WP OAuth Server - CE

Plugin · Free + paid

3,000+ active installs · Rated 3.8/5 · Updated September 24, 2026

Visit website

OAuth 2.0 provider for WordPress that lets external apps and sites sign users in with their WordPress accounts. It supports the authorization code flow with PKCE, OpenID discovery and JWT tokens, with client management in the admin. It suits developers connecting mobile apps, SSO or REST API clients to WordPress. The free edition leaves out password and client credentials grants, and the refresh and OpenID Connect grants are marked as Pro in the readme.

Pros

  • Authorization code flow with PKCE
  • OpenID discovery and JWT token support
  • Client management screens in the admin

Cons

  • Password and client credentials grants are disabled in the free edition
  • Refresh token and OpenID Connect grants are marked Pro in the readme
  • A licence check contacts the vendor site

Topics: Login plugins , Security plugins

Alternatives