IndieAuth

IndieAuth is a way to allow users to use their own domain to sign into other websites and services.

v4.6.0IndieWebUpdated Added 400 installs100% rating
91
Score
34
Errors
41
Warnings
+57
Change

Category Scores

Security100
Repo100
Performance100
Maintainability56

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

75 findings

Maintainability

75

13 issue groups

ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;19
Category
Maintainability
Occurrences
19
Severity
error

Sample message

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

WARNINGMaintainabilityNon-prefixed functionFunctions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "add_query_params_to_url".17
Category
Maintainability
Occurrences
17
Severity
warning

Sample message

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "add_query_params_to_url".

WARNINGMaintainabilityNon-prefixed classClasses declared by a theme/plugin should start with the theme/plugin prefix. Found: "External_Token_Page".9
Category
Maintainability
Occurrences
9
Severity
warning

Sample message

Classes declared by a theme/plugin should start with the theme/plugin prefix. Found: "External_Token_Page".

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$checked".7
Category
Maintainability
Occurrences
7
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$checked".

ERRORMaintainabilitycurl curl setoptUsing cURL functions is highly discouraged. Use wp_remote_get() instead.6
Category
Maintainability
Occurrences
6
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERRORMaintainabilityparse url parse urlparse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.5
Category
Maintainability
Occurrences
5
Severity
error

Sample message

parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.

WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "http_headers_useragent".4
Category
Maintainability
Occurrences
4
Severity
warning

Sample message

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "http_headers_useragent".

WARNINGMaintainabilityupgrade notice limitThe upgrade notice for "3.0.0" exceeds the limit of 300 characters.3
Category
Maintainability
Occurrences
3
Severity
warning

Sample message

The upgrade notice for "3.0.0" exceeds the limit of 300 characters.

WARNINGMaintainabilityNon-prefixed namespaceNamespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "Mf2".1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Namespaces declared by a theme/plugin should start with the theme/plugin prefix. Found: "Mf2".

ERRORMaintainabilitycurl curl closeUsing cURL functions is highly discouraged. Use wp_remote_get() instead.1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

Show 3 more
ERRORMaintainabilitycurl curl exec1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERRORMaintainabilitycurl curl getinfo1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

ERRORMaintainabilitycurl curl init1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Using cURL functions is highly discouraged. Use wp_remote_get() instead.

External Connections

Potential connections found in static code analysis.

11 domains

Outbound calls

26

External assets

0

Incoming endpoints

13

Notable Domains

indieweb.org8 · outbound
fedidcg.github.io3 · outbound
microformats.org3 · outbound
indieauth.rocks1 · outbound
php.net1 · outbound

Platform / Reference Domains

github.com5 · platform/reference
opensource.org1 · platform/reference
w3.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

/wp-json/indieauth/1.0/tokenREST

register_rest_route

/wp-json/indieauth/1.0/authREST

register_rest_route

/wp-json/indieauth/1.0/fedcm/accountsREST

register_rest_route

/wp-json/indieauth/1.0/fedcm/assertionREST

register_rest_route

/wp-json/indieauth/1.0/fedcm/client_metadataREST

register_rest_route

/wp-json/indieauth/1.0/fedcm/config.jsonREST

register_rest_route

Score History

2 score snapshots

+57
1007550250Jun 25, 2026, 10:45 PM UTC Score 34/100 Plugin v4.5.5 Plugin Check 2.0.0 36 errors, 109 warningsJul 2, 2026, 03:43 PM UTC Score 91/100 Plugin v4.6.0 Plugin Check 2.0.0 34 errors, 41 warningsJun 25, 2026Jul 2, 2026

v4.6.0

91

Latest

Findings
75
Errors
34
Warnings
41
Check
2.0.0

v4.5.5

34

Score

Findings
145
Errors
36
Warnings
109
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

36 nodes

Related Plugins

Firebase Authentication

500 active installs

100
Logged-in-only

700 active installs

100
Login Security Captcha

10k+ active installs

100
Protect Login

600 active installs

100
Shibboleth

3k+ active installs

100
Simple Login Log

5k+ active installs

100