Skip to content
- Add-on id
kv_google_login, tables kv_ggl_*, namespace Tygh\Addons\KvGoogleLogin.
- Generated from the Social Login Pro code base (
addons/social_login_pro/editions/build.py): same flow, provider list limited to Google.
- Verification: Google ID token: RS256 signature against Google’s published keys, issuer accounts.google.com, audience = your client ID, expiry and the nonce of this sign-in. The e-mail counts as confirmed only with
email_verified.
- Flow: state (single use, 15 minutes), browser-binding cookie, PKCE where the provider supports it, encrypted secrets (AES-256-CBC + HMAC with a key derived from the store’s crypt key).
- PHP hooks:
post_delete_user, update_profile; template hooks index:login_buttons, index:scripts, index:styles, profiles:account_update; no core changes.
- Full page cache: the button markup depends only on settings and keys (same for every visitor).
Edition::deferred(): true while kv_social_login_pro is active.
