VentraConnect – Social Login, Magic Link & Email OTP (Passwordless)

1.2.0

• New: Magic Link and Email OTP passwordless login are now available in the free plugin
  on core WordPress login/registration screens and shortcode-based login pages.
• Improved: Added per-method redirect overrides for Magic Link and Email OTP (same page,
  referer, homepage, custom URL), with stronger redirect validation.
• Security: Hardened redirect handling and clarified how default redirect URLs interact
  with passwordless overrides.
• Tweak: Updated readme and UI labels to reflect the new Free vs Pro split.

1.1.0

• Improved: Unified account guardrail checks into a shared helper so social login behaves more consistently across core WordPress login screens and WooCommerce My Account (pro).
• Improved: The ventraconnect_sl_can_create_user filter is now applied in a single place before any new account is created, making it easier to customise or lock down account creation rules.
• Tweak: Internal refactors to the guardrail system to better support Pro-only passwordless login methods, without changing behaviour for sites using the free plugin only.

1.0.5

• Security: Hardened validation, escaping and capability checks around social login flows and settings pages in line with WordPress.org review feedback.
• Security: Reduced or removed debug output and ensured sensitive data is not exposed in logs by default.
• Tweak: Minor internal code cleanups to better align with WordPress.org plugin guidelines.

1.0.4

• Tweak: Updated readme and plugin listing copy to clarify Free vs Pro features and improve discoverability. No functional changes.

1.0.3

• New: Account guardrail option to allow or block new user creation on core WordPress login/registration screens when using social login.
• New: Email notifications for admin and user when a new account is created via social login.
• Tweak: UI and settings layout improvements in the admin.
• Tweak: Confirmed compatibility with WordPress 6.9.

1.0.2

• Fix: Prevent rare “Class VentraConnectSocialLoginProvidersFacebook not found” fatal on some hosting environments.

1.0.1

• Fix: Shortcode redirect_to parameter is now respected and no longer overridden by the global redirect setting.
• Fix: Default login vs registration redirect URLs are applied correctly after social login.
• Fix: Redirects are now more reliable when HOME/SITEURL or www/non-www hosts differ.
• Tweak: Hardened OAuth callback/state handling to make popup and REST-based flows more robust.

1.0.0

• Initial release.