描述
MemberAuth – Login & Content Access for Join It makes it easy for organizations using Join It to create member-only areas in WordPress.
The full name above is the product name. The WordPress admin sidebar uses the shorter MemberAuth label, and Member Access is the feature inside that menu for protecting content and managing access rules.
Connect your Join It organization, choose the WordPress Pages or Posts to protect, and decide which membership types and statuses can view them. Join It remains the source of truth, so there is no need to maintain WordPress roles manually for membership access.
Administrators can:
- Let members log in with Join It.
- Protect supported WordPress Page and Post content.
- Choose access by Join It membership type and status.
- Create a dedicated Member Login page.
- Place the reusable [memberauth_login] shortcode on another Page or Post.
- Customize member login screens and access messages.
- Synchronize Join It membership types.
- Control messages for expired, pending, prospective, canceled, or mismatched memberships.
- Review access activity and use built-in troubleshooting tools.
MemberAuth reads the membership information needed for access decisions. Protected content fails closed when no allowed result is available.
MemberAuth protects supported WordPress Page and Post content responses using server-side access checks. Direct media file URLs, third-party APIs, custom page-builder data outside the standard content response, custom metadata or SEO fields, and copies previously stored by a CDN or proxy may require separate controls.
A Join It organization on an eligible plan with API access is required. Use HTTPS in production and exclude protected pages and the OAuth callback from full-page or CDN caching.
External Services
MemberAuth – Login & Content Access for Join It depends on Join It and requires a Join It organization with suitable API access.
app.joinit.com is used in the member’s browser for Join It authorization and login. It is also the destination for the Join It Developer Tools and App Keys setup links.
app.joinitapi.com is used by the WordPress server for:
- OAuth authorization-code exchange using the Client ID and Client Secret;
- authenticated user information using the temporary member OAuth access token;
- organization details, membership types, and matching membership records using the configured Access Token (AppToken).
During login, the member’s browser is redirected to Join It. MemberAuth does not collect the member’s Join It password. Join It returns authenticated identity information, and the member email is used to locate the relevant membership in the connected organization. The temporary member OAuth access token is used for user information and then discarded. The AppToken is stored server-side and used for read-only organization and membership requests.
OAuth member login and organization API access are separate. Client ID and Client Secret cannot replace the AppToken, and the AppToken is not used as a member OAuth token.
Use of Join It is subject to its Terms of Service and Privacy Policy. MemberAuth sends no analytics or marketing data to the plugin author.
Privacy
MemberAuth may store a local WordPress user and Join It identity association, short-lived normalized membership checks, access activity, and limited diagnostics. When entered in WordPress, the App key, Client Secret, and AppToken are stored locally using authenticated encryption.
Members authenticate on Join It. MemberAuth does not collect or store Join It passwords. The temporary member OAuth access token is used for authenticated user information and then discarded. Raw Client Secrets and AppTokens are never written to activity logs, diagnostics, privacy exports, or support reports.
Site owners control applicable membership-check and activity-retention settings and can clear saved checks, activity, and diagnostics. Uninstall always removes stored credentials and identity-associated or ephemeral security data. Reusable configuration follows the saved uninstall preference; WordPress users and content are not deleted.
The plugin registers WordPress personal-data exporter and eraser callbacks and suggested Privacy Policy text. Review that text for the site’s hosting, backups, cache/CDN, other plugins, and Join It arrangements.
屏幕截图
安装
- Install and activate MemberAuth – Login & Content Access for Join It.
- Open MemberAuth > Setup.
- Follow the instructions to create a Join It App Key using the Redirect URI shown by the plugin.
- Copy the Client Secret when Join It first displays it.
- Open Join It App Keys and generate the Access Token for the new App Key.
- Enter the App key, Client Secret, and Access Token in MemberAuth.
- Select Connect Join It.
- Open MemberAuth > Member Access, select Protect Pages, and choose the pages, membership types, and membership statuses that should have access.
- Create a Member Login page if desired.
- Test a protected page from a private or incognito window with a real Join It member.
A detailed Setup Guide is included with the plugin. Do not test member login from wp-admin while already signed in as an administrator.
常见问题
-
Do I need a Join It account?
-
Yes. MemberAuth is built for organizations using Join It. An eligible Join It plan with API access is required.
-
Does MemberAuth change membership data in Join It?
-
No. The plugin reads the organization and membership information needed for access decisions. It does not create or change member, membership, payment, renewal, or password data in Join It.
-
How do members log in?
-
Members are redirected to Join It to authenticate. MemberAuth does not collect their Join It password. Access applies only to the WordPress session that completed Join It login.
-
Can I protect pages by membership type?
-
Yes. You can allow all synchronized membership types or choose specific Join It membership types.
-
Can I protect pages by membership status?
-
Yes. Rules can allow Active, Pending, Prospective, Expired, and Canceled memberships. You choose which statuses are appropriate for each rule.
-
What happens if Join It cannot be reached?
-
The recommended setting uses a still-valid saved membership result when one is available. Otherwise protected content is not shown. Administrators can instead choose Block Access for every unavailable check.
-
Can I customize the member login screen?
-
Yes. Member Screen Design controls the login presentation, and Member Messages controls what members see in common access situations.
-
Can I create a dedicated login page?
-
Yes. MemberAuth can create and track a Member Login page from the Login Page screen.
-
Can I use the login box on another page?
-
Yes. Add [memberauth_login] to a Page, Post, or supported shortcode location.
-
Does this work with WordPress Multisite?
-
No. Multisite is not currently supported, and activation is blocked on Multisite.
-
Does this protect direct media file URLs?
-
No. Direct media file URLs are outside the normal protected-content boundary. Use separate media-access controls when files themselves must be private.
-
Does uninstall remove my settings?
-
Deactivation preserves configuration. Uninstall always removes credentials and ephemeral security data. The saved preference controls whether reusable rules, assignments, design, and messages are also removed. WordPress users and content are not deleted.
-
What Join It plan do I need?
-
An eligible Join It plan with API access is required. Check current plan availability with Join It; MemberAuth does not define Join It pricing.
-
Where should I start if I need help?
-
Start with MemberAuth > Troubleshooting and the included Setup Guide. After the plugin listing is available, use its WordPress.org support forum for plugin-specific help. Contact Join It support for Join It account, API access, membership, or billing questions.
评价
此插件暂无评价。
贡献者及开发者
更新日志
1.7.0
- Bound Join It authorization to the WordPress session that completed Join It login; password-only sessions no longer inherit membership access from a linked account.
- Added the four-step Join It key setup, tracked Login Page and shortcode, page-first protection workflow, contained Member Messages editing, and clearer troubleshooting.
- Hardened privacy, uninstall cleanup, Page capabilities, URL validation, Multisite handling, accessibility, and localization.
- Adopted the distinctive MemberAuth – Login & Content Access for Join It identity,
memberauth-accesspackage/text domain, andmemberauth_runtime prefix; a one-time migration preserves pre-release configuration and protected-content data under schema 1.2.0. Historical changes are in changelog.txt.