4WP Account

4WP Account is a membership-ready user account hub: user registration, a front-end user profile cabinet, email/password sign-in, and social network login (OAuth). Native Gutenberg blocks each have a matching shortcode. WooCommerce is optional.

dev. 4WP is our project brand; the letters “WP” appear only as part of that brand name, not as a reference to WordPress. This plugin is not affiliated with, endorsed by, or sponsored by WordPress.

com/4wpdev/4wp-account

Membership and user account

• One account page for guests (sign-in / registration) and members (cabinet)

• User profile shell with a configurable account menu (dashboard, WooCommerce, extras)

• User registration follows Settings → General → Anyone can register

• Email/password works without WooCommerce

• Optional replacement of wp-login.php — only when the chosen page already has a login block or shortcode

Social login

Enable providers under 4WP Account → Auth / Register:

• Live: email/password, Google, GitHub, TikTok

• Coming soon: Facebook, X

Buttons can use native brand colors and icons, a solid fill, or icon-only.

Gutenberg blocks and shortcodes

Every block has a shortcode equivalent:

• forwp/account — [forwp_account] — account page (sign-in or cabinet)

• forwp/account-menu — [forwp_account_menu] — header user menu

• forwp/account-link — [forwp_account_link] — header/menu account link

• forwp/auth-buttons — [forwp_account_signin_buttons] — social sign-in buttons

• [forwp_account_login provider="gmail"] — single provider button (shortcode only)

Place them in the Site Editor or on a page. Sign-in methods are configured in Auth / Register. Appearance of the guest card is under Appearance.

The account page is selected in Settings → Pages.

Also included

• REST API — /wp-json/forwp-account/v1/auth/{provider} and OAuth callbacks

• Optional social buttons on WooCommerce login/register forms

• Hide the admin bar for subscribers; redirect subscribers away from /wp-admin/

Privacy

OAuth tokens are exchanged server-side. Profile email and name from the provider are stored in WordPress user records. dev.

Development

Run tests: composer install && composer run lint && composer run test

External services

This plugin connects to third-party OAuth providers when a visitor starts social login and when an administrator saves API credentials.

Google

• When: User clicks Google sign-in; server exchanges the authorization code and reads profile email.

• Terms: Google API Terms of Service

• Privacy: Google Privacy Policy

GitHub

• When: User clicks GitHub sign-in; server exchanges the code and reads the primary verified email.

• Terms: GitHub Terms of Service

• Privacy: GitHub Privacy Statement

TikTok

• When: User clicks TikTok sign-in; server exchanges the Login Kit code (enable in Auth / Register).

• Terms: TikTok Terms of Service

• Privacy: TikTok Privacy Policy

Meta (Facebook) — planned

• When: Not enabled in this release. Listed in admin as coming soon.

• Terms: Meta Platform Terms

• Privacy: Meta Privacy Policy