Title: Talao Wallet Login for EUDI Wallet Author: thierrythevenet Published: November 11, 2026 Last modified: November 11, 2026 --- Search plugins ![](https://ps.w.org/talao-wallet-login-eudi/assets/banner-772x250.png?rev=3796993) ![](https://ps.w.org/talao-wallet-login-eudi/assets/icon-256x256.png?rev=3796993) # Talao Wallet Login for EUDI Wallet By [thierrythevenet](https://profiles.wordpress.org/thierrythevenet/) [Download](https://downloads.wordpress.org/plugin/talao-wallet-login-eudi.0.1.13.zip) * [Details](https://wordpress.org/plugins/talao-wallet-login-eudi/#description) * [Reviews](https://wordpress.org/plugins/talao-wallet-login-eudi/#reviews) * [Installation](https://wordpress.org/plugins/talao-wallet-login-eudi/#installation) * [Development](https://wordpress.org/plugins/talao-wallet-login-eudi/#developers) [Support](https://wordpress.org/support/plugin/talao-wallet-login-eudi/) ## Description Published by Web3 Digital Wallet (Talao). This is an independent connector, not an official European Union or Member State Wallet plugin. It is not affiliated with or endorsed by the European Union or Member State Wallet providers. The plugin is free software under GPLv2 or later. Any subscription fees apply to the separately hosted verification service, not to unlocking plugin code. Adds a Wallet login button to the WordPress login form, WooCommerce login form when present, and the [eudi_wallet_login] shortcode. Authorization Code, PKCE S256, signed ID Token validation and browser-bound single-use state are enabled without extra security settings. PHP OpenSSL and Sodium are required. Existing accounts are never matched or merged by email. Users can link their Wallet from their own WordPress profile after confirming their local password. New account creation is disabled until the administrator explicitly enables it. New users receive Subscriber, or Customer if that role exists and is selected. No administrator roles are issued by this plugin. #### Video tutorials Follow the setup using recorded test interfaces and fictional data. These installation tutorials do not demonstrate a complete real Wallet authentication. They use AI- generated narration and have no supplied subtitle tracks. WordPress installation and configuration (English): Create your EUDI Wallet connection (English): French tutorials: WordPress installation: https://www.youtube.com/watch?v=v8NCgQEXTcU Create your connection: https://www.youtube.com/watch?v=Hf0SNF6U9fs ### External service This plugin requires an OIDC provider; the default is the EUDI OIDC Bridge at https:// login.openid4vc-hub.com. Saving settings alone makes no provider request. Starting Wallet login contacts its Discovery endpoint; completing login exchanges the code server-side, fetches JWKS and UserInfo. The provider receives the client ID, registered callback, requested scopes, random state/nonce/PKCE challenge and client authentication at the token endpoint. Identity verification is handled by the provider and the Wallet. WordPress receives only authorized OIDC attributes. Contact email, when requested, is verified separately by the bridge after identity verification. JSON import reads the downloaded credentials locally in the browser; it does not upload the file to the provider. The file contains a client secret and must be kept private. Imported values are saved only after the administrator selects Save configuration. Secrets are encrypted in WordPress storage and not redisplayed. The free signup button opens the provider’s /register page in a new tab; no WordPress password or local user information is sent by that button. The form requests company/ contact details, a verified developer email, an application name, an exact callback URL and the identity/age purpose. The client is created only after email verification. No shared client credentials, Hub API keys or tracking service are included. Provider privacy: https://wallet-connectors.com/privacy/?lang=en Provider terms: https://wallet-connectors.com/terms/?lang=en Review service availability, quotas and applicable terms with your provider. ### Hosted service pricing The WordPress plugin is free. The default hosted verification service offers a Free plan and an optional paid Pro subscription; payment is for the hosted service, not for unlocking code or features in this plugin. Free includes 100 verification attempts per UTC calendar month, with a maximum of 10 per UTC day. Pro costs EUR 39 excluding VAT per month and includes 3,000 verification attempts per UTC calendar month, with a maximum of 300 per UTC day. Failed or abandoned verification starts count toward these service quotas. Pro renews automatically each month until cancelled. Manage or cancel the subscription through the service billing page and its Stripe customer portal. Cancellation takes effect at the end of the paid period. Removing this plugin or stopping its use does not cancel the hosted subscription. The provider enforces the quotas. Changing the plan does not require a new Client ID, a new client secret or changes to the WordPress configuration. Subscriptions and payments take place on the service website, outside WordPress. Subscription availability is controlled by the service; not every Client ID is currently enabled for paid signup. Current plans and conditions: https://wallet-connectors.com/pricing/?lang=en Manage or cancel a subscription: https://wallet-connectors.com/billing/?lang=en ### Storage and recovery The client secret and temporary login data are encrypted using a key derived from the WordPress auth salt. Rotating salts invalidates encrypted data: re-enter the client secret and start a new login. The EUDI_WALLET_CLIENT_SECRET constant in wp- config.php can hold the secret instead of the options table. Do not commit it. Subject associations are stored as issuer/subject hashes linked to local user IDs. Account profile attributes are saved only when the account is created; subsequent Wallet logins do not overwrite local names, email, roles or password. Expired transactions are rejected immediately and removed by hourly WP-Cron or on the next login attempt. Deactivation clears transactions and preserves account associations/settings. No user, identity binding or settings deletion is automatic. ### Age verification mode Choose Age verification (18+) in the bridge signup form and plugin settings. The dedicated age client uses openid age_verification and never requests email. Only a signed age_over_18=true result is accepted, with matching UserInfo. It opens a protected browser age session for five minutes, without creating or signing into a WordPress account. The ephemeral OIDC sub is discarded. Age mode gates public WordPress page rendering and public REST access. Keep a local administrator login for recovery. Configure page/CDN caches to bypass this site’s protected responses and the age cookie: a cache may respond before PHP. Direct media/ file URLs served by your web server are not protected by PHP and need separate access rules. Disable or redact callback query strings in hosting access logs; authorization codes must not be retained there. Age verification is not a regulatory compliance certification and does not prevent use of a shared browser/device. Test the complete HTTPS Wallet flow on your site before opening protected content to users. ### Return after cancellation The connector remembers the local page from which Wallet login was started. Cancel and return to application on the Wallet login screen first returns to the registered callback; the plugin then returns to that original page with a message. This also handles callback errors after state and browser validation. A missing, expired or invalid transaction shows a safe recovery page instead. External return URLs are rejected. The registered callback remains unchanged. The message uses a one-time encrypted Secure/HttpOnly cookie lasting at most two minutes. Configure page/CDN caches to bypass the __Host-eudi_wp_notice cookie, as well as the protected age cookie. No provider error details or identity data are stored in that notice. ## Installation 1. Install Talao Wallet Login for EUDI Wallet through Plugins > Add New, or upload its ZIP through Plugins > Add New > Upload Plugin, then activate it. Upgrading from EUDI Wallet Login: deactivate the old plugin before activating this renamed plugin. Keep its saved settings and tables; do not run both. The callback URL and[ eudi_wallet_login] shortcode remain unchanged. 2. Open Settings > Talao Wallet Login for EUDI Wallet. Age verification (18+) is selected by default for a new installation; choose Identity verification if you need user sign-in. 3. Copy your return URL using Copy URL, then select Register my site (opens a new tab). 4. Paste the exact return URL into the registration form, complete your details, and verify your email address using the code received. 5. On the confirmation page, download the configuration JSON. Keep it private. 6. Return to WordPress and choose the downloaded configuration file. A separate screen shows its name and the configuration, with the secret hidden. Select Save configuration. No Client ID or secret needs to be typed. 7. After saving, the settings page opens directly on the saved configuration. Select Import another configuration to return to setup when needed. The setup screen uses French or English according to your browser’s language preferences, with English as the fallback. Manual configuration is collapsed by default. Existing saved settings are preserved. Identity mode can optionally request verified contact email and create accounts. Both options are off by default. For an open identity site, enable Allow new accounts to be created and keep the Subscriber role. Otherwise, a verified identity without an already linked account is refused by WordPress even after a successful Wallet presentation. Restricted sites should keep account creation disabled and link accounts explicitly. Age mode creates no account. Use [eudi_wallet_member_area] for a page with distinct visitor and signed-in views. Signed-in users see their first name only (or a generic greeting when missing), a profile link and a nonce-protected sign-out link. Existing local names are not overwritten on subsequent Wallet logins. Exclude this page from shared caches. The panel reflects a WordPress session; it does not certify its login method. After a positive age verification, a one-time confirmation says “Bravo! Your age has been verified.” Select “Continue to the site” to close it. The plugin returns to the local page that started verification; the five-minute age access remains active after closing the confirmation. Without JavaScript, a status message is shown instead. Cancellation and failed checks never display success. Advanced settings contains Issuer, Callback, Scopes, Token authentication and new- account role. JSON import validates the exact callback and credentials; changing verification mode preserves the separate previously saved credentials. Documentation: https://openid4vc-hub.com/api/docs/bridge.html#86-wordpress-setup Contact: contact@talao.io Publisher: Web3 Digital Wallet (Talao), https://talao.io Source code: all runtime PHP, JavaScript and CSS is supplied in readable form in this package, together with Composer manifests and dependency licences. No private repository access is needed to inspect or run the plugin. Public source ZIP: https://wallet-connectors.com/api/ docs/wordpress-plugin.zip HTTPS is required. Local WordPress login remains available. No network-wide multisite support, automatic user linking, refresh tokens or provider logout. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “Talao Wallet Login for EUDI Wallet” is open source software. The following people have contributed to this plugin. Contributors * [ thierrythevenet ](https://profiles.wordpress.org/thierrythevenet/) [Translate “Talao Wallet Login for EUDI Wallet” into your language.](https://translate.wordpress.org/projects/wp-plugins/talao-wallet-login-eudi) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/talao-wallet-login-eudi/), check out the [SVN repository](https://plugins.svn.wordpress.org/talao-wallet-login-eudi/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/talao-wallet-login-eudi/) by [RSS](https://plugins.trac.wordpress.org/log/talao-wallet-login-eudi/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 0.1.13 * Link the hosted service’s own privacy policy and terms. Clarify the GPL plugin and separate hosted service, and document directory installation. No runtime changes. #### 0.1.12 * Add English and French setup video tutorials to the directory description. * Show a personal greeting, profile and nonce-protected sign-out when signed in. Add [eudi_wallet_member_area] for separate visitor and member views. #### 0.1.11 * Display an 18+ verified badge during the five-minute age session, with a browser- bound POST action to end it and test again. WordPress account login is unchanged. #### 0.1.10 * Keep public pages and REST accessible until an age client is configured. Preserve protection on configured sites, including secret failures. #### 0.1.9 * Rename the independent plugin and translation domain to identify Talao as the publisher. Preserve stored settings, encryption, callback URLs and the existing shortcode. * Clarify that the plugin is not an official European Union or Member State Wallet plugin. #### 0.1.8 * Clarify the free plugin, hosted Free/Pro verification plans, VAT-exclusive monthly price, recurring billing and cancellation. No authentication or storage changes. #### 0.1.7 * Add an explicit public demonstration mode: age verification and success feedback work while explanatory pages remain accessible to visitors and search engines. Content protection remains enabled by default. #### 0.1.6 * Show a one-time accessible success dialog after a verified positive age result. * Return to the local page that started age verification; retain the five-minute access. * Success feedback is bound to the encrypted age proof, with no public URL success flag. #### 0.1.5 WordPress.org preparation: escape generated HTML at output, validate and unslash HTTP inputs, prepare SQL table identifiers, and use a restricted safe provider redirect. Preserve single-use state, PKCE, account linking and encrypted storage. Document justified checker exceptions for core hooks and atomic custom SQL. Include Composer manifests for dependency provenance. #### 0.1.4 Cancellation and callback errors return to the calling local page with a one-time message after browser/state validation. Invalid or expired state uses safe recovery. The settings page includes a local Talao logo linking to talao.io. #### 0.1.3 Configuration import opens a dedicated review screen showing the imported file name and public settings. Saved sites reopen on the configuration screen. The client secret remains hidden; import does not save settings automatically. #### 0.1.2 Five-step setup with return URL copy and configuration JSON import. French/English setup follows browser language; manual credentials are collapsed by default. Existing settings, PKCE and token validation are preserved. #### 0.1.1 Simplified active Client ID/secret form, browser-only bridge JSON import, advanced OIDC settings, documentation/contact links and preserved separate credentials. #### 0.1.0 Development preview with isolated WordPress OIDC client and free signup access. Automated tests are not proof of a complete real Wallet login. ## Meta * Version **0.1.13** * Last updated **2 days ago** * Active installations **Fewer than 10** * WordPress version ** 6.5 or higher ** * Tested up to **7.1.4** * PHP version ** 8.1 or higher ** * Tags * [authentication](https://wordpress.org/plugins/tags/authentication/)[login](https://wordpress.org/plugins/tags/login/) [openid connect](https://wordpress.org/plugins/tags/openid-connect/)[wallet](https://wordpress.org/plugins/tags/wallet/) * [Advanced View](https://wordpress.org/plugins/talao-wallet-login-eudi/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/talao-wallet-login-eudi/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/talao-wallet-login-eudi/reviews/) ## Contributors * [ thierrythevenet ](https://profiles.wordpress.org/thierrythevenet/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/talao-wallet-login-eudi/)