{"id":251283,"date":"2025-09-18T07:21:42","date_gmt":"2025-09-18T07:21:42","guid":{"rendered":"https:\/\/ja.wordpress.org\/plugins\/auto-login-for-sakura-rental-server\/"},"modified":"2026-04-08T06:04:37","modified_gmt":"2026-04-08T06:04:37","slug":"auto-login-for-sakura-rental-server","status":"publish","type":"plugin","link":"https:\/\/pt-ao.wordpress.org\/plugins\/auto-login-for-sakura-rental-server\/","author":15005257,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_crdt_document":"","version":"1.0.5","stable_tag":"1.0.5","tested":"6.8.5","requires":"5.0","requires_php":"7.4","requires_plugins":null,"header_name":"Auto Login for Sakura Rental Server","header_author":"SAKURA internet Inc.","header_description":"Provides one-time, time-limited auto-login URLs using HMAC signatures.","assets_banners_color":"bfa1a7","last_updated":"2026-04-08 06:04:37","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"","header_author_uri":"","rating":0,"author_block_rating":0,"active_installs":5000,"downloads":9876,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0.0":{"tag":"1.0.0","author":"sakurainternet","date":"2025-09-18 07:21:12"},"1.0.1":{"tag":"1.0.1","author":"sakurainternet","date":"2025-12-03 04:08:27"},"1.0.2":{"tag":"1.0.2","author":"sakurainternet","date":"2026-04-02 00:32:47"},"1.0.3":{"tag":"1.0.3","author":"sakurainternet","date":"2026-04-02 01:12:49"},"1.0.4":{"tag":"1.0.4","author":"sakurainternet","date":"2026-04-06 00:32:06"},"1.0.5":{"tag":"1.0.5","author":"sakurainternet","date":"2026-04-08 06:04:37"}},"upgrade_notice":{"1.0.1":"<ul>\n<li>Fixed a bug. Users should update.<\/li>\n<\/ul>","1.0.2":"<ul>\n<li>Internal changes. Users should update.<\/li>\n<\/ul>","1.0.3":"<ul>\n<li>Readme changes only.<\/li>\n<\/ul>","1.0.4":"<ul>\n<li>Readme changes only.<\/li>\n<\/ul>","1.0.5":"<ul>\n<li>Fixed a bug. Users should update.<\/li>\n<\/ul>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3363739,"resolution":"128x128","location":"assets","locale":""},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3363739,"resolution":"256x256","location":"assets","locale":""},"icon.svg":{"filename":"icon.svg","revision":3363739,"resolution":false,"location":"assets","locale":false}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3363739,"resolution":"1544x500","location":"assets","locale":""},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3363739,"resolution":"772x250","location":"assets","locale":""}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5"],"block_files":[],"assets_screenshots":[],"screenshots":[],"jetpack_post_was_ever_published":false},"plugin_section":[],"plugin_tags":[9567,17844,602,333],"plugin_category":[38],"plugin_contributors":[139382],"plugin_business_model":[],"class_list":["post-251283","plugin","type-plugin","status-publish","hentry","plugin_tags-auto-login","plugin_tags-cli","plugin_tags-login","plugin_tags-token","plugin_category-authentication","plugin_contributors-sakurainternet","plugin_committers-sakurainternet"],"banners":{"banner":"https:\/\/ps.w.org\/auto-login-for-sakura-rental-server\/assets\/banner-772x250.png?rev=3363739","banner_2x":"https:\/\/ps.w.org\/auto-login-for-sakura-rental-server\/assets\/banner-1544x500.png?rev=3363739","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":"https:\/\/ps.w.org\/auto-login-for-sakura-rental-server\/assets\/icon.svg?rev=3363739","icon":"https:\/\/ps.w.org\/auto-login-for-sakura-rental-server\/assets\/icon.svg?rev=3363739","icon_2x":false,"generated":false},"screenshots":[],"raw_content":"<!--section=description-->\n<p><strong>Auto Login for Sakura Rental Server<\/strong> allows administrators to issue one-time, time-limited auto-login URLs using HMAC signatures.<br \/>\nThis is useful for secure temporary access or system integration.<\/p>\n\n<p>Features:\n- Secure auto-login with one-time tokens\n- Tokens are HMAC-signed and invalidated after use\n- Token issuance and usage history (up to 100 entries per user)\n- Records IP address and username of the issuer\n- Rate limiting: 1 request per second per IP\n- WP-CLI commands for token generation and history inspection<\/p>\n\n<p>Example use cases:\n- Temporarily granting admin access\n- Safe automatic login from external systems\n- Keeping an audit log of who issued a token and from where<\/p>\n\n<h3>Usage<\/h3>\n\n<h3>Generate a token via CLI<\/h3>\n\n<pre><code>wp auto-login-for-sakura-rental-server generate &lt;user_id&gt; [\u2013expires=] [\u2013remote_addr=] [\u2013username=]\n<\/code><\/pre>\n\n<p>Example:<\/p>\n\n<ul>\n<li>Default expiration time: 300 seconds  <\/li>\n<li><code>--expires<\/code> and <code>--username<\/code> are optional<\/li>\n<\/ul>\n\n<h3>Check issue history<\/h3>\n\n<p>Token history is stored in the user meta key <code>sakura_auto_login_history<\/code>.<br \/>\nYou can check it via WP-CLI:<\/p>\n\n<p>wp user meta get  sakura_auto_login_history<\/p>\n\n<h3>Auto-login URL format<\/h3>\n\n<pre><code>https:\/\/example.com\/?rs_auto_login_token=&lt;64-character HMAC token&gt;\n<\/code><\/pre>\n\n<p>Visiting the URL will log in as the corresponding user and redirect to the admin dashboard.<\/p>\n\n<h3>Security Notes<\/h3>\n\n<ul>\n<li>Tokens are invalidated immediately after use (one-time only)<\/li>\n<li>Issue and usage history includes IP address, issuer username, and timestamps<\/li>\n<li>Stored using <code>update_option()<\/code> for caching compatibility<\/li>\n<li>HTTPS is strongly recommended<\/li>\n<\/ul>\n\n<!--section=installation-->\n<ol>\n<li>Upload the plugin to <code>\/wp-content\/plugins\/auto-login-for-sakura-rental-server\/<\/code>.<\/li>\n<li>Activate it through the <strong>Plugins<\/strong> menu in WordPress.<\/li>\n<\/ol>\n\n<!--section=faq-->\n<dl>\n<dt id=\"can%20i%20revoke%20a%20token%20manually%3F\"><h3>Can I revoke a token manually?<\/h3><\/dt>\n<dd><p>Yes. Run <code>sakura_auto_login_delete_token('&lt;token&gt;')<\/code>.<\/p><\/dd>\n<dt id=\"what%20happens%20if%20the%20url%20leaks%3F\"><h3>What happens if the URL leaks?<\/h3><\/dt>\n<dd><p>Anyone with the URL can log in as the target user until the token expires. Always use HTTPS and handle URLs carefully.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>Initial release<\/li>\n<\/ul>\n\n<h4>1.0.1<\/h4>\n\n<ul>\n<li>Bugfix release<\/li>\n<\/ul>\n\n<h4>1.0.2<\/h4>\n\n<ul>\n<li>Internal changes release<\/li>\n<\/ul>\n\n<h4>1.0.3<\/h4>\n\n<ul>\n<li>Readme changes release<\/li>\n<\/ul>\n\n<h4>1.0.4<\/h4>\n\n<ul>\n<li>Readme changes release<\/li>\n<\/ul>\n\n<h4>1.0.5<\/h4>\n\n<ul>\n<li>Bugfix release<\/li>\n<\/ul>","raw_excerpt":"Provides one-time auto-login URLs with HMAC signatures and time limits.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/pt-ao.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/251283","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pt-ao.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/pt-ao.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/pt-ao.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=251283"}],"author":[{"embeddable":true,"href":"https:\/\/pt-ao.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/sakurainternet"}],"wp:attachment":[{"href":"https:\/\/pt-ao.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=251283"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/pt-ao.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=251283"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/pt-ao.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=251283"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/pt-ao.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=251283"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/pt-ao.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=251283"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/pt-ao.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=251283"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}