.
Once back at the Hellō Login Settings page, link your admin account with your Hellō Wallet.

Frequently Asked Questions

What is Hellō?

Hellō is a cloud identity wallet that empowers users to prove who they are to any site that accepts Hellō. Learn more at hello.coop.

How can users login to their wallet?

Hellō supports all popular ways to login including Apple, Facebook, GitHub, Google, Line, Microsoft, Twitch, Twitter, Yahoo, as well as email, phone and crypto wallets. We are adding more methods on a regular basis. See hello.coop for a complete list.

Does Hellō sell user data?

No. Hellō provides sites user data only with informed consent. User data is only accessible while the user has unlocked their wallet by logging in with their preferred provider.

How does Hellō make money?

Hellō has a freemium business model where basic claims such as login, verified email, and profile data is free. In the future we will have premium claims such as verified name, age, citizenship, residency, affiliations, and entitlements.

How can I change the image for my site?

You can update your site configuration at console.hello.coop.

My blog is on Wordpress.com. Why is Hellō not showing up for log in / comments?

If you have "Allow users to log in to this site using WordPress.com accounts" enabled under Settings / Security, then you can only use WordPress accounts for logging in, and Hellō is not available. If you have "Let visitors use a WordPress.com, Twitter, Facebook, or Google account to comment." enabled under Settings / Discussion, then you can only use WordPress for leaving comments. You will need to disable these for Hellō to be available.

Where do I submit feature requests or bugs?

Please submit to https://github.com/hellocoop/wordpress/issues

Screenshots

1. `/wp-login.php` page with Hellō Login

2. Hellō Wallet login page

3. 16+ ways to login

4. Verified email address

5. Protect comments

Changelog

1.5.4

Improvement: clarifications regarding business model

1.5.3

Improvement: WordPress 6.4 support

1.5.2

Improvement: WordPress 6.3 support

1.5.1

Improvement: updated screenshot list
Improvement: added link to video showing installation and key features

1.5.0

Improvement: tabbed Settings page

1.4.1

Improvement: WordPress 6.2 support

1.4.0

Improvement: added support for provider hint

1.3.0

Improvement: added "Update Email with Hellō" functionality
Improvement: internal restructuring for better testability and added basic unit tests
Improvement: PHP 7.4 is the new minimum required version

1.2.1

Fix: fixed parsing of empty scope

1.2.0

Improvement: disable account linking on settings page when in multisite mode
Improvement: simplified scope related settings and added scope validation
Improvement: scroll to comment form after log in to post a comment
Improvement: FAQ to clarify WordPress.com behavior
Fix: handle cancelled log in attempts

1.1.3

Improvement: set first and last name on sign-in if previously empty and if now available
Improvement: save extra claims under user meta
Improvement: add default scopes and reduce required scopes to openid name email
Improvement: set username and nickname even if only full name is available
Fix: alter comment links only if plugin is configured

1.1.2

Improvement: redirect back to blog post or page after sign-in
Improvement: use Hellō link and button to sign in to leave a comment

1.1.1

Fix: add cache control HTTP headers to auth request start endpoint response

1.1.0

Feature: added Hellō section to profile page with link / unlink functionality
Feature: added admin notices for Quickstart and link/unlink actions
Feature: redirect to settings page on plugin activation
Improvement: more restructuring of the settings page
Improvement: moved away from all REST APIs

1.0.12

Improvement: restructured the settings page
Improvement: added information about what data is being sent through Quickstart
Improvement: increased state time limit to 10 minutes
Improvement: updated the short description of the plugin
Fix: logged out message on login page moved to top

1.0.11

Improvement: disable logging by default
Improvement: login page layout fixes and improvements
Improvement: logins from wp-login.php redirect users to admin area
Improvement: show "User Settings" section

1.0.10

Improvement: show settings form in debug mode

1.0.9

Fix: disable caching on REST API response
Improvement: enable logging by default
Improvement: content changes on plugin settings page

1.0.8

Fix: use query parameter based redirect URI

1.0.7

Fix: authentication request URL generated through REST API on button click
Improvement: removed the WordPress User Settings section
Improvement: removed the Authorization Settings section
Improvement: use /hello-login/callback path for redirect URI
Improvement: added endpoint for Quickstart response
Fix: client id field being reset on settings save
Fix: automatic configuration of rewrite rules

1.0.6

Feature: added screenshots
Update: plugin details
Fix: plugin settings and login page redirects after connecting with Hellō

1.0.5

Feature: added given_name and family_name scopes as defaults
Fix: admin account linking done based on curren session
Feature: link user account on sign-in, when account is matched on email
Fix: map nickname to new username, instead of sub

1.0.4

Feature: added "Settings" link right in plugin list
Fix: show "Continue with Hellō" button on login page only if the plugin is configured

1.0.3

Feature: added integration parameter to Quickstart request

1.0.2

First release in WordPress plugin repository
Feature: toggle settings page content based on settings and current user state
Feature: collapse username / password form on login page
Feature: send Privacy Policy and Custom Logo URLs to Quickstart
Feature: added "Link Hellō" button to settings page

1.0.1

WordPress plugin submission feedback
Improvement: updated "Tested Up To" to 6.1.0
Fix: input/output sanitization and generation
Improvement: removed unused global functions
Improvement: enabled user linking and redirect after login

1.0.0

Forked https://github.com/oidc-wp/openid-connect-generic
Feature: merged PR that adds PKCE support
Feature: integrated Hellō Quickstart
Feature: removed unnecessary configuration options
Improvement: renamed all relevant identifiers to be Hellō Login specific

See pre-fork changelog up to 3.9.1 here

hellocoop / wordpress

Maintainers

Details