This plugin adds a complete authentication layer for headless sites built with a CMS using WPGraphQL. It is designed for developers building decoupled frontends, such as React or Vue.js applications, that need to securely manage user sessions through a GraphQL API.

• Multiple Authentication Methods: Supports traditional username/password login, OAuth2, OpenID Connect (e.g., Google, GitHub), and JWT tokens, providing flexibility for different project requirements.
• Token-Based Sessions: Generates short-term access tokens and long-term refresh tokens, allowing for secure, persistent user sessions in your frontend application without relying on traditional cookies.
• Extensible Provider System: Allows developers to add custom authentication providers or modify existing ones through WordPress filters and actions, adapting the login flow to specific needs.
• Session Management: Provides GraphQL mutations to log users out and revoke tokens, and includes administrative tools to manage all active sessions for a user from the backend.
• WPGraphQL Integration: Works directly with the WPGraphQL schema, adding mutations for login, logout, and token refresh, and queries to check authentication status and available login providers.