內容簡介
總結：這個外掛程式可以透過 wp_remote_get 呼叫以 https://www.zynatic.se/ 的方式從 Zynatic Medlemsregister 進行驗證。這項驗證是經過多個步驟執行，以降低使用者憑據外洩的風險。
1. WordPress 將初始訊息送到 https://www.zynatic.se/ 並在回應中收到一個公鑰
2. WordPress 使用收到的公鑰對使用者憑據進行加密
3. WordPress 將加密後的憑據送到 https://www.zynatic.se/
4. https://www.zynatic.se/ 使用自己的私鑰解密憑據並驗證憑據
5. https://www.zynatic.se/ 回覆，通知是否憑據驗證正確並允許使用者登入
問題與答案:
1. 如何使用這個外掛進行認證？
- 可以透過 wp_remote_get 呼叫連接至 https://www.zynatic.se/ 透過 Zynatic Medlemsregister 進行認證。
2. 在驗證整個過程中，WordPress 做了哪些步驟來確保使用者憑據不外洩？
- WordPress 先送出初始訊息至 https://www.zynatic.se/ 取得公鑰，再用該公鑰加密使用者的憑據，才會將加密後的憑據發送至 https://www.zynatic.se/ 進行驗證。
3. 如果使用者在 https://www.zynatic.se/ 中的名稱不存在，會發生什麼狀況？
- 如果使用者在 https://www.zynatic.se/ 中的名稱不存在，但其憑據在 WordPress 中正確，或名稱在 https://www.zynatic.se/ 與 WordPress 相等時，則會在 https://www.zynatic.se/ 中創建該使用者。
4. 什麼情況下會在 WordPress 中創建使用者？
- 在使用者憑據在 https://www.zynatic.se/ 驗證正確且在 WordPress 中不存在時，將在 WordPress 中創建使用者。
5. 超級管理員在 WordPress 中是否可以存取權限？
- 是的，即使使用者在 https://www.zynatic.se/ 中不存在，WordPress 超級管理員仍被授予在 WordPress 中的存取權限。
外掛標籤
開發者團隊
原文外掛簡介
This plugin enable authentication from Zynatic Medlemsregister by wp_remote_get call to https://www.zynatic.se/
The authentication is performed in several steps to reduce the risk of leakage of user credentials
1. WordPress sends an initiate to https://www.zynatic.se/ and receives a public key in the responce
2. WordPress encrypts user credentials using the received public key
3. WordPress sends the encrypted credentials to https://www.zynatic.se/
4. https://www.zynatic.se/ decrypt the credentials using its own secret key and validate credentials
5. https://www.zynatic.se/ sends a responce informing if the credentials is validated correctly and the user is allowed to login
The user is created in https://www.zynatic.se/ if the username is missing in https://www.zynatic.se/, the credentials are validated
ok in WordPress and the name are equal in https://www.zynatic.se/ and WordPress.
The user is created in WordPress if the user credentials is validated ok in https://www.zynatic.se/ and the user is missing in WordPress.
A WordPress super admin user is granted access in WordPress even if the user is missing in https://www.zynatic.se/.
External services
This plugin connects to an API to verify user credentials, it’s needed to verify credentials in Zynatic Medlemsregister.
The user credentials are sent to https://www.zynatic.se/ for validation during the login process in WordPress.
It sends the user’s credentials, usernamne, password and secret key, encrypted using a public key received from Zynatic Medlemsregister. The public encryption key is unique for each login attempt.
The required initial parameters KundId (customer id) and Token is provided by Zynatic AB.
This service is provided by “Zynatic AB”: https://www.zynatic.se/
