Title: Hippoo Auth
Author: hippoosupport
Published: <strong>2025年6月6日</strong>
Last modified: 2026年9月5日

---

プラグインを検索

![](https://ps.w.org/hippoo-auth/assets/banner-772x250.png?rev=3682343)

このプラグインは **WordPress の最新3回のメジャーリリースに対してテストされていま
せん**。もうメンテナンスやサポートがされていないかもしれず、最新バージョンの WordPress
で使用した場合は互換性の問題が発生する可能性があります。

![](https://ps.w.org/hippoo-auth/assets/icon.svg?rev=3682343)

# Hippoo Auth

 作者: [hippoosupport](https://profiles.wordpress.org/hippoosupport/)

[ダウンロード](https://downloads.wordpress.org/plugin/hippoo-auth.1.1.1.zip)

 * [詳細](https://ja.wordpress.org/plugins/hippoo-auth/#description)
 * [レビュー](https://ja.wordpress.org/plugins/hippoo-auth/#reviews)
 *  [インストール](https://ja.wordpress.org/plugins/hippoo-auth/#installation)
 * [開発](https://ja.wordpress.org/plugins/hippoo-auth/#developers)

 [サポート](https://wordpress.org/support/plugin/hippoo-auth/)

## 説明

**Hippoo Auth** enhances the WooCommerce Store API by adding secure JWT-based authentication
endpoints. It supports login and signup via Google, Facebook, Apple, or manually
with email and password. Once authenticated, users can retrieve and update their
billing/shipping information, view order history, and more — all via API.

Perfect for developers building API-driven themes, custom mobile apps, or headless
WooCommerce experiences.

Use it to build:

 * Headless WooCommerce themes
 * Custom frontend apps (React, Vue, etc.)
 * Mobile apps using Flutter, React Native, or Kotlin
 * API-based user dashboards

With Hippoo Auth, users can register, login (manually or via Google, Apple, or Facebook),
and securely access:

 * Order history and details
 * Billing and shipping addresses
 * JWT-based session tokens with refresh support

🔐 Auth is handled via JWT for secure stateless sessions, ideal for frontend-heavy
or decoupled environments.

📘 **Developer Docs:**
 [https://hippoo.app/hippoo-auth-web-service-documentation-for-authentication-and-user-management-in-woocommerce/](https://hippoo.app/hippoo-auth-web-service-documentation-for-authentication-and-user-management-in-woocommerce/)

### Features

 * REST API login with JWT tokens
 * Social login (Google, Facebook, Apple)
 * Secure signup and password reset
 * Access to orders and addresses via API
 * Built-in token refresh and logout endpoint
 * Compatible with WooCommerce stores and custom frontends
 * No dependency on the Hippoo App

### External services

This plugin connects to third-party services for social authentication:

 * **Google OAuth API**: Used to verify Google login tokens. Sends OAuth access 
   token.
    [Privacy Policy](https://policies.google.com/privacy), [Terms of Service](https://policies.google.com/terms)
 * **Facebook Graph API**: Used to fetch user info (ID, email, name). Sends OAuth
   access token.
    [Privacy Policy](https://www.facebook.com/about/privacy), [Terms](https://www.facebook.com/legal/terms)
 * **Apple ID Authentication API**: Used for sign-in via Apple. Sends OAuth access
   token.
    [Privacy Policy](https://www.apple.com/legal/privacy/en-ww/), [Terms](https://www.apple.com/legal/internet-services/)

These are required for enabling social login functionality.

### Credits

This plugin was built with the Hippoo team — creators of the [Hippoo WooCommerce App](https://hippoo.app),
a mobile app that helps you manage store orders, products, coupons, and more on 
the go.

## インストール

 1. Upload the `hippoo-auth` folder to the `/wp-content/plugins/` directory.
 2. Activate the plugin through the ‘Plugins’ menu in WordPress.
 3. Visit the Hippoo Auth settings page to configure the plugin.
 4. Use the endpoints immediately, or check the [official docs](https://hippoo.app/hippoo-auth-web-service-documentation-for-authentication-and-user-management-in-woocommerce/)

## FAQ

**Q:** Can I use this plugin to build a headless WooCommerce frontend or mobile 
app?
 **A:** Yes. It’s designed specifically to enable secure access to WooCommerce
data through custom APIs.

## 評価

![](https://secure.gravatar.com/avatar/3823fe254ae069460e39addd2a3b4471cbf7faa540fa7bca2fd573f9613a9b56?
s=60&d=retro&r=g)

### 󠀁[Thank you very much!](https://wordpress.org/support/topic/thank-you-very-much-150/)󠁿

 [adriansudakv](https://profiles.wordpress.org/adriansudakv/) 2026年1月2日

I tried three other plugins, and none of them did even half as much as yours. It’s
reliable, fast, and actually solves the problem

 [ 1件のレビューをすべて表示 ](https://wordpress.org/support/plugin/hippoo-auth/reviews/)

## 貢献者と開発者

Hippoo Auth はオープンソースソフトウェアです。以下の人々がこのプラグインに貢献し
ています。

貢献者

 *   [ hippoosupport ](https://profiles.wordpress.org/hippoosupport/)
 *   [ hippooo ](https://profiles.wordpress.org/hippooo/)

[“Hippoo Auth” をあなたの言語に翻訳しましょう。](https://translate.wordpress.org/projects/wp-plugins/hippoo-auth)

### 開発に興味がありますか ?

[コードを閲覧](https://plugins.trac.wordpress.org/browser/hippoo-auth/)するか、[SVN リポジトリ](https://plugins.svn.wordpress.org/hippoo-auth/)
をチェックするか、[開発ログ](https://plugins.trac.wordpress.org/log/hippoo-auth/)
を [RSS](https://plugins.trac.wordpress.org/log/hippoo-auth/?limit=100&mode=stop_on_copy&format=rss)
で購読してみてください。

## 変更履歴

#### 1.1.1

 * Improved token signing key handling.

#### 1.1.0

 * Stateless REST auth: `hippoo_auth_permission_check` no longer sets WordPress/
   WooCommerce session cookies on every authenticated call. The permission callback
   now uses `wp_set_current_user()` for the current request only. Fixes intermittent`
   502 Bad Gateway` responses on authenticated routes caused by response headers
   overflowing nginx’s default FastCGI buffer.
 * JWT token validation (`hippoo_auth_validate_access_token`, `hippoo_auth_validate_refresh_token`)
   now catches `\Throwable` (not just `\Exception`) so `TypeError`/`Error` from 
   the JWT library surface as clean 401 responses instead of PHP fatals. Added `
   user_id` and `WP_User` guards to eliminate a latent “property of non-object” 
   notice.
 * Fixed Apple social-login JWT decode: `hippoo_auth_verify_apple_token` now wraps
   the parsed public key in `new Key( $pem, 'RS256' )` as required by firebase/php-
   jwt v6+ (was using the v5 signature and throwing an uncaught `TypeError`).

#### 1.0.4

 * Fix `Invalid argument supplied for foreach()` warning in autoload — capture prefixes
   via closure `use()` instead of relying on `global` (the array sits in plugin-
   file scope, not global scope).

#### 1.0.3

 * Maintenance Release

#### 1.0.1

 * Minor bug fix.

#### 1.0.0

 * Initial release.

## メタ

 *  バージョン **1.1.1**
 *  最終更新日 **3週間前**
 *  有効インストール数 **10未満**
 *  WordPress バージョン ** 5.8またはそれ以降 **
 *  検証済み最新バージョン: **6.8.10**
 *  PHP バージョン ** 7.4またはそれ以降 **
 *  言語
 * [English (US)](https://wordpress.org/plugins/hippoo-auth/)
 * タグ
 * [jwt](https://ja.wordpress.org/plugins/tags/jwt/)[rest-api](https://ja.wordpress.org/plugins/tags/rest-api/)
   [social login](https://ja.wordpress.org/plugins/tags/social-login/)[woocommerce](https://ja.wordpress.org/plugins/tags/woocommerce/)
 *  [詳細を表示](https://ja.wordpress.org/plugins/hippoo-auth/advanced/)

## 評価

 5つ星中5つ星

 *  [  1 5-星レビュー     ](https://wordpress.org/support/plugin/hippoo-auth/reviews/?filter=5)
 *  [  0 4-星レビュー     ](https://wordpress.org/support/plugin/hippoo-auth/reviews/?filter=4)
 *  [  0 3-星レビュー     ](https://wordpress.org/support/plugin/hippoo-auth/reviews/?filter=3)
 *  [  0 2-星レビュー     ](https://wordpress.org/support/plugin/hippoo-auth/reviews/?filter=2)
 *  [  0 1-星レビュー     ](https://wordpress.org/support/plugin/hippoo-auth/reviews/?filter=1)

[Your review](https://wordpress.org/support/plugin/hippoo-auth/reviews/#new-post)

[すべてのレビューを見る](https://wordpress.org/support/plugin/hippoo-auth/reviews/)

## 貢献者

 *   [ hippoosupport ](https://profiles.wordpress.org/hippoosupport/)
 *   [ hippooo ](https://profiles.wordpress.org/hippooo/)

## サポート

意見や質問がありますか ?

 [サポートフォーラムを表示](https://wordpress.org/support/plugin/hippoo-auth/)

## 寄付

このプラグインが今後も改善できるよう応援しませんか ?

 [ このプラグインに寄付 ](https://hippoo.app/)