Today we launched WordPress OAuth Server version 4.1.0 which contains some bug fixes, improvements, and a huge support update. WP OAuth Server has supported OpenID for a long time as well as semi support for generic JSON Web Tokens. This released includes full support for JWT to include a complete JWT as an access token. […]
Read Story
OAuth 2.0 in general relies heavily on the crypt nature of TLS. Since tokens are sometimes exchanged via a request, a secure connection is required. TLS 1.0 and TLS 1.1 use the SHA-1 algorithm and weaker cipher suites for authenticating identities. However, it has become dangerously weak due to several vulnerabilities identified in its suite. […]
Read Story
As one of the first companies to introduce OAuth to WordPress, we have seen great projects and met great people. With the increase of WordPress usage and it’s ease of use, we often see bad practices as well. Some of the most bad practices come from simple tasks like weak passwords, custom proprietary authentication development, […]
Read Story
If you are reading this, chances are that you are one of the lucky ones that were affected by a change in the latest release. The change was not a bug but rather fixing a bug from prior versions. We have had a lot of response for from people stating that WP OAuth Server stopped […]
Read Story
Today we are pleased to say that we have launched version 3.7.0 of WP OAuth Server. The new version contains makes the plugin GDPR compatible and even offers some simple privacy policy content. Version 3.7.0 addresses a few bugs and issues from prior versions. The most notable bug that has been fixed is a namespace […]
Read Story
Hello All, Today we released WP OAuth Server 3.6.0 into the wild. if you have not already received the notice in your WordPress admin panel about the update, you will shortly. The update to 3.6 has some very big updates. Some of these updates may cause some headache for plugins that are heavily extended. We […]
Read Story
Today we have released a minor update for WP OAuth Server. This update contains a patch and addresses a HUGE performance issue that was brought to our attention. Older versions of WP OAuth Server would store expired tokens and would never remove them. You can imagine the performance impact this could make on a system […]
Read Story
Hello Everyone! Today we are launching the newest update for WP OAuth Server and we are super excited. This release is especially big for us because we now we offer live support directly in the WordPress admin. We have also added a feature that allows the entire WP REST API to be disabled to all […]
Read Story
Today we excited to release version 3.4.5 of WP OAuth Server. The updates were minor but we encourage that sites update to the latest version as soon as possible. Updates There was a bug in the storage class that causes systems to not issue the correct expire time when setting refresh tokens. This issue has […]
Read Story
Today we released a new version of WP OAuth Server for all our customers. The released contains mostly bug fixes but did contain a new filter. We fixed a bug in how the clients are stored in the database. This could lead to Client ID’s being exposed but nothing else. In certain scenarios, this could […]
Read Story