WP OAuth Server

Stay tuned with our latest blog posts

WP OAuth Server 3.2.7 Released

Today I released version 3.2.7 of WP OAuth Server. This updated contains some mostly enhancments and 1 security patch: Added wo_authorization_code_authorize action. Passed user_id as a single parameter. Added wo_restrict_single_access_token filter. Returns true or false / Defaults to false. Added wo_auth_code_lifetime filter. Defaults to 30. Fixed possible XSS issue with client description. It is recommended […]

Monday June 20, 2016

WP OAuth Server 3.2.6 Released

Today I released version 3.2.6 of WP OAuth Server. This updated contains some mostly enhancments including: Localization. WP OAuth Server now has the ability  to support multiple languages. If you are up to the task, I will give a free 1 year license to WP OAuth Server for each language you translate the plugin to. Ability […]

Monday May 16, 2016

Server Certificates Updated to Let’s Encrypt

Today we updated our TLS certificates to Let’s Encrypt from StartCom. This should not effect any functionality or API services but if you experience any issues, please submit a support request.  

Wednesday April 27, 2016

3.2.4 Security Update

WP OAuth Server 3.2.4 has been released. This update is available to all valid license holders. Simply update WP OAuth Server in the plugin area as normal. Security Issues Patched wo_create_client It is possible that a hacker could hijack the action wo_create_client and run malicious code. This was because the action was ran before the capabilities checks […]

Tuesday April 26, 2016


After a few days of server issues, we are back up. For the last day, An engineer and I have been working non-stop to try to retrieve data and backups. What Happened? Durring a site update that included a face lift and server upgrade, our configuration went all kinds of whacko. During the crash we […]

Thursday April 21, 2016

Upgrading 3.1.9x to 3.2.x

Upgrade time ~10 Minutes We tried to make this transition as smooth as possible but the changes required that there be some breaking changes (mainly to the options can configuration). This upgrade ONLY applies to current license holders of WP OAuth Server 3.1.X that are wanting to upgrade to 3.2.0. Steps to upgrade you must […]

Tuesday April 12, 2016

WP OAuth Server 3.2.0 Released

We have released version 3.2.0 of WP OAuth Server. There is some HUGE changes with the plugin this time around. As of this morning, we have updated how our license works and how the plugin is delivered. Version 3.2.0 and greater will now be hosted on our servers. Our servers will deliver updates directly instead of […]

Monday April 11, 2016

We want your opinions about WP REST Authentication?

With the introduction of the REST API for WordPress, the possibilities are endless. I see this a bit skeptical since there is some choke points in the REST API. Everything always has its flaws and given that the REST API in core is fairly new, I hold my personal opinions close and contribute when and where […]

Monday April 4, 2016

WP OAuth adds support for WP OAuth Server

Recently I was contacted by an Author of WP OAuth Server informing me that there was a demand for integration between WP OAuth (https://wordpress.org/plugins/wp-oauth/) and WP OAuth Server (https://wordpress.org/plugins/oauth2-provider/). With no time wasted, I hopped on the matter and submitted a Pull Request at https://github.com/perrybutler/WP-OAuth. The PR provided configuration that allows for a user to connect […]

Wednesday March 9, 2016

CORS – Preflight Requests Issues

Update Jan 11, 2018 WPEngine Customers: You must set the Allow Origin settings in your .htaccess file. See https://wpengine.com/support/platform-settings/ for more information. It has come to my attention that there is a growing usage of frameworks that are running into issues with with CORS (Cross-origin HTTP Requests). The issue begins with OAuth2 not really supporting CORS […]

Friday January 22, 2016