ImmoWP Estimation vs WP Login and Register using JWT

ImmoWP Estimation est un plugin WordPress complet qui fournit un formulaire professionnel multi-etapes pour l’estimation de biens immobiliers. Parfait pour les agences immobilieres, les societes de gestion immobiliere et les agents independants. Fonctionnalites principales Formulaire interactif en 6 etapes – Assistant multi-pages convivial avec barre de progression Autocompletion d’adresse – Integration avec l’API gouvernementale francaise (api-adresse.data.gouv.fr) Support API externe – Connectez votre propre API d’estimation Mode de secours – Fonctionne meme sans configuration API Securite : Integration Google reCAPTCHA v3 Limitation de requetes par IP Verification de nonce Validation et assainissement des entrees Notifications par email – Emails automatiques aux utilisateurs et administrateurs Administration : Tableau de bord detaille des estimations Filtres avances (statut, type de bien) Recherche etendue Export CSV Meta box en lecture seule avec notes admin Performance optimisee : Mise en cache de l’API d’adresses Index de base de donnees Chargement conditionnel des assets Accessibilite – Attributs ARIA et conformite WCAG AA Fonctionnement L’utilisateur remplit le formulaire en 6 etapes : Selection de l’adresse avec autocompletion Type de bien (maison/appartement) Surface habitable et terrain Nombre de pieces Etat du bien Coordonnees La soumission declenche : Appel API pour l’estimation (si configure) OU message de secours pour rappel Notifications email a l’utilisateur et l’admin Stockage des donnees dans WordPress Les administrateurs peuvent : Voir toutes les demandes d’estimation Filtrer et rechercher les soumissions Exporter les donnees en CSV Ajouter des notes internes Shortcode Ajoutez simplement [immowp_estimation_form] a n’importe quelle page ou article. Integration API Le plugin peut se connecter a n’importe quel point de terminaison API REST qui accepte les donnees du bien et retourne les valeurs d’estimation. Voir la documentation pour les specifications API. Confidentialite & RGPD Les donnees utilisateur sont stockees localement dans votre base WordPress Aucune donnee n’est envoyee a des tiers (sauf votre API configuree) Les administrateurs peuvent supprimer les soumissions a tout moment Foire Aux Questions Ai-je besoin d’une API externe ? Non ! Le plugin fonctionne en “mode de secours” sans API. Dans ce mode, les soumissions sont enregistrees et vous recevez une notification par email pour contacter l’utilisateur. Puis-je personnaliser le message de confirmation ? Oui ! Allez dans Estimations > Reglages, puis dans la section “Parametres avances”, vous pouvez personnaliser le “Message en mode fallback” affiche aux utilisateurs quand l’API n’est pas configuree. Comment configurer reCAPTCHA ? Obtenez vos cles reCAPTCHA v3 sur https://www.google.com/recaptcha/admin Dans WordPress, allez dans Estimations > Reglages Dans la section “Google reCAPTCHA v3”, cochez “Activer la verification reCAPTCHA v3” Entrez votre Site Key et Secret Key Ajustez le seuil de score si necessaire (defaut 0.5) Cliquez sur “Enregistrer les parametres” Puis-je exporter les demandes d’estimation ? Oui ! Allez sur la page admin Estimations et cliquez sur “Exporter CSV”. L’export respecte vos filtres actuels. Le formulaire est-il adapte au mobile ? Oui ! Le formulaire est entierement responsive et fonctionne parfaitement sur tous les appareils. Puis-je traduire le plugin ? Oui ! Le plugin est pret pour la traduction avec le domaine de texte immowp-estimation. Utilisez Loco Translate ou des outils similaires. Ou trouver les reglages du plugin ? Le menu principal “Estimations” apparait dans la barre laterale de l’administration WordPress apres activation du plugin. Les reglages se trouvent dans : Estimations > Reglages. Testing Test rapide du plugin Pour tester rapidement le plugin sur une installation WordPress fraiche : Installer et activer : Telechargez et activez le plugin Verifier le menu : Le menu “Estimations” apparait dans la barre laterale admin Creer une page de test : Allez dans Pages > Ajouter Titre : “Test Estimation” Contenu : [immowp_estimation_form] Publiez la page Tester le formulaire : Visitez la page publiee Le formulaire d’estimation en 6 etapes s’affiche Etape 1 : Tapez “Paris” dans le champ adresse – des suggestions apparaissent Selectionnez une adresse dans la liste Continuez a travers les 6 etapes (type, surface, pieces, etat, contact) Soumettez le formulaire Verifier l’enregistrement : Allez dans Estimations > Toutes les estimations La demande soumise apparait dans la liste Cliquez dessus pour voir les details complets Fonctionnalites a tester Autocompletion d’adresse : Tapez au moins 3 caracteres pour voir les suggestions Navigation multi-etapes : Utilisez les boutons Precedent/Suivant Validation des champs : Essayez de soumettre avec des champs vides Responsive : Testez sur mobile et desktop Admin : Filtrez par statut, recherchez par email, exportez en CSV Mode fallback : Sans API configuree, un message de rappel s’affiche Captures d’ecran Formulaire d’estimation moderne en 6 etapes avec barre de progression Autocompletion d’adresse avec integration API francaise Collecte des details du bien Tableau de bord admin avec filtres et recherche Page de reglages avec toutes les options de configuration Meta box des details d’estimation avec informations en lecture seule Documentation API Format de requete Votre API doit accepter des requetes POST a {base_url}/api/estimate avec la structure JSON suivante : { "codeCommune": "75001", "surfaceHabitable": 75, "typeLocal": "appartement", "codePostal": "75001", "surfaceTerrain": 0, "voie": "Rue de Rivoli", "numeroVoie": "10" } Reponse attendue { "estimatedPrice": 450000, "estimatedPriceMin": 420000, "estimatedPriceMax": 480000, "confidence": "high", "status": "success" } Voir la documentation complete sur https://immowp.com/docs/api Support Pour le support, les demandes de fonctionnalites ou les rapports de bugs, veuillez utiliser les forums de support WordPress.org. External Services This plugin connects to external third-party services to provide its functionality. Below is detailed information about each service: French National Address API (Base Adresse Nationale) This plugin uses the French government’s address API to provide address autocomplete functionality in the estimation form. What it does: Provides address suggestions when users type in the address field Data sent: The text entered by the user in the address search field When data is sent: Each time the user types at least 3 characters in the address field Service provider: French government (Etalab/DINUM) Service URL: https://api-adresse.data.gouv.fr/search/ Terms of service: https://adresse.data.gouv.fr/cgu Privacy policy: https://adresse.data.gouv.fr/donnees-personnelles Google reCAPTCHA v3 (Optional) If enabled in the plugin settings, this plugin uses Google reCAPTCHA v3 to protect the form against spam and automated submissions. What it does: Validates that form submissions come from real users, not bots Data sent: User’s IP address, reCAPTCHA token, and browser information When data is sent: When the user submits the estimation form (if reCAPTCHA is enabled) Service provider: Google LLC Service URL: https://www.google.com/recaptcha/api/siteverify Terms of service: https://policies.google.com/terms Privacy policy: https://policies.google.com/privacy Your Configured Estimation API (Optional) If you configure an external estimation API in the plugin settings, the plugin will send property data to calculate real estate valuations. What it does: Calculates property estimation based on submitted data Data sent: Property details (address, type, surface area, number of rooms, condition) When data is sent: When the user submits a complete estimation form Service provider: Configured by you in plugin settings Terms and privacy: Depends on your configured API provider

The WordPress Login and Register using JWT plugin allows you to log in (Single Sign-On) into your WordPress application using the JWT token(JSON Web token) obtained from any other WordPress site or other applications/platforms including mobile applications. This helps users perform autologin to WordPress and synchronize user sessions without the need to log in again. | Features | WordPress JWT Login Setup Guide | Videos | WORDPRESS SINGLE SIGN-ON / SSO ( LOGIN INTO WORDPRESS ) WordPress Single Sign-On SSO also simply called WordPress SSO allows you to login into WordPress using the credentials of other platforms. So, the user will just use a single set of credentials to log in to multiple applications. WordPress Single Sign-On / SSO using JWT(JSON Web Token) WordPress Single Sign-On (SSO) with JWT allows you to log into the WordPress site using the user-based JWT token obtained externally when the user authenticates for the first time in any connected external application. The JWT token authentication is the most popular way of authentication nowadays as it is a secure and lightweight protocol. The JWT token can be obtained either when a user logs into other platforms via OAuth/OpenID Connect protocol or can be created explicitly using the user information and secure algorithms. With this plugin, you can easily use the user-based JWT token to log a user in rather than asking them to authenticate again. Let’s take an example – If you have a WordPress site and mobile app, now if you are logged into the mobile app, now if you try to access the WordPress site, then to access the particular content, the WordPress site will ask for login again and which is not feasible, so with the JWT SSO (JWT Single Sign-On), you can create the JWT token for the user who is already logged into the mobile app and then on accessing the WordPress site, you can pass that JWT token in the request, using which the same user can authenticate and autologin to the WordPress site and hence won’t need to enter the credentials again. It supports possibly all kinds of JWT tokens (access-token/id-token) obtained from OAuth/OpenID Connect providers like AWS Cognito, Microsoft Azure AD, Azure B2C, Okta, Keycloak, ADFS, Google, Facebook, Apple, Discord and popular applications like Firebase. WordPress login using the JWT also called JWT SSO (Single Sign-On) can be done from other platforms and applications including mobile apps (android or IOS), an app built with other programming languages like .NET, JAVA, PHP, JS etc. Major functionalities WordPress Login Endpoint to create user-based JWT token Plugin provides the following API endpoint, which can be used to authenticate WordPress users and returns a user-based JWT which can be used to create login sessions in WordPress and other external applications. /wp-json/api/v1/mo-jwt WordPress Login using JWT This feature provides a way to auto-login users in WordPress using JWT obtained in a very secure way either via passing JWT token in the URL as a parameter, in the request header or shared via secured cookies. WordPress user register API endpoint to create users in WordPress using API This feature provides the following API endpoint to create users in WordPress in an easy way and on successful user registration, you will receive a JWT token in the response which can be used further for user login and WordPress REST API authorization. wp-json/api/v1/mo-jwt-register Delete/Remove users from WordPress using the user-based JWT token (JSON Web Token) This feature provides an API endpoint using which you can pass the JWT token and can easily delete the user and revoke access. wp-json/api/v1/mo-jwt-delete More details for the plugin setup can be checked from here. USE CASES Login to External applications using WordPress credentials If you are looking to authenticate your WordPress users to log in to external applications, then our plugin provides a login API endpoint using which you can easily authenticate WordPress users and can log in the users to those applications. Single Sign-On Users using the JWT token provided by OAuth/OpenID providers This WordPress login and register using the JWT plugin supports the WordPress Single Sign On (WordPress SSO) or WordPress login using the user-based JWT token (id-token/access-token) provided by the external OAuth/OpenID Connect providers (like Microsoft Azure AD, Azure B2C, AWS Cognito, Keycloak, Okta, ADFS, Google, Facebook, Apple, Discord and many more..) on login in some other sites/applications using their credentials. So, the user just needs to log in once on any other sites/platforms and a JWT token will be provided by these providers for those users will then be used further with security to autologin in other platforms. Automatic WordPress login and site access from mobile app web view | Synchronize WordPress session in the mobile app web view Suppose you have a mobile application and want to allow users to access their WordPress site content in the mobile app web view which requires a login so asking the users to enter the credentials again won’t be a good user experience. So, our JWT login plugin provides a solution to you in which the user session from the mobile app can be synchronized with the WordPress site and the user can seamlessly access the WordPress site using the user-based JWT token without the need for a WordPress login again. Automatic session synchronization between WordPress and other applications built on React, Node, Next JS, Flutter, Angular, Java, PHP, and C# …. Suppose you have a WordPress site connected to any external application built on any framework, then if you want a feature that if a user is logged in to any one application, should be automatically logged in to another as well. This can be easily achieved using the secure JWT. Session sharing between WordPress and other applications sharing the same subdomain (hosted on the same domain) Suppose you have a WordPress site and other applications hosted on the same subdomain, such that if the user logs in to any one application, then can be auto-logged into other connected applications on that domain using secure cookie-based JWT token sharing. an pass the new user details like username, email, name and password(optional), role etc. in the request body and on successful response, your user will get created and the corresponding user-based JWT will be received and the appropriate error response will be returned on the failure. Sync user login sessions between multiple platforms (Session sharing) If you have a WordPress site and other applications sharing the same subdomain and you want the feature in which if a user logged into one site (WordPress or another) and on accessing the other site in the same browser, then that user should get logged in automatically (user session to be synchronized). So, this feature is possible to have with our plugin’s JWT cookie-based session-sharing feature. Features FREE PLAN Create JWT feature Login API endpoint to authenticate WordPress users based on username/email and password Supports the JWT token generation using the HS256 signing algorithm. JWT token signing with randomly generated secret signing key. Default JWT token expiration is 60 minutes. User Registration feature Provide an API endpoint for user registration with the default subscriber role. Provide a user-based JWT token in the success response. No Extra Security key for user registration API. User Deletion feature Provide an API endpoint for user deletion with JWT token validation using the HS256 signing algorithm. No Extra Security key for user deletion API. User login feature Allows WordPress login (SSO) using a user-based JWT token with HS256 signing created using the plugin’s Create JWT feature. Retrieve the JWT token from the URL parameter to allow auto-login. Auto redirection on login to the homepage or on the same page/URL from where the autologin is initiated. Default Subscriber role is assigned on login using JWT. PREMIUM PLAN Create JWT feature Supports JWT token generation using HS256 and a securer RS256 signing algorithm. JWT token signing with a custom secret signing key or certificate. Custom token expiration to expire the token as per your requirement to improvise security. Custom JWT token decryption key. Revoke and invalidate existing user JWT token whenever a new JWT token is generated for a user. User Registration feature Provide an API endpoint for user registration with a custom role. Provide a user-based JWT token in the success response. Extra Security key for user registration API endpoint. User Deletion feature Provide an API endpoint for user deletion with JWT token validation using the HS256 signing algorithm. Extra Security key for user deletion API. User login feature Allows WordPress login (SSO) using a user-based JWT with HS256 signing created either using plugins create JWT feature or a JWT token obtained from an external source. Allows WordPress login using a user-based JWT with RS256 signing validation. Allows WordPress login using a user-based JWT with JWKS token validation support. Allows WordPress login using a user-based JWT obtained from an external OAuth/OpenID Connect provider. Retrieve the JWT token from the URL parameter, request header and cookie to allow auto-login between platforms. Auto redirection on login to the homepage or on the same page/URL from where the autologin is initiated. Auto redirection on login to any custom URL. User Attribute/Profile mapping on SSO login. Option to assign any WordPress role rather than default subscriber on SSO login. Automatic role and group Mapping to the user who performs SSO using a JWT token. SSO Login Audit feature to track the users who perform login using the JWT token. Add-On to share the user session to other applications using the JWT token stored in the cookie Other Related Integrations OAuth Single Sign On – SSO (OAuth Client) – This plugin allows Single Sign On – SSO login in your WordPress site using external OAuth 2.0, OpenID Connect Providers api Single Sign On – SSO Login – This plugin allows Single Sign On – SSO login in your WordPress site using external api, WS-FED Providers WordPress REST API Authentication – This plugin protects your WordPress REST API endpoints from unauthorized access using secure OAuth 2.0, JWT authentication, Basic authentication, Bearer API Key token and even more. Privacy This plugin does not store any user data. This plugin uses login.xecurify.com for registration as miniOrange uses login.xecurify.com if the user chooses to register and upgrade to premium. If the user does not want to register then he can continue using the free plugin. (Link to the privacy policy – https://www.miniorange.com/privacy-policy.pdf )