Social Login Pro
Add-on ID: kv_social_login_pro · Edition: CS-Cart & Multi-Vendor · Latest version: 1.0.0 · Compatible with: CS-Cart & Multi-Vendor 4.17.2 – 4.21.x, PHP 7.4 – 8.3 · Changelog: view
Social Login Pro lets customers sign in and register with the accounts they already have: Google, Apple, Microsoft, Facebook, Amazon, LinkedIn, Discord or any OpenID Connect provider of your own. Google One Tap signs returning shoppers in from any page with one click. Customers connect and disconnect providers in their profile, and on a marketplace vendors can sign in to the vendor panel the same way. The built-in Social login of CS-Cart offers Google, Facebook, X and Telegram; this add-on adds Sign in with Apple, Microsoft and the other providers, One Tap, a modern button design, account linking and statistics, and it can take over the customers already connected there.
- Eight providers: Google, Apple (required by many iPhone users), Microsoft (personal, work and school accounts), Facebook, Amazon, LinkedIn, Discord, and a custom OpenID Connect provider (for example Okta, Auth0 or Keycloak) with its own button label.
- Google One Tap: the Google prompt in the corner of any page for visitors signed in to Google. Optional automatic sign-in for returning customers.
- Buttons that fit your theme: the official provider colours, an outline style or a row of round icons; rounded, pill or square; stacked or in a grid; below or above the form. Shown in the sign-in pop-up, on the sign-in page, at checkout and on the registration page.
- Accounts done right: a known provider account signs in at once; a confirmed e-mail of an existing customer connects to that account (or asks for its password once, your choice); a new customer gets an account with name and e-mail from the provider. Passwords are never sent by e-mail. Guest carts and orders stay with the customer.
- Connected accounts in the profile: customers see which providers are connected, connect more and disconnect them. The last way to sign in can’t be removed by mistake.
- Vendor panel sign-in (Multi-Vendor): vendor administrators sign in with a connected provider or their confirmed e-mail, and manage their connections in the vendor profile.
- Statistics: sign-ins, new accounts, connections, failures with reasons, completion rate and One Tap share per provider and day.
- Secure by design: authorization code flow with state, nonce and PKCE; signed ID tokens verified against the provider keys; the flow is bound to the browser that started it; client secrets stored encrypted; the Apple client secret is signed for each sign-in from your key, so it never expires.
- Moving from the built-in Social login: one click imports the Google and Facebook keys and keeps the customers who are connected there.
Documentation
Section titled “Documentation”| Page | Contents |
|---|---|
| Installation | Requirements, installing, upgrading, uninstalling |
| Configuration | Providers and their keys, settings, One Tap, vendors, license |
| Usage | The customer flows, connected accounts, vendors, statistics, Multi-Vendor and Ultimate |
| Developer notes | Protocols and security, data model, endpoints, hooks, file map |
| FAQ | Common questions |
Compatibility
Section titled “Compatibility”| CS-Cart / Multi-Vendor | 4.17.2 – 4.21.x (Ultimate and Multi-Vendor editions) |
| PHP | 7.2.5 – 8.3 (whatever your CS-Cart version supports), OpenSSL and cURL extensions |
| Themes | Responsive and themes based on it (Bright, Nova and others) |
| Full page cache (4.21) | Supported: the buttons are the same for every visitor, all sign-in pages are never cached |
| Built-in Social login (hybrid_auth) | Works side by side; import of Google and Facebook connections |