/ Plugin Category

/ User Management & Authentication

/ User Registration & Login

/ WP OAuth Server (OAuth Authentication)

WP OAuth Server (OAuth Authentication)

By Jayson T Cote

User Management & Authentication / User Registration & Login

Reviewed by Omar Dabbas

Trusted WordPress expert with 20+ years of experience evaluating plugins for the WP ecosystem.

WP OAuth Server (OAuth Authentication) Review - In-Depth Analysis

WP OAuth Server enables OAuth 2 authentication for WordPress. It supports Single Sign On for websites and mobile applications without third-party servers.

Performance Overview

WPS Score

6.75/10

User Rating

3.8/5 (based on 41+ reviews)

Active Installations

3,000+

Update Frequency

Average It is calculated using the weighted average of same category plugins.

Security Score

5.53 / 10 (Medium Risk) It is calculated using the weighted average of all versions.

What It Does

WP OAuth Server allows you to connect your app to WordPress or use Single Sign On to connect multiple websites with the same username and passwords. This plugin eliminates the need for third-party servers, providing everything you need directly within it.

The plugin supports WP REST API authentication, allowing authorized calls to protected REST API endpoints. It includes features such as unlimited OAuth 2.0 clients, support for implicit flow, and a built-in resource server. Users can easily extend or modify endpoints and utilize modern and legacy JWT authorization.

With support for various grant types including authentication code, user credentials, and refresh tokens, WP OAuth Server is versatile for connecting custom mobile and desktop applications to WordPress's backend. It also supports integration with platforms like Moodle LMS and RocketChat.

Comparing to Alternatives

WP OAuth Server (OAuth Authentication) is one of several plugins offering OAuth authentication for WordPress, competing with other established options in this niche.

Top alternatives

Strengths

Supports OAuth 2.0 authentication protocols.
Includes a pro version with additional features.
Has a user-friendly interface appreciated by some users.
Provides integration capabilities for client applications.

Weaknesses

History of multiple security vulnerabilities, some critical.
Recent user reports of abandonment and lack of support.
Token revocation issues leading to security concerns.
License key and support access problems reported.

User Sentiment Analysis

With a 3.8 out of 5 rating from 41 reviews, the plugin has a mixed reception. While a majority of users rate it positively, a significant minority report serious issues, especially regarding support and security.

Positive highlights

'Just what I expected, thanks!' — robegb
'This plugin is really fantastic' — Northern Beaches Websites
'Gives an error while logging in “Missing required parameter: scope”' — uusr (indicates active use and feedback)

Common complaints

Plugin appears abandoned with no support response.
Pro version purchased but does not work as expected.
License key access and password restore functionality broken.
Security flaw where tokens remain valid after logout, risking data exposure.

Weaknesses

Unaddressed security vulnerabilities until recent updates.
Poor customer support and communication.
Token management issues compromising session security.
Obsolete features and lack of updates reported by users.

Who Should Use This?

Best for

Developers or organizations needing OAuth 2.0 authentication with willingness to manage security updates and potential support limitations.

Not ideal for

Users seeking a fully supported, actively maintained plugin with robust customer service and guaranteed security fixes should consider alternatives.

Pricing & Value

Free version includes

The free version offers basic OAuth 2.0 authentication features suitable for simple integrations.

Pro version

Premium features likely include enhanced security options, extended client management, and priority support, although recent user feedback questions support reliability.

Final Verdict

WP OAuth Server (OAuth Authentication) provides essential OAuth 2.0 functionality with a pro version offering additional features. It has a user-friendly design and positive feedback from some users, but is marred by significant security vulnerabilities and reports of abandonment and poor support.

Potential users should weigh the plugin's capabilities against its security history and support concerns. Those requiring dependable security and active maintenance may find better options among its alternatives.

Other Notable Features

Here are a few other notable features of this free WP OAuth Server (OAuth Authentication) plugin.

OAuth

OAuth Provider

OAuth2 Service

FAQ

This depends. If you project requires random users access an application, then OAuth2 is the route you need. If you are making
a server that handles a one time client id and secert for authorization, then Application Passwords is for you.