SimplyMade Connector lets a site administrator authorize a read-only site\nidentity check for a client workspace in SimplyMade Social. A SimplyMade\nwebsite plan and client portal account are required for the hosted service.\nThe plugin does not publish, edit, delete, track visitors, add users, or create\nWordPress Application Passwords. Installing or activating it makes no outbound\nrequest. The administrator explicitly clicks Connect to begin pairing.<\/p>\n\n
The WordPress REST route External service: when the administrator clicks Connect to SimplyMade, the\nplugin sends a short-lived, one-use code, canonical HTTPS site address, random\ngrant ID and freshly generated scoped token to\n https:\/\/portal.simplymadesocial.com\/v1\/wordpress\/plugin-pair over verified\nHTTPS. SimplyMade checks the code against the portal requester, workspace and\nsite, then stores the token encrypted. SimplyMade later sends the token only\nin a read-only HTTPS connection-check request to this site's route. The site\nstores a SHA-256 token digest, grant ID, authorizing user ID and state in a\nnon-autoload WordPress option; it does not store the token in plaintext. The\nservice stores connection identity, state, and verification results. No data\nis sent before the administrator clicks Connect, and there is no visitor\ntracking or telemetry from this plugin. See the SimplyMade privacy policy<\/a>\nand terms<\/a>.<\/p>\n\n\n Only enter a code for a site and workspace that you are authorized to connect.\nThe code and token are sent in the HTTPS request body, never in a URL.<\/p>\n\n\n No. The pairing token works only for the plugin's connection-check route.<\/p><\/dd>\n Disconnect in the SimplyMade portal to stop server-side access. Also click\nDisconnect and revoke local access under Settings > SimplyMade Connector.\nSimplyMade erases its encrypted token after revocation is confirmed. Deactivate\nor uninstall also removes the site's local grant.<\/p><\/dd>\n Do not reuse the code. A timeout can have an uncertain server outcome. Remove\nthe pending grant in WordPress and ask SimplyMade to retire the pending\nconnection before requesting a new code.<\/p><\/dd>\n\n<\/dl>\n\n\n\/wp-json\/simplymade\/v1\/connection<\/code> returns the site\naddress, blog ID, authorizing user ID, grant ID, HTTPS status, and read-only\nscope to a caller presenting the plugin's scoped token. The token does not\nauthorize WordPress core post, page, theme, or plugin APIs. Publishing would\nrequire a separate, explicit future authorization and is not part of this\nread-only pairing.<\/p>\n\n\n
\/wp-json\/<\/code> REST route; WordPress core may itself live in a subdirectory.<\/li>\n\n
Can this plugin publish posts?<\/h3><\/dt>\n
How do I disconnect?<\/h3><\/dt>\n
What if pairing times out?<\/h3><\/dt>\n
0.2.0<\/h4>\n\n
\n