Adds JWT-based authentication to WPGraphQL for WordPress, enabling secure user login and token management.
WPGraphQL JWT Authentication is a WordPress plugin that adds JSON Web Token (JWT) authentication to WPGraphQL. It enables secure user login, registration, and token refresh via GraphQL mutations, allowing headless WordPress setups to implement stateless authentication for modern frontends. The plugin solves the need for token-based auth in decoupled WordPress architectures.
WordPress developers building headless or decoupled sites with WPGraphQL, especially those using React, Vue, or other JavaScript frameworks that require secure API authentication.
Developers choose this plugin because it seamlessly integrates JWT authentication into WPGraphQL's schema, offering a standardized, secure alternative to WordPress cookies for headless setups. Its simplicity, extensibility via filters, and focus on short-lived tokens make it a robust solution for modern authentication workflows.
Authentication for WPGraphQL using JWT (JSON Web Tokens)
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Implements RFC 7519 for secure token-based authentication, ensuring compatibility with modern security practices and tools like JWT.io.
Adds login, register, and refresh token mutations directly to the WPGraphQL schema, simplifying client-side implementation with examples for Apollo and Relay.
Offers filters like graphql_jwt_auth_expire to adjust token expiration times, allowing tailored security without modifying core code.
Built following WordPress coding standards and extensible via hooks, ensuring easy integration with other plugins and themes.
Requires enabling HTTP_AUTHORIZATION headers in Apache or NGINX, which can be complex and error-prone, especially in shared hosting environments.
Only functions if WPGraphQL is installed and active, adding an extra layer of maintenance and potential compatibility issues.
Provides no built-in UI or frontend components, requiring developers to manually handle token storage and HTTP headers in their applications.