Title: WebPlatform Social Login
Author: WebPlatform
Published: <strong>2026년 7월 28일</strong>
Last modified: 2026년 7월 28일

---

플러그인 검색

![](https://s.w.org/plugins/geopattern-icon/webplatform-social-login.svg)

# WebPlatform Social Login

 작성자: [WebPlatform](https://profiles.wordpress.org/jain640/)

[다운로드](https://downloads.wordpress.org/plugin/webplatform-social-login.1.4.4.zip)

 * [세부사항](https://ko.wordpress.org/plugins/webplatform-social-login/#description)
 * [평가](https://ko.wordpress.org/plugins/webplatform-social-login/#reviews)
 *  [설치](https://ko.wordpress.org/plugins/webplatform-social-login/#installation)
 * [개발](https://ko.wordpress.org/plugins/webplatform-social-login/#developers)

 [지원](https://wordpress.org/support/plugin/webplatform-social-login/)

## 설명

WebPlatform Social Login adds secure social sign-in buttons to WordPress.

Features:

 * Verifies Google ID token signatures using Google’s published public keys.
 * Supports Facebook OAuth, LinkedIn OpenID Connect and Microsoft OpenID Connect.
 * Supports Sign in with Apple, including dynamic ES256 client assertions.
 * Validates token audience, issuer, expiry, email verification and nonce.
 * Protects login requests with short-lived, HttpOnly state cookies.
 * Encrypts provider secrets and Apple private keys at rest using WordPress authentication
   salts.
 * Connects existing users by verified email.
 * Optionally creates new WordPress users.
 * Displays on WooCommerce login and registration forms.
 * Displays on standard WordPress login and registration forms.
 * Optionally offers Google One Tap to logged-out visitors using the Google account
   active in their browser.
 * Includes `[webplatform_social_login]` for custom pages.
 * Supports local post-login redirects and optional email-domain restrictions.
 * Integrates with WordPress personal-data export and erasure tools.

No Google Client Secret is stored or required. Other providers require their standard
application credentials.

### External services

This plugin connects to external identity services only when the site owner enables
them. When Google One Tap is enabled, Google Identity Services may be loaded for
logged-out visitors before they choose to sign in.

 * The browser downloads the Google Identity Services library from `https://accounts.
   google.com/gsi/client` when a login button is displayed. The site’s OAuth Client
   ID and standard browser request information are sent to Google.
 * After the visitor chooses a Google account, Google returns a signed identity 
   token to the website. The token contains the account identifier and basic profile
   fields approved by the visitor.
 * The server periodically downloads public signing keys from `https://www.googleapis.
   com/oauth2/v3/certs` to verify tokens. No visitor identity data is sent when 
   public keys are downloaded.

This service is provided by Google under the [Google APIs Terms of Service](https://developers.google.com/terms/)
and [Google Privacy Policy](https://policies.google.com/privacy).

For enabled OAuth providers, the visitor is sent to the provider’s authorization
page. The plugin sends the application Client ID, callback URL, requested basic-
profile/email scopes, and a random state value. The provider sends an authorization
code back to the website. The server exchanges that code and requests the visitor’s
identifier, name, verified email and optional profile image.

 * Facebook endpoints use `facebook.com` and `graph.facebook.com`. [Meta Platform Terms](https://developers.facebook.com/terms/)
   and [Meta Privacy Policy](https://www.facebook.com/privacy/policy/).
 * LinkedIn endpoints use `linkedin.com` and `api.linkedin.com`. [LinkedIn API Terms](https://www.linkedin.com/legal/l/api-terms-of-use)
   and [LinkedIn Privacy Policy](https://www.linkedin.com/legal/privacy-policy).
 * Microsoft endpoints use `login.microsoftonline.com` and `graph.microsoft.com`.
   [Microsoft APIs Terms](https://learn.microsoft.com/legal/microsoft-apis/terms-of-use)
   and [Microsoft Privacy Statement](https://privacy.microsoft.com/privacystatement).
 * Apple endpoints use `appleid.apple.com`. The plugin also downloads Apple’s public
   signing keys to validate ID tokens. [Sign in with Apple terms](https://developer.apple.com/sign-in-with-apple/)
   and [Apple Privacy Policy](https://www.apple.com/legal/privacy/).

### Privacy

When a visitor uses a social provider, that provider returns an account identifier
and basic profile fields such as name, verified email address and profile image.
The plugin stores the provider account identifier and profile image URL in WordPress
user metadata. WordPress core stores the user’s name and email as part of the user
account.

The browser loads Google’s Identity Services JavaScript from `accounts.google.com`
when Google login is configured. Other providers are contacted only when their button
is selected. Site owners should disclose enabled external services in their privacy
policy and obtain any consent required in their jurisdiction.

Plugin metadata is available through WordPress personal-data export and erasure 
tools.

## 설치

 1. Upload the `webplatform-social-login` folder to `/wp-content/plugins/`.
 2. Activate WebPlatform Social Login.
 3. In Google Cloud, create an OAuth 2.0 Client ID of type Web application.
 4. Add your HTTPS website origin under Authorized JavaScript origins.
 5. Open Settings > WebPlatform Social Login and enter the Client ID.
 6. Add `[webplatform_social_login]` to any custom login page, or enable WooCommerce
    placement.

For another provider, create its web application, copy the exact callback URL displayed
in the plugin settings, enter the credentials, and enable the provider.

The settings screen includes step-by-step examples for every provider, including
the current site’s exact origin, domain, callback URLs, required products and requested
scopes.

## FAQ

### Is a Google Client Secret required?

No. This plugin uses the Google Identity Services ID-token flow and validates signed
tokens on the server.

### Does the plugin create users automatically?

Only when account creation is enabled in the plugin and the provider email is verified.

### Can login be limited to an organization?

Yes. Enter one or more comma-separated email domains in the settings.

## 후기

이 플러그인에 대한 평가가 없습니다.

## 기여자 & 개발자

“WebPlatform Social Login”(은)는 오픈 소스 소프트웨어입니다. 다음의 사람들이 이 
플러그인에 기여하였습니다.

기여자

 *   [ WebPlatform ](https://profiles.wordpress.org/jain640/)

[자국어로 “WebPlatform Social Login”(을)를 번역하세요.](https://translate.wordpress.org/projects/wp-plugins/webplatform-social-login)

### 개발에 관심이 있으십니까?

[코드 탐색하기](https://plugins.trac.wordpress.org/browser/webplatform-social-login/)
는, [SVN 저장소](https://plugins.svn.wordpress.org/webplatform-social-login/)를 
확인하시거나, [개발 기록](https://plugins.trac.wordpress.org/log/webplatform-social-login/)
을 [RSS](https://plugins.trac.wordpress.org/log/webplatform-social-login/?limit=100&mode=stop_on_copy&format=rss)
로 구독하세요.

## 변경이력

#### 1.4.4

 * Renamed the plugin to WebPlatform Social Login.
 * Restricted social-login account creation to the low-privilege Customer or Subscriber
   role.

#### 1.4.3

 * Added explicit external-script versioning and documented the required provider-
   identity lookup.

#### 1.4.2

 * Resolved WordPress Plugin Check internationalization, sanitization and compatibility
   findings.

#### 1.4.1

 * Prevented duplicate Google buttons and repeated front-end configuration.

#### 1.4.0

 * Added optional Google One Tap sign-in and registration prompts for logged-out
   visitors.
 * Preserved explicit Facebook, LinkedIn, Microsoft and Apple authorization buttons.

#### 1.3.0

 * Added standard WordPress login and registration placement.
 * Suppressed duplicate output from the obsolete WordPress Social Login plugin.
 * Added migration guidance when the replaced plugin remains active.

#### 1.2.0

 * Added site-specific configuration examples for every provider.
 * Added provider console links, required products, scopes, domains and callback
   instructions.

#### 1.1.0

 * Added Facebook OAuth login.
 * Added LinkedIn OpenID Connect login.
 * Added Microsoft OpenID Connect login.
 * Added Sign in with Apple.
 * Added encrypted credential storage and provider-specific callback settings.

#### 1.0.0

 * Initial release.

## 기초

 *  버전 **1.4.4**
 *  최근 업데이트: **3개월 전**
 *  활성화된 설치 **10+**
 *  워드프레스 버전 ** 6.5 또는 그 이상 **
 *  다음까지 시험됨: **7.0.7**
 *  PHP 버전 ** 8.0 또는 그 이상 **
 *  언어
 * [English (US)](https://wordpress.org/plugins/webplatform-social-login/)
 * 태그:
 * [Facebook login](https://ko.wordpress.org/plugins/tags/facebook-login/)[Google Login](https://ko.wordpress.org/plugins/tags/google-login/)
   [linkedin login](https://ko.wordpress.org/plugins/tags/linkedin-login/)[social login](https://ko.wordpress.org/plugins/tags/social-login/)
   [woocommerce login](https://ko.wordpress.org/plugins/tags/woocommerce-login/)
 *  [고급 보기](https://ko.wordpress.org/plugins/webplatform-social-login/advanced/)

## 평점

아직 제출된 리뷰가 없습니다.

[Your review](https://wordpress.org/support/plugin/webplatform-social-login/reviews/#new-post)

[모든  리뷰 보기](https://wordpress.org/support/plugin/webplatform-social-login/reviews/)

## 기여자

 *   [ WebPlatform ](https://profiles.wordpress.org/jain640/)

## 지원

할 말 있으신가요? 도움이 필요하신가요?

 [지원 포럼 보기](https://wordpress.org/support/plugin/webplatform-social-login/)