Skip to content

feat: add usage guide and API file generator - #15

Merged
drnecrotix merged 5 commits into
mainfrom
feature/api-file-generator
Aug 11, 2026
Merged

feat: add usage guide and API file generator#15
drnecrotix merged 5 commits into
mainfrom
feature/api-file-generator

Conversation

@drnecrotix

@drnecrotix drnecrotix commented Aug 11, 2026

Copy link
Copy Markdown
Owner

What and why

Adds an in-plugin setup guide and an optional generated API compatibility file for IPS installations that still require a physical PHP endpoint.

Changes

  • bump WordPress plugin to 1.1.0
  • expand Settings → WP-SSO Bridge into a step-by-step setup guide
  • add Generate & Download API file action
  • generate wp-sso-api.php without embedding the API secret
  • protect file generation with administrator capability and WordPress nonce checks
  • document exactly where the generated file must be uploaded: the WordPress root beside wp-config.php and wp-load.php
  • show native endpoint and compatibility-file endpoint examples
  • update plugin readme.txt and repository README

Security

The generated file contains no credentials. It only loads wp-load.php, verifies the WP-SSO plugin is active, and forwards the request into the maintained plugin endpoint handler.

Expected placement

wp-sso-api.php should be uploaded beside wp-config.php, wp-load.php, wp-admin/, wp-content/, and wp-includes/.

@drnecrotix
drnecrotix merged commit 7b713a3 into main Aug 11, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant