friloo/wp-m365-login
1
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions 4

Support custom login pages

Browse source 
- Add the button (and error messages) to every wp_login_form() form via
  login_form_top/login_form_bottom; in button-only mode the password
  fields are wrapped and hidden there.
- New template functions m365_login_button() and m365_login_messages();
  the shortcode gains divider and messages attributes.
- New setting for the custom login page URL: failed sign-ins, the
  fallback link and the logout redirect point there instead of
  wp-login.php. Must be a same-site URL.
- Button-only mode now blocks every interactive password sign-in
  through the authenticate filter, not only wp-login.php; XML-RPC, REST,
  WP-CLI and cron are exempt, plus a filter for trusted exceptions.
- Fallback key accepted on any page (init) instead of login_init only.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JJxAHYdMfKPoN4koRc4Ci2
This commit is contained in:
friloo 2026-09-22 14:52:11 +00:00
parent e5db0d49be
commit 701e85ab88
No known key found for this signature in database
15 changed files with 804 additions and 300 deletions
Download patch file Download diff file Expand all files Collapse all files

3
CHANGELOG.md
View file

@ -15,5 +15,6 @@ All notable changes to this project are documented in this file. The format foll
- Account binding to the Microsoft object ID, e-mail domain allow-list. - Account binding to the Microsoft object ID, e-mail domain allow-list.
- Entra group restriction with a Graph-powered group picker; membership verified via the `groups` claim or Microsoft Graph `checkMemberGroups`. - Entra group restriction with a Graph-powered group picker; membership verified via the `groups` claim or Microsoft Graph `checkMemberGroups`.
- Button-only mode that hides the password form and blocks password sign-in on `wp-login.php`, with a secret, rate-limited fallback link and a `wp-config.php` emergency constant. - Button-only mode that hides the password form and blocks password sign-in on `wp-login.php`, with a secret, rate-limited fallback link and a `wp-config.php` emergency constant.
- `[m365_login_button]` shortcode and developer hooks. - Custom login page support: automatic button in `wp_login_form()` forms, `m365_login_button()` / `m365_login_messages()` template functions, custom login URL for error messages, fallback link and logout redirect.
- `[m365_login_button]` shortcode (with `divider` and `messages` attributes) and developer hooks.
- German translation. - German translation.

24
README.md
View file

@ -31,6 +31,7 @@
- [Sicherheit](#sicherheit) - [Sicherheit](#sicherheit)
- [Gruppen-Beschränkung](#gruppen-beschränkung) - [Gruppen-Beschränkung](#gruppen-beschränkung)
- [Nur-Button-Modus & Fallback](#nur-button-modus--fallback) - [Nur-Button-Modus & Fallback](#nur-button-modus--fallback)
- [Eigene Login-Seite](#eigene-login-seite)
- [Sicherheitskonzept](#sicherheitskonzept) - [Sicherheitskonzept](#sicherheitskonzept)
- [Shortcode & Hooks](#shortcode--hooks) - [Shortcode & Hooks](#shortcode--hooks)
- [Fehlerbehebung](#fehlerbehebung) - [Fehlerbehebung](#fehlerbehebung)
@ -230,8 +231,8 @@ Leere Liste = keine Beschränkung.
Im Tab *Sicherheit* → **Button-only mode**: Im Tab *Sicherheit* → **Button-only mode**:
- Blendet Benutzername/Passwort-Felder und den „Passwort vergessen?“-Link aus. - Blendet Benutzername/Passwort-Felder und den „Passwort vergessen?“-Link aus.
- **Sperrt Passwort-Logins** über `wp-login.php` serverseitig – nicht nur per CSS. - **Sperrt Passwort-Logins serverseitig**, nicht nur per CSS – auf `wp-login.php` und in jedem eigenen Login-Formular (`authenticate`-Filter).
- Application Passwords, REST API und XML-RPC sind nicht betroffen. - Application Passwords, REST API, XML-RPC, WP-CLI und Cron sind nicht betroffen. Einzelne Ausnahmen per Filter `m365_login_block_password_login`.
- Wird erst aktiv, wenn die Verbindung vollständig konfiguriert ist. - Wird erst aktiv, wenn die Verbindung vollständig konfiguriert ist.
**Fallback (Notausgang):** Beim Speichern erzeugt das Plugin einen geheimen Schlüssel und zeigt den Fallback-Link an: **Fallback (Notausgang):** Beim Speichern erzeugt das Plugin einen geheimen Schlüssel und zeigt den Fallback-Link an:
@ -254,6 +255,20 @@ schaltet den Modus komplett ab. Alternativ das Plugin-Verzeichnis per FTP umbene
> ⚠️ Vor dem Aktivieren sicherstellen, dass dein eigenes Admin-Konto per Microsoft funktioniert, und den Fallback-Link sicher ablegen. > ⚠️ Vor dem Aktivieren sicherstellen, dass dein eigenes Admin-Konto per Microsoft funktioniert, und den Fallback-Link sicher ablegen.
### Eigene Login-Seite
Das Plugin funktioniert auch, wenn die Anmeldung nicht über `wp-login.php` läuft.
| Baustein | Was passiert |
| --- | --- |
| **`wp_login_form()`** (Themes, viele Login-Plugins) | Der Button wird automatisch unter dem Formular eingefügt, inklusive Fehlermeldungen darüber. Im Nur-Button-Modus werden die Passwortfelder ausgeblendet. Abschaltbar im Tab *Button*. |
| **Shortcode** | `[m365_login_button redirect="/dashboard/" divider="yes" messages="yes"]` für Block-Editor und Page Builder (Elementor, Divi, …). |
| **Template-Funktion** | `m365_login_button( array( 'redirect' => '/dashboard/' ) );` in Theme-Dateien, `m365_login_messages();` für die Meldungen an anderer Stelle. |
| **URL der Login-Seite** (Tab *Button* → *Eigene Login-Seite*) | Fehlermeldungen nach einem gescheiterten Microsoft-Login, der Fallback-Link und die Weiterleitung nach dem Abmelden zeigen auf diese Seite statt auf `wp-login.php`. |
| **Nur-Button-Modus** | Greift serverseitig für alle Passwort-Logins, also auch für Formulare von Page Buildern, die das Plugin nicht ausblenden kann. |
Plugins, die `wp-login.php` umbenennen (z. B. WPS Hide Login), sind kompatibel, weil das Plugin durchgehend `wp_login_url()` verwendet.
--- ---
## Sicherheitskonzept ## Sicherheitskonzept
@ -315,6 +330,11 @@ add_action( 'm365_login_success', function ( WP_User $user, array $claims ) {
} }
}, 10, 2 ); }, 10, 2 );
// Ein vertrauenswürdiges Plugin darf trotz Nur-Button-Modus per Passwort anmelden
add_filter( 'm365_login_block_password_login', function ( $block, WP_User $user ) {
return doing_action( 'my_membership_plugin_login' ) ? false : $block;
}, 10, 2 );
// Redirect-URI anpassen (z. B. hinter einem Reverse Proxy) // Redirect-URI anpassen (z. B. hinter einem Reverse Proxy)
add_filter( 'm365_login_redirect_uri', fn( $uri ) => 'https://www.example.com/m365-login/callback' ); add_filter( 'm365_login_redirect_uri', fn( $uri ) => 'https://www.example.com/m365-login/callback' );
``` ```

42
assets/css/login.css
View file

@ -134,3 +134,45 @@ body.m365-button-only .m365-login--above {
border: 1px solid #c3c4c7; border: 1px solid #c3c4c7;
box-shadow: 0 1px 3px rgba(0, 0, 0, 0.04); box-shadow: 0 1px 3px rgba(0, 0, 0, 0.04);
} }
/* Custom login pages: wp_login_form() injection, shortcode and template function. */
.m365-login--form {
margin: 16px 0 0;
padding: 0;
border: 0;
background: transparent;
}
.m365-login--form .m365-login__divider span,
.m365-login--shortcode .m365-login__divider span {
background: transparent;
}
.m365-login--form .m365-login__divider,
.m365-login--shortcode .m365-login__divider {
margin: 0 0 16px;
}
.m365-login__notice {
box-sizing: border-box;
margin: 0 0 16px;
padding: 12px 14px;
border-left: 4px solid #72aee6;
background: #fff;
color: #1d2327;
font-size: 14px;
line-height: 1.5;
box-shadow: 0 1px 1px rgba(0, 0, 0, 0.04);
}
.m365-login__notice--error {
border-left-color: #d63638;
}
.m365-login__notice--message {
border-left-color: #00a32a;
}
.m365-login__hidden-fields {
display: none !important;
}

32
includes/class-m365-login-admin.php
View file

@ -408,6 +408,33 @@ class M365_Login_Admin {
<button type="button" class="m365-preset" data-preset='{"bg":"#2271b1","bg_hover":"#135e96","color":"#ffffff","border":"#2271b1"}'><span style="background:#2271b1"></span><?php esc_html_e( 'WordPress blue', 'm365-login' ); ?></button> <button type="button" class="m365-preset" data-preset='{"bg":"#2271b1","bg_hover":"#135e96","color":"#ffffff","border":"#2271b1"}'><span style="background:#2271b1"></span><?php esc_html_e( 'WordPress blue', 'm365-login' ); ?></button>
</div> </div>
</div> </div>
<div class="m365-card">
<h2 class="m365-card__title"><?php esc_html_e( 'Custom login page', 'm365-login' ); ?></h2>
<p class="m365-card__intro"><?php esc_html_e( 'Using your own login page instead of wp-login.php? Tell the plugin where it is so error messages, the fallback link and the post-logout redirect point there.', 'm365-login' ); ?></p>
<div class="m365-field">
<label for="m365-custom-login"><?php esc_html_e( 'URL of your login page', 'm365-login' ); ?></label>
<input type="url" id="m365-custom-login" name="<?php echo $field( 'custom_login_url' ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>" value="<?php echo esc_url( $s['custom_login_url'] ); ?>" class="regular-text code" placeholder="<?php echo esc_attr( home_url( '/login/' ) ); ?>" />
<p class="description"><?php esc_html_e( 'Must be on this site. Leave empty to use wp-login.php.', 'm365-login' ); ?></p>
</div>
<label class="m365-check m365-check--block">
<input type="checkbox" name="<?php echo $field( 'inject_form' ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>" value="1" <?php checked( $s['inject_form'] ); ?> />
<span>
<strong><?php esc_html_e( 'Add the button to every wp_login_form() form automatically', 'm365-login' ); ?></strong>
<em><?php esc_html_e( 'Covers themes and plugins that use the WordPress login form function. Page-builder widgets need the shortcode or the template function below.', 'm365-login' ); ?></em>
</span>
</label>
<div class="m365-field">
<span class="m365-field__label"><?php esc_html_e( 'Manual placement', 'm365-login' ); ?></span>
<p class="description"><?php esc_html_e( 'Shortcode (block editor, page builders):', 'm365-login' ); ?></p>
<code>[m365_login_button redirect="/dashboard/" divider="yes"]</code>
<p class="description"><?php esc_html_e( 'Template function (theme files):', 'm365-login' ); ?></p>
<code>&lt;?php m365_login_button( array( 'redirect' =&gt; '/dashboard/' ) ); ?&gt;</code>
<p class="description"><?php esc_html_e( 'Both show the error messages of the last attempt; use m365_login_messages() to place them separately.', 'm365-login' ); ?></p>
</div>
</div>
</section> </section>
<!-- Security --> <!-- Security -->
@ -483,7 +510,7 @@ class M365_Login_Admin {
<div class="m365-card"> <div class="m365-card">
<h2 class="m365-card__title"><?php esc_html_e( 'Button-only mode', 'm365-login' ); ?></h2> <h2 class="m365-card__title"><?php esc_html_e( 'Button-only mode', 'm365-login' ); ?></h2>
<p class="m365-card__intro"><?php esc_html_e( 'Hide the username/password form and the "Lost your password?" link, and refuse password sign-ins on the login page. Application passwords, REST and XML-RPC are not affected.', 'm365-login' ); ?></p> <p class="m365-card__intro"><?php esc_html_e( 'Hides the username/password fields (on wp-login.php and in wp_login_form() forms) and refuses every interactive password sign-in on the site, including custom login forms. Application passwords, REST, XML-RPC and WP-CLI are not affected.', 'm365-login' ); ?></p>
<label class="m365-check m365-check--block"> <label class="m365-check m365-check--block">
<input type="checkbox" name="<?php echo $field( 'button_only' ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>" value="1" <?php checked( $s['button_only'] ); ?> id="m365-button-only" /> <input type="checkbox" name="<?php echo $field( 'button_only' ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped ?>" value="1" <?php checked( $s['button_only'] ); ?> id="m365-button-only" />
@ -495,7 +522,7 @@ class M365_Login_Admin {
<div class="m365-fallback"> <div class="m365-fallback">
<span class="m365-field__label"><?php esc_html_e( 'Fallback link (keep it secret)', 'm365-login' ); ?></span> <span class="m365-field__label"><?php esc_html_e( 'Fallback link (keep it secret)', 'm365-login' ); ?></span>
<p class="description"><?php esc_html_e( 'Opening this link shows the password form again in that browser for 30 minutes. Bookmark it somewhere safe – it is your way back in if Microsoft sign-in ever breaks.', 'm365-login' ); ?></p> <p class="description"><?php esc_html_e( 'Opening this link shows the password form again in that browser for 30 minutes and allows password sign-in there. Bookmark it somewhere safe – it is your way back in if Microsoft sign-in ever breaks.', 'm365-login' ); ?></p>
<?php if ( '' !== $this->settings->fallback_url() ) : ?> <?php if ( '' !== $this->settings->fallback_url() ) : ?>
<div class="m365-copy"> <div class="m365-copy">
<code id="m365-fallback-url"><?php echo esc_html( $this->settings->fallback_url() ); ?></code> <code id="m365-fallback-url"><?php echo esc_html( $this->settings->fallback_url() ); ?></code>
@ -569,6 +596,7 @@ class M365_Login_Admin {
<h2 class="m365-card__title"><?php esc_html_e( 'Shortcode', 'm365-login' ); ?></h2> <h2 class="m365-card__title"><?php esc_html_e( 'Shortcode', 'm365-login' ); ?></h2>
<p><?php esc_html_e( 'Place the button on a custom login page:', 'm365-login' ); ?></p> <p><?php esc_html_e( 'Place the button on a custom login page:', 'm365-login' ); ?></p>
<code>[m365_login_button redirect="/my-account/"]</code> <code>[m365_login_button redirect="/my-account/"]</code>
<p class="description"><?php esc_html_e( 'More options on the Button tab under "Custom login page".', 'm365-login' ); ?></p>
</div> </div>
</aside> </aside>
</div> </div>

118
includes/class-m365-login-auth.php
View file

@ -51,10 +51,13 @@ class M365_Login_Auth {
add_action( 'init', array( $this, 'maybe_handle_callback' ), 5 ); add_action( 'init', array( $this, 'maybe_handle_callback' ), 5 );
add_filter( 'wp_login_errors', array( $this, 'login_errors' ), 10, 1 ); add_filter( 'wp_login_errors', array( $this, 'login_errors' ), 10, 1 );
// Button-only mode. // Button-only mode (works on wp-login.php and on custom login pages).
add_action( 'login_init', array( $this, 'maybe_accept_fallback_key' ) ); add_action( 'init', array( $this, 'maybe_accept_fallback_key' ), 6 );
// Runs after core's username/password handlers (priority 20), which would otherwise overwrite an early WP_Error. // Runs after core's username/password handlers (priority 20), which would otherwise overwrite an early WP_Error.
add_filter( 'authenticate', array( $this, 'block_password_login' ), 99, 3 ); add_filter( 'authenticate', array( $this, 'block_password_login' ), 99, 3 );
// Custom login page: send people back there after logging out.
add_filter( 'logout_redirect', array( $this, 'logout_redirect' ), 10, 3 );
} }
/* ------------------------------------------------------------------ */ /* ------------------------------------------------------------------ */
@ -84,7 +87,7 @@ class M365_Login_Auth {
} }
/** /**
* wp-login.php?m365_fallback=KEY → sets the fallback cookie and reloads without the key in the URL. * ?m365_fallback=KEY (on any page) → sets the fallback cookie and reloads the login page without the key in the URL.
*/ */
public function maybe_accept_fallback_key() { public function maybe_accept_fallback_key() {
if ( ! $this->settings->button_only() ) { if ( ! $this->settings->button_only() ) {
@ -92,7 +95,7 @@ class M365_Login_Auth {
} }
// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- the key itself is the secret. // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- the key itself is the secret.
$given = isset( $_GET['m365_fallback'] ) ? sanitize_text_field( wp_unslash( $_GET['m365_fallback'] ) ) : ''; $given = isset( $_GET['m365_fallback'] ) ? sanitize_text_field( wp_unslash( $_GET['m365_fallback'] ) ) : '';
if ( '' === $given ) { if ( '' === $given || 'on' === $given ) {
return; return;
} }
@ -111,10 +114,26 @@ class M365_Login_Auth {
delete_transient( $ip_key ); delete_transient( $ip_key );
$this->send_cookie( self::FALLBACK_COOKIE, $this->fallback_cookie_value(), time() + self::FALLBACK_TTL ); $this->send_cookie( self::FALLBACK_COOKIE, $this->fallback_cookie_value(), time() + self::FALLBACK_TTL );
nocache_headers(); nocache_headers();
wp_safe_redirect( add_query_arg( 'm365_fallback', 'on', wp_login_url() ) ); wp_safe_redirect( add_query_arg( 'm365_fallback', 'on', $this->settings->login_page_url() ) );
exit; exit;
} }
/**
* After logout, return to the custom login page instead of wp-login.php.
*
* @param string $redirect_to Requested redirect.
* @param string $requested_redirect_to Raw requested redirect.
* @param WP_User|WP_Error $user User.
* @return string
*/
public function logout_redirect( $redirect_to, $requested_redirect_to, $user ) {
$custom = $this->settings->custom_login_url();
if ( '' === $custom || '' !== (string) $requested_redirect_to ) {
return $redirect_to;
}
return add_query_arg( 'loggedout', 'true', $custom );
}
/** /**
* Refuses username/password sign-in on wp-login.php while button-only mode is active. * Refuses username/password sign-in on wp-login.php while button-only mode is active.
* *
@ -130,13 +149,27 @@ class M365_Login_Auth {
if ( '' === (string) $username && '' === (string) $password ) { if ( '' === (string) $username && '' === (string) $password ) {
return $user; // Initial form render or cookie auth, no password attempt. return $user; // Initial form render or cookie auth, no password attempt.
} }
// Only the interactive login form is affected: XML-RPC, REST and application passwords keep working. // Interactive password logins only: XML-RPC, REST (application passwords), WP-CLI and cron keep working.
if ( ! isset( $GLOBALS['pagenow'] ) || 'wp-login.php' !== $GLOBALS['pagenow'] ) { if ( ( defined( 'XMLRPC_REQUEST' ) && XMLRPC_REQUEST )
|| ( defined( 'REST_REQUEST' ) && REST_REQUEST )
|| ( defined( 'WP_CLI' ) && WP_CLI )
|| wp_doing_cron() ) {
return $user; return $user;
} }
if ( ! $user instanceof WP_User ) { if ( ! $user instanceof WP_User ) {
return $user; // Already failed for another reason; keep core's message. return $user; // Already failed for another reason; keep core's message.
} }
/**
* Allows exempting a password sign-in from button-only mode (e.g. a trusted membership plugin).
*
* @param bool $block Whether to block. Default true.
* @param WP_User $user Authenticated user.
*/
if ( ! apply_filters( 'm365_login_block_password_login', true, $user ) ) {
return $user;
}
return new WP_Error( 'm365_login_button_only', __( 'Password sign-in is disabled on this site. Please use the Microsoft button.', 'm365-login' ) ); return new WP_Error( 'm365_login_button_only', __( 'Password sign-in is disabled on this site. Please use the Microsoft button.', 'm365-login' ) );
} }
@ -720,45 +753,48 @@ class M365_Login_Auth {
*/ */
private function fail( $code ) { private function fail( $code ) {
$this->clear_state_cookie(); $this->clear_state_cookie();
wp_safe_redirect( add_query_arg( 'm365_error', rawurlencode( $code ), wp_login_url() ) ); nocache_headers();
wp_safe_redirect( add_query_arg( 'm365_error', rawurlencode( $code ), $this->settings->login_page_url() ) );
exit; exit;
} }
/** /**
* Writes to the PHP error log when WP_DEBUG_LOG is enabled. * Messages for the current request (from ?m365_error and ?m365_fallback=on), for any login page.
* *
* @param string $message Message. * @return array[] Each item: array( 'type' => 'error'|'message', 'code' => string, 'text' => string ).
*/ */
private function log( $message ) { public function current_messages() {
if ( defined( 'WP_DEBUG' ) && WP_DEBUG && defined( 'WP_DEBUG_LOG' ) && WP_DEBUG_LOG ) {
error_log( '[M365 Login] ' . $message ); // phpcs:ignore WordPress.PHP.DevelopmentFunctions.error_log_error_log
}
}
/**
* Maps error codes to messages on the login screen.
*
* @param WP_Error $errors Login errors.
* @return WP_Error
*/
public function login_errors( $errors ) {
if ( ! $errors instanceof WP_Error ) {
$errors = new WP_Error();
}
// phpcs:disable WordPress.Security.NonceVerification.Recommended -- read-only display of whitelisted flags. // phpcs:disable WordPress.Security.NonceVerification.Recommended -- read-only display of whitelisted flags.
$code = isset( $_GET['m365_error'] ) ? sanitize_key( wp_unslash( $_GET['m365_error'] ) ) : ''; $code = isset( $_GET['m365_error'] ) ? sanitize_key( wp_unslash( $_GET['m365_error'] ) ) : '';
$fallback_on = isset( $_GET['m365_fallback'] ) && 'on' === $_GET['m365_fallback']; $fallback_on = isset( $_GET['m365_fallback'] ) && 'on' === $_GET['m365_fallback'];
// phpcs:enable WordPress.Security.NonceVerification.Recommended // phpcs:enable WordPress.Security.NonceVerification.Recommended
$out = array();
if ( $fallback_on && $this->settings->button_only() && $this->fallback_active() ) { if ( $fallback_on && $this->settings->button_only() && $this->fallback_active() ) {
$errors->add( 'm365_login_fallback_on', __( 'Password sign-in is temporarily enabled for this browser (30 minutes).', 'm365-login' ), 'message' ); $out[] = array(
'type' => 'message',
'code' => 'fallback_on',
'text' => __( 'Password sign-in is temporarily enabled for this browser (30 minutes).', 'm365-login' ),
);
} }
if ( '' === $code ) { if ( '' !== $code ) {
return $errors; $messages = $this->error_messages();
$out[] = array(
'type' => 'access_denied' === $code ? 'message' : 'error',
'code' => $code,
'text' => isset( $messages[ $code ] ) ? $messages[ $code ] : $messages['provider_error'],
);
}
return $out;
} }
$messages = array( /**
* Error code → translated message map.
*
* @return string[]
*/
private function error_messages() {
return array(
'not_configured' => __( 'Microsoft login is not configured yet.', 'm365-login' ), 'not_configured' => __( 'Microsoft login is not configured yet.', 'm365-login' ),
'invalid_state' => __( 'The login request expired or was invalid. Please try again.', 'm365-login' ), 'invalid_state' => __( 'The login request expired or was invalid. Please try again.', 'm365-login' ),
'access_denied' => __( 'Microsoft sign-in was cancelled.', 'm365-login' ), 'access_denied' => __( 'Microsoft sign-in was cancelled.', 'm365-login' ),
@ -775,13 +811,21 @@ class M365_Login_Auth {
'fallback_invalid' => __( 'The fallback key is not valid.', 'm365-login' ), 'fallback_invalid' => __( 'The fallback key is not valid.', 'm365-login' ),
'fallback_locked' => __( 'Too many attempts. Please wait 15 minutes.', 'm365-login' ), 'fallback_locked' => __( 'Too many attempts. Please wait 15 minutes.', 'm365-login' ),
); );
}
$errors->add( /**
'm365_login_' . $code, * Adds the current messages to the wp-login.php error object.
isset( $messages[ $code ] ) ? $messages[ $code ] : $messages['provider_error'], *
'access_denied' === $code ? 'message' : 'error' * @param WP_Error $errors Login errors.
); * @return WP_Error
*/
public function login_errors( $errors ) {
if ( ! $errors instanceof WP_Error ) {
$errors = new WP_Error();
}
foreach ( $this->current_messages() as $msg ) {
$errors->add( 'm365_login_' . $msg['code'], $msg['text'], $msg['type'] );
}
return $errors; return $errors;
} }
} }

155
includes/class-m365-login-button.php
View file

@ -32,6 +32,133 @@ class M365_Login_Button {
add_filter( 'login_message', array( $this, 'render_above' ), 20 ); add_filter( 'login_message', array( $this, 'render_above' ), 20 );
add_action( 'login_footer', array( $this, 'render_below' ) ); add_action( 'login_footer', array( $this, 'render_below' ) );
add_shortcode( 'm365_login_button', array( $this, 'shortcode' ) ); add_shortcode( 'm365_login_button', array( $this, 'shortcode' ) );
// Custom login pages built with wp_login_form().
add_filter( 'login_form_top', array( $this, 'form_top' ), 10, 2 );
add_filter( 'login_form_bottom', array( $this, 'form_bottom' ), 10, 2 );
}
/**
* Whether the plugin should hook into wp_login_form() output.
*
* @return bool
*/
private function inject_into_forms() {
return $this->settings->is_configured() && (bool) $this->settings->get( 'inject_form' ) && ! is_user_logged_in();
}
/**
* wp_login_form(): messages above the fields; in button-only mode the fields are wrapped and hidden.
*
* @param string $content Existing content.
* @param array $args wp_login_form() arguments.
* @return string
*/
public function form_top( $content, $args = array() ) {
if ( ! $this->inject_into_forms() ) {
return $content;
}
$this->enqueue_frontend();
$content .= $this->messages_markup();
if ( $this->password_login_hidden() ) {
$content .= '<div class="m365-login__hidden-fields" hidden>';
}
return $content;
}
/**
* wp_login_form(): closes the wrapper and appends the button.
*
* @param string $content Existing content.
* @param array $args wp_login_form() arguments.
* @return string
*/
public function form_bottom( $content, $args = array() ) {
if ( ! $this->inject_into_forms() ) {
return $content;
}
$hidden = $this->password_login_hidden();
$redirect_to = isset( $args['redirect'] ) ? (string) $args['redirect'] : '';
if ( $hidden ) {
$content .= '</div>';
}
$divider = $hidden ? '' : $this->divider_markup();
return $content . '<div class="m365-login m365-login--form">' . $divider . $this->button( $redirect_to ) . '</div>';
}
/**
* Whether password fields should be hidden right now (button-only mode without fallback).
*
* @return bool
*/
private function password_login_hidden() {
return $this->settings->button_only() && ! M365_Login::instance()->auth->fallback_active();
}
/**
* Enqueues the stylesheet on the front end (custom login pages).
*/
public function enqueue_frontend() {
wp_enqueue_style( 'm365-login', M365_LOGIN_URL . 'assets/css/login.css', array(), M365_LOGIN_VERSION );
wp_add_inline_style( 'm365-login', $this->css_variables() );
}
/**
* Divider line markup ('' when the divider text is empty).
*
* @return string
*/
private function divider_markup() {
$divider = (string) $this->settings->get( 'divider_text' );
return '' === trim( $divider ) ? '' : '<div class="m365-login__divider" aria-hidden="true"><span>' . esc_html( $divider ) . '</span></div>';
}
/**
* Error / info messages for custom login pages.
*
* @return string
*/
public function messages_markup() {
$html = '';
foreach ( M365_Login::instance()->auth->current_messages() as $msg ) {
$html .= '<div class="m365-login__notice m365-login__notice--' . esc_attr( $msg['type'] ) . '" role="' . ( 'error' === $msg['type'] ? 'alert' : 'status' ) . '">' . esc_html( $msg['text'] ) . '</div>';
}
return $html;
}
/**
* Full markup for templates and shortcodes.
*
* @param array $args {
* @type string $redirect Destination after login.
* @type bool $show_messages Show error/info messages. Default true.
* @type bool $show_divider Show the divider line. Default false.
* }
* @return string
*/
public function standalone( $args = array() ) {
if ( ! $this->settings->is_configured() || is_user_logged_in() ) {
return '';
}
$args = wp_parse_args(
$args,
array(
'redirect' => '',
'show_messages' => true,
'show_divider' => false,
)
);
$this->enqueue_frontend();
$html = '<div class="m365-login m365-login--shortcode">';
if ( $args['show_messages'] ) {
$html .= $this->messages_markup();
}
if ( $args['show_divider'] && ! $this->password_login_hidden() ) {
$html .= $this->divider_markup();
}
$html .= $this->button( esc_url_raw( (string) $args['redirect'] ) );
return $html . '</div>';
} }
/** /**
@ -142,15 +269,22 @@ class M365_Login_Button {
* @return string * @return string
*/ */
public function shortcode( $atts ) { public function shortcode( $atts ) {
if ( ! $this->settings->is_configured() || is_user_logged_in() ) { $atts = shortcode_atts(
return ''; array(
} 'redirect' => '',
$atts = shortcode_atts( array( 'redirect' => '' ), $atts, 'm365_login_button' ); 'messages' => 'yes',
'divider' => 'no',
wp_enqueue_style( 'm365-login', M365_LOGIN_URL . 'assets/css/login.css', array(), M365_LOGIN_VERSION ); ),
wp_add_inline_style( 'm365-login', $this->css_variables() ); $atts,
'm365_login_button'
return '<div class="m365-login m365-login--shortcode">' . $this->button( esc_url_raw( $atts['redirect'] ) ) . '</div>'; );
return $this->standalone(
array(
'redirect' => $atts['redirect'],
'show_messages' => 'no' !== strtolower( (string) $atts['messages'] ),
'show_divider' => 'yes' === strtolower( (string) $atts['divider'] ),
)
);
} }
/** /**
@ -163,8 +297,7 @@ class M365_Login_Button {
// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- passed through to the flow, validated there. // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- passed through to the flow, validated there.
$redirect_to = isset( $_REQUEST['redirect_to'] ) ? esc_url_raw( wp_unslash( $_REQUEST['redirect_to'] ) ) : ''; $redirect_to = isset( $_REQUEST['redirect_to'] ) ? esc_url_raw( wp_unslash( $_REQUEST['redirect_to'] ) ) : '';
$divider = $this->form_hidden() ? '' : (string) $this->settings->get( 'divider_text' ); $divider = $this->form_hidden() ? '' : $this->divider_markup();
$divider = '' === trim( $divider ) ? '' : '<div class="m365-login__divider" aria-hidden="true"><span>' . esc_html( $divider ) . '</span></div>';
$html = '<div class="m365-login m365-login--' . esc_attr( $position ) . '" id="m365-login-block">'; $html = '<div class="m365-login m365-login--' . esc_attr( $position ) . '" id="m365-login-block">';
$html .= 'above' === $position ? $this->button( $redirect_to ) . $divider : $divider . $this->button( $redirect_to ); $html .= 'above' === $position ? $this->button( $redirect_to ) . $divider : $divider . $this->button( $redirect_to );

43
includes/class-m365-login-settings.php
View file

@ -51,6 +51,9 @@ class M365_Login_Settings {
'button_radius' => 4, 'button_radius' => 4,
'button_position' => 'below', 'button_position' => 'below',
'divider_text' => __( 'or', 'm365-login' ), 'divider_text' => __( 'or', 'm365-login' ),
// Custom login pages.
'custom_login_url' => '',
'inject_form' => 1, // Add the button to wp_login_form() output.
); );
} }
@ -209,7 +212,31 @@ class M365_Login_Settings {
*/ */
public function fallback_url() { public function fallback_url() {
$key = $this->fallback_key(); $key = $this->fallback_key();
return '' === $key ? '' : add_query_arg( 'm365_fallback', $key, wp_login_url() ); return '' === $key ? '' : add_query_arg( 'm365_fallback', $key, $this->login_page_url() );
}
/**
* URL of a custom login page (same site), or empty string.
*
* @return string
*/
public function custom_login_url() {
$url = (string) $this->get( 'custom_login_url', '' );
if ( '' === $url ) {
return '';
}
$validated = wp_validate_redirect( $url, '' );
return is_string( $validated ) ? $validated : '';
}
/**
* Where users land after a failed Microsoft sign-in (custom page or wp-login.php).
*
* @return string
*/
public function login_page_url() {
$custom = $this->custom_login_url();
return '' !== $custom ? $custom : wp_login_url();
} }
/** /**
@ -309,6 +336,20 @@ class M365_Login_Settings {
} }
$out['fallback_key'] = $key; $out['fallback_key'] = $key;
// Custom login page (must be on this site).
$custom = isset( $input['custom_login_url'] ) ? esc_url_raw( trim( wp_unslash( $input['custom_login_url'] ) ) ) : '';
if ( '' !== $custom ) {
if ( 0 === strpos( $custom, '/' ) ) {
$custom = home_url( $custom );
}
if ( '' === wp_validate_redirect( $custom, '' ) ) {
add_settings_error( M365_LOGIN_OPTION, 'custom_login_url', __( 'The custom login page must be a URL on this site.', 'm365-login' ) );
$custom = $current['custom_login_url'];
}
}
$out['custom_login_url'] = $custom;
$out['inject_form'] = empty( $input['inject_form'] ) ? 0 : 1;
// Button. // Button.
$text = isset( $input['button_text'] ) ? sanitize_text_field( wp_unslash( $input['button_text'] ) ) : ''; $text = isset( $input['button_text'] ) ? sanitize_text_field( wp_unslash( $input['button_text'] ) ) : '';
$out['button_text'] = '' === trim( $text ) ? $defaults['button_text'] : mb_substr( $text, 0, 80 ); $out['button_text'] = '' === trim( $text ) ? $defaults['button_text'] : mb_substr( $text, 0, 80 );

49
includes/functions.php Normal file
View file

@ -0,0 +1,49 @@
<?php
/**
* Template functions.
*
* @package M365_Login
*/
defined( 'ABSPATH' ) || exit;
if ( ! function_exists( 'm365_login_button' ) ) {
/**
* Outputs (or returns) the "Sign in with Microsoft" button for custom login templates.
*
* Usage in a theme template:
* <?php m365_login_button( array( 'redirect' => home_url( '/dashboard/' ) ) ); ?>
*
* @param array $args {
* @type string $redirect Destination after login. Default: admin dashboard.
* @type bool $show_messages Show error/info messages from a previous attempt. Default true.
* @type bool $show_divider Show the "or" divider above the button. Default false.
* }
* @param bool $display Echo (true) or return (false). Default true.
* @return string
*/
function m365_login_button( $args = array(), $display = true ) {
$plugin = M365_Login::instance();
$html = $plugin->button->standalone( $args );
if ( $display ) {
echo $html; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- markup is escaped where it is built.
}
return $html;
}
}
if ( ! function_exists( 'm365_login_messages' ) ) {
/**
* Outputs (or returns) the error/info messages of the last Microsoft sign-in attempt.
*
* @param bool $display Echo (true) or return (false). Default true.
* @return string
*/
function m365_login_messages( $display = true ) {
$html = M365_Login::instance()->button->messages_markup();
if ( $display ) {
echo $html; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- markup is escaped where it is built.
}
return $html;
}
}

BIN
languages/m365-login-de_DE.mo
View file

Binary file not shown.

198
languages/m365-login-de_DE.po
View file

@ -40,7 +40,7 @@ msgstr "Dieses Icon verwenden"
msgid "Copied!" msgid "Copied!"
msgstr "Kopiert!" msgstr "Kopiert!"
#: includes/class-m365-login-admin.php:148 includes/class-m365-login-admin.php:502 includes/class-m365-login-admin.php:545 #: includes/class-m365-login-admin.php:148 includes/class-m365-login-admin.php:529 includes/class-m365-login-admin.php:572
msgid "Copy" msgid "Copy"
msgstr "Kopieren" msgstr "Kopieren"
@ -64,11 +64,11 @@ msgstr "Suche läuft …"
msgid "Add" msgid "Add"
msgstr "Hinzufügen" msgstr "Hinzufügen"
#: includes/class-m365-login-admin.php:154 includes/class-m365-login-admin.php:476 #: includes/class-m365-login-admin.php:154 includes/class-m365-login-admin.php:503
msgid "Remove" msgid "Remove"
msgstr "Entfernen" msgstr "Entfernen"
#: includes/class-m365-login-admin.php:155 includes/class-m365-login-admin.php:210 includes/class-m365-login-admin.php:461 #: includes/class-m365-login-admin.php:155 includes/class-m365-login-admin.php:210 includes/class-m365-login-admin.php:488
msgid "Save the connection settings first, then search for groups." msgid "Save the connection settings first, then search for groups."
msgstr "Zuerst die Verbindungseinstellungen speichern, dann Gruppen suchen." msgstr "Zuerst die Verbindungseinstellungen speichern, dann Gruppen suchen."
@ -286,265 +286,309 @@ msgstr "Azure-Blau"
msgid "WordPress blue" msgid "WordPress blue"
msgstr "WordPress-Blau" msgstr "WordPress-Blau"
#: includes/class-m365-login-admin.php:412
msgid "Custom login page"
msgstr "Eigene Login-Seite"
#: includes/class-m365-login-admin.php:413
msgid "Using your own login page instead of wp-login.php? Tell the plugin where it is so error messages, the fallback link and the post-logout redirect point there."
msgstr "Eigene Login-Seite statt wp-login.php? Hier eintragen, damit Fehlermeldungen, der Fallback-Link und die Weiterleitung nach dem Abmelden dorthin zeigen."
#: includes/class-m365-login-admin.php:416 #: includes/class-m365-login-admin.php:416
msgid "URL of your login page"
msgstr "URL der Login-Seite"
#: includes/class-m365-login-admin.php:418
msgid "Must be on this site. Leave empty to use wp-login.php."
msgstr "Muss auf dieser Website liegen. Leer lassen, um wp-login.php zu verwenden."
#: includes/class-m365-login-admin.php:424
msgid "Add the button to every wp_login_form() form automatically"
msgstr "Button automatisch in jedes wp_login_form()-Formular einfügen"
#: includes/class-m365-login-admin.php:425
msgid "Covers themes and plugins that use the WordPress login form function. Page-builder widgets need the shortcode or the template function below."
msgstr "Deckt Themes und Plugins ab, die die WordPress-Login-Formularfunktion verwenden. Page-Builder-Widgets benötigen den Shortcode oder die Template-Funktion unten."
#: includes/class-m365-login-admin.php:430
msgid "Manual placement"
msgstr "Manuelle Platzierung"
#: includes/class-m365-login-admin.php:431
msgid "Shortcode (block editor, page builders):"
msgstr "Shortcode (Block-Editor, Page Builder):"
#: includes/class-m365-login-admin.php:433
msgid "Template function (theme files):"
msgstr "Template-Funktion (Theme-Dateien):"
#: includes/class-m365-login-admin.php:435
msgid "Both show the error messages of the last attempt; use m365_login_messages() to place them separately."
msgstr "Beide zeigen die Fehlermeldungen des letzten Versuchs; mit m365_login_messages() lassen sie sich separat platzieren."
#: includes/class-m365-login-admin.php:443
msgid "User matching & hardening" msgid "User matching & hardening"
msgstr "Benutzerzuordnung & Härtung" msgstr "Benutzerzuordnung & Härtung"
#: includes/class-m365-login-admin.php:417 #: includes/class-m365-login-admin.php:444
msgid "Users are never created automatically. A Microsoft sign-in only succeeds when a WordPress user with the same e-mail address already exists." msgid "Users are never created automatically. A Microsoft sign-in only succeeds when a WordPress user with the same e-mail address already exists."
msgstr "Benutzer werden nie automatisch angelegt. Eine Microsoft-Anmeldung gelingt nur, wenn bereits ein WordPress-Benutzer mit derselben E-Mail-Adresse existiert." msgstr "Benutzer werden nie automatisch angelegt. Eine Microsoft-Anmeldung gelingt nur, wenn bereits ein WordPress-Benutzer mit derselben E-Mail-Adresse existiert."
#: includes/class-m365-login-admin.php:422 #: includes/class-m365-login-admin.php:449
msgid "Bind WordPress accounts to the Microsoft object ID" msgid "Bind WordPress accounts to the Microsoft object ID"
msgstr "WordPress-Konten an die Microsoft-Objekt-ID binden" msgstr "WordPress-Konten an die Microsoft-Objekt-ID binden"
#: includes/class-m365-login-admin.php:423 #: includes/class-m365-login-admin.php:450
msgid "On first sign-in the immutable Microsoft object ID is stored with the user. Later sign-ins with the same e-mail but a different Microsoft identity are rejected. Strongly recommended." msgid "On first sign-in the immutable Microsoft object ID is stored with the user. Later sign-ins with the same e-mail but a different Microsoft identity are rejected. Strongly recommended."
msgstr "Bei der ersten Anmeldung wird die unveränderliche Microsoft-Objekt-ID am Benutzer gespeichert. Spätere Anmeldungen mit gleicher E-Mail, aber anderer Microsoft-Identität werden abgelehnt. Dringend empfohlen." msgstr "Bei der ersten Anmeldung wird die unveränderliche Microsoft-Objekt-ID am Benutzer gespeichert. Spätere Anmeldungen mit gleicher E-Mail, aber anderer Microsoft-Identität werden abgelehnt. Dringend empfohlen."
#: includes/class-m365-login-admin.php:430 #: includes/class-m365-login-admin.php:457
msgid "Fall back to the user principal name (UPN)" msgid "Fall back to the user principal name (UPN)"
msgstr "Auf den User Principal Name (UPN) zurückgreifen" msgstr "Auf den User Principal Name (UPN) zurückgreifen"
#: includes/class-m365-login-admin.php:431 #: includes/class-m365-login-admin.php:458
msgid "If the token contains no \"email\" claim, use the UPN (e.g. jane@contoso.com) when it is a valid e-mail address. Usually required for work accounts." msgid "If the token contains no \"email\" claim, use the UPN (e.g. jane@contoso.com) when it is a valid e-mail address. Usually required for work accounts."
msgstr "Enthält das Token keinen „email“-Claim, wird der UPN (z. B. jane@contoso.com) verwendet, sofern er eine gültige E-Mail-Adresse ist. Für Geschäftskonten meist erforderlich." msgstr "Enthält das Token keinen „email“-Claim, wird der UPN (z. B. jane@contoso.com) verwendet, sofern er eine gültige E-Mail-Adresse ist. Für Geschäftskonten meist erforderlich."
#: includes/class-m365-login-admin.php:438 #: includes/class-m365-login-admin.php:465
msgid "Keep users signed in (\"Remember me\")" msgid "Keep users signed in (\"Remember me\")"
msgstr "Benutzer angemeldet lassen („Angemeldet bleiben“)" msgstr "Benutzer angemeldet lassen („Angemeldet bleiben“)"
#: includes/class-m365-login-admin.php:439 #: includes/class-m365-login-admin.php:466
msgid "Issues a 14-day WordPress session instead of a browser session." msgid "Issues a 14-day WordPress session instead of a browser session."
msgstr "Erstellt eine 14-tägige WordPress-Sitzung statt einer Browser-Sitzung." msgstr "Erstellt eine 14-tägige WordPress-Sitzung statt einer Browser-Sitzung."
#: includes/class-m365-login-admin.php:444 #: includes/class-m365-login-admin.php:471
msgid "Allowed e-mail domains (optional)" msgid "Allowed e-mail domains (optional)"
msgstr "Erlaubte E-Mail-Domains (optional)" msgstr "Erlaubte E-Mail-Domains (optional)"
#: includes/class-m365-login-admin.php:446 #: includes/class-m365-login-admin.php:473
msgid "One or more domains separated by commas or new lines. Leave empty to allow any domain of your tenant." msgid "One or more domains separated by commas or new lines. Leave empty to allow any domain of your tenant."
msgstr "Eine oder mehrere Domains, getrennt durch Kommas oder Zeilenumbrüche. Leer lassen, um alle Domains des Tenants zuzulassen." msgstr "Eine oder mehrere Domains, getrennt durch Kommas oder Zeilenumbrüche. Leer lassen, um alle Domains des Tenants zuzulassen."
#: includes/class-m365-login-admin.php:451 #: includes/class-m365-login-admin.php:478
msgid "Allowed Entra groups (optional)" msgid "Allowed Entra groups (optional)"
msgstr "Erlaubte Entra-Gruppen (optional)" msgstr "Erlaubte Entra-Gruppen (optional)"
#: includes/class-m365-login-admin.php:452 #: includes/class-m365-login-admin.php:479
msgid "Only members of at least one of these groups may sign in. Leave empty to allow every matched user. Nested memberships count." msgid "Only members of at least one of these groups may sign in. Leave empty to allow every matched user. Nested memberships count."
msgstr "Nur Mitglieder mindestens einer dieser Gruppen dürfen sich anmelden. Leer lassen, um alle zugeordneten Benutzer zuzulassen. Verschachtelte Mitgliedschaften zählen." msgstr "Nur Mitglieder mindestens einer dieser Gruppen dürfen sich anmelden. Leer lassen, um alle zugeordneten Benutzer zuzulassen. Verschachtelte Mitgliedschaften zählen."
#: includes/class-m365-login-admin.php:455 #: includes/class-m365-login-admin.php:482
msgid "Search groups" msgid "Search groups"
msgstr "Gruppen suchen" msgstr "Gruppen suchen"
#: includes/class-m365-login-admin.php:457 #: includes/class-m365-login-admin.php:484
msgid "Type a group name or paste an object ID…" msgid "Type a group name or paste an object ID…"
msgstr "Gruppenname eingeben oder Objekt-ID einfügen …" msgstr "Gruppenname eingeben oder Objekt-ID einfügen …"
#: includes/class-m365-login-admin.php:458 #: includes/class-m365-login-admin.php:485
msgid "Search" msgid "Search"
msgstr "Suchen" msgstr "Suchen"
#: includes/class-m365-login-admin.php:463 #: includes/class-m365-login-admin.php:490
msgid "Needs the application permission \"GroupMember.Read.All\" with admin consent. Without it you can still paste group object IDs." msgid "Needs the application permission \"GroupMember.Read.All\" with admin consent. Without it you can still paste group object IDs."
msgstr "Benötigt die Anwendungsberechtigung „GroupMember.Read.All“ mit Administratorzustimmung. Ohne sie können Gruppen-Objekt-IDs trotzdem eingefügt werden." msgstr "Benötigt die Anwendungsberechtigung „GroupMember.Read.All“ mit Administratorzustimmung. Ohne sie können Gruppen-Objekt-IDs trotzdem eingefügt werden."
#: includes/class-m365-login-admin.php:469 #: includes/class-m365-login-admin.php:496
msgid "Selected groups" msgid "Selected groups"
msgstr "Ausgewählte Gruppen" msgstr "Ausgewählte Gruppen"
#: includes/class-m365-login-admin.php:470 #: includes/class-m365-login-admin.php:497
msgid "No groups selected – every matched user may sign in." msgid "No groups selected – every matched user may sign in."
msgstr "Keine Gruppen ausgewählt – jeder zugeordnete Benutzer darf sich anmelden." msgstr "Keine Gruppen ausgewählt – jeder zugeordnete Benutzer darf sich anmelden."
#: includes/class-m365-login-admin.php:480 #: includes/class-m365-login-admin.php:507
msgid "Membership is read from the \"groups\" claim of the ID token when present; otherwise the plugin asks Microsoft Graph (application permission \"User.Read.All\" or \"Directory.Read.All\"). If neither works, the sign-in is refused." msgid "Membership is read from the \"groups\" claim of the ID token when present; otherwise the plugin asks Microsoft Graph (application permission \"User.Read.All\" or \"Directory.Read.All\"). If neither works, the sign-in is refused."
msgstr "Die Mitgliedschaft wird aus dem „groups“-Claim des ID-Tokens gelesen, falls vorhanden; andernfalls fragt das Plugin Microsoft Graph (Anwendungsberechtigung „User.Read.All“ oder „Directory.Read.All“). Funktioniert beides nicht, wird die Anmeldung abgelehnt." msgstr "Die Mitgliedschaft wird aus dem „groups“-Claim des ID-Tokens gelesen, falls vorhanden; andernfalls fragt das Plugin Microsoft Graph (Anwendungsberechtigung „User.Read.All“ oder „Directory.Read.All“). Funktioniert beides nicht, wird die Anmeldung abgelehnt."
#: includes/class-m365-login-admin.php:485 #: includes/class-m365-login-admin.php:512
msgid "Button-only mode" msgid "Button-only mode"
msgstr "Nur-Button-Modus" msgstr "Nur-Button-Modus"
#: includes/class-m365-login-admin.php:486 #: includes/class-m365-login-admin.php:513
msgid "Hide the username/password form and the \"Lost your password?\" link, and refuse password sign-ins on the login page. Application passwords, REST and XML-RPC are not affected." msgid "Hides the username/password fields (on wp-login.php and in wp_login_form() forms) and refuses every interactive password sign-in on the site, including custom login forms. Application passwords, REST, XML-RPC and WP-CLI are not affected."
msgstr "Blendet das Benutzername/Passwort-Formular und den Link „Passwort vergessen?“ aus und lehnt Passwort-Anmeldungen auf der Login-Seite ab. Anwendungspasswörter, REST und XML-RPC sind nicht betroffen." msgstr "Blendet die Benutzername/Passwort-Felder aus (auf wp-login.php und in wp_login_form()-Formularen) und lehnt jede interaktive Passwort-Anmeldung auf der Website ab, auch in eigenen Login-Formularen. Anwendungspasswörter, REST, XML-RPC und WP-CLI sind nicht betroffen."
#: includes/class-m365-login-admin.php:491 #: includes/class-m365-login-admin.php:518
msgid "Show only the Microsoft button on the login page" msgid "Show only the Microsoft button on the login page"
msgstr "Auf der Login-Seite nur den Microsoft-Button anzeigen" msgstr "Auf der Login-Seite nur den Microsoft-Button anzeigen"
#: includes/class-m365-login-admin.php:492 #: includes/class-m365-login-admin.php:519
msgid "Becomes active once the connection is configured. Make sure your own account can sign in via Microsoft before enabling this." msgid "Becomes active once the connection is configured. Make sure your own account can sign in via Microsoft before enabling this."
msgstr "Wird aktiv, sobald die Verbindung eingerichtet ist. Vor dem Aktivieren sicherstellen, dass das eigene Konto sich per Microsoft anmelden kann." msgstr "Wird aktiv, sobald die Verbindung eingerichtet ist. Vor dem Aktivieren sicherstellen, dass das eigene Konto sich per Microsoft anmelden kann."
#: includes/class-m365-login-admin.php:497 #: includes/class-m365-login-admin.php:524
msgid "Fallback link (keep it secret)" msgid "Fallback link (keep it secret)"
msgstr "Fallback-Link (geheim halten)" msgstr "Fallback-Link (geheim halten)"
#: includes/class-m365-login-admin.php:498 #: includes/class-m365-login-admin.php:525
msgid "Opening this link shows the password form again in that browser for 30 minutes. Bookmark it somewhere safe – it is your way back in if Microsoft sign-in ever breaks." msgid "Opening this link shows the password form again in that browser for 30 minutes and allows password sign-in there. Bookmark it somewhere safe – it is your way back in if Microsoft sign-in ever breaks."
msgstr "Wer diesen Link öffnet, sieht in diesem Browser 30 Minuten lang wieder das Passwort-Formular. Sicher aufbewahren – er ist der Weg zurück, falls die Microsoft-Anmeldung einmal nicht funktioniert." msgstr "Wer diesen Link öffnet, sieht in diesem Browser 30 Minuten lang wieder das Passwort-Formular und kann sich dort mit Passwort anmelden. Sicher aufbewahren – er ist der Weg zurück, falls die Microsoft-Anmeldung einmal nicht funktioniert."
#: includes/class-m365-login-admin.php:506 #: includes/class-m365-login-admin.php:533
msgid "Generate a new key when saving" msgid "Generate a new key when saving"
msgstr "Beim Speichern einen neuen Schlüssel erzeugen" msgstr "Beim Speichern einen neuen Schlüssel erzeugen"
#: includes/class-m365-login-admin.php:509 #: includes/class-m365-login-admin.php:536
msgid "A key is generated automatically the first time you save these settings." msgid "A key is generated automatically the first time you save these settings."
msgstr "Beim ersten Speichern dieser Einstellungen wird automatisch ein Schlüssel erzeugt." msgstr "Beim ersten Speichern dieser Einstellungen wird automatisch ein Schlüssel erzeugt."
#. translators: %s: PHP constant #. translators: %s: PHP constant
#: includes/class-m365-login-admin.php:515 #: includes/class-m365-login-admin.php:542
msgid "Emergency switch: add %s to wp-config.php to disable button-only mode entirely." msgid "Emergency switch: add %s to wp-config.php to disable button-only mode entirely."
msgstr "Notschalter: %s in die wp-config.php eintragen, um den Nur-Button-Modus vollständig abzuschalten." msgstr "Notschalter: %s in die wp-config.php eintragen, um den Nur-Button-Modus vollständig abzuschalten."
#. translators: %s: PHP constant #. translators: %s: PHP constant
#: includes/class-m365-login-admin.php:524 #: includes/class-m365-login-admin.php:551
msgid "What the plugin does to keep sign-ins safe" msgid "What the plugin does to keep sign-ins safe"
msgstr "So schützt das Plugin die Anmeldung" msgstr "So schützt das Plugin die Anmeldung"
#: includes/class-m365-login-admin.php:526 #: includes/class-m365-login-admin.php:553
msgid "OpenID Connect authorization code flow with PKCE (S256) – no tokens ever pass through the browser." msgid "OpenID Connect authorization code flow with PKCE (S256) – no tokens ever pass through the browser."
msgstr "OpenID Connect Authorization Code Flow mit PKCE (S256) – Tokens laufen nie durch den Browser." msgstr "OpenID Connect Authorization Code Flow mit PKCE (S256) – Tokens laufen nie durch den Browser."
#: includes/class-m365-login-admin.php:527 #: includes/class-m365-login-admin.php:554
msgid "Single-use state and nonce values bound to the browser via an HttpOnly cookie (CSRF and replay protection)." msgid "Single-use state and nonce values bound to the browser via an HttpOnly cookie (CSRF and replay protection)."
msgstr "Einmalige State- und Nonce-Werte, per HttpOnly-Cookie an den Browser gebunden (CSRF- und Replay-Schutz)." msgstr "Einmalige State- und Nonce-Werte, per HttpOnly-Cookie an den Browser gebunden (CSRF- und Replay-Schutz)."
#: includes/class-m365-login-admin.php:528 #: includes/class-m365-login-admin.php:555
msgid "ID token signature verified against Microsoft’s published signing keys; issuer, audience, tenant, expiry and nonce are checked." msgid "ID token signature verified against Microsoft’s published signing keys; issuer, audience, tenant, expiry and nonce are checked."
msgstr "Signatur des ID-Tokens wird gegen Microsofts veröffentlichte Signaturschlüssel geprüft; Issuer, Audience, Tenant, Ablauf und Nonce werden kontrolliert." msgstr "Signatur des ID-Tokens wird gegen Microsofts veröffentlichte Signaturschlüssel geprüft; Issuer, Audience, Tenant, Ablauf und Nonce werden kontrolliert."
#: includes/class-m365-login-admin.php:529 #: includes/class-m365-login-admin.php:556
msgid "Client secret encrypted at rest; no accounts are created, no passwords are changed." msgid "Client secret encrypted at rest; no accounts are created, no passwords are changed."
msgstr "Client Secret verschlüsselt gespeichert; es werden keine Konten angelegt und keine Passwörter geändert." msgstr "Client Secret verschlüsselt gespeichert; es werden keine Konten angelegt und keine Passwörter geändert."
#: includes/class-m365-login-admin.php:535 #: includes/class-m365-login-admin.php:562
msgid "Save changes" msgid "Save changes"
msgstr "Änderungen speichern" msgstr "Änderungen speichern"
#: includes/class-m365-login-admin.php:541 #: includes/class-m365-login-admin.php:568
msgid "Redirect URI" msgid "Redirect URI"
msgstr "Umleitungs-URI (Redirect URI)" msgstr "Umleitungs-URI (Redirect URI)"
#: includes/class-m365-login-admin.php:542 #: includes/class-m365-login-admin.php:569
msgid "Register this URI in your app registration under Authentication → Web → Redirect URIs:" msgid "Register this URI in your app registration under Authentication → Web → Redirect URIs:"
msgstr "Diese URI in der App-Registrierung unter Authentifizierung → Web → Umleitungs-URIs eintragen:" msgstr "Diese URI in der App-Registrierung unter Authentifizierung → Web → Umleitungs-URIs eintragen:"
#: includes/class-m365-login-admin.php:548 #: includes/class-m365-login-admin.php:575
msgid "Plain permalinks are active, so the callback uses a query string. If you enable pretty permalinks later, the redirect URI changes and must be updated in Entra ID." msgid "Plain permalinks are active, so the callback uses a query string. If you enable pretty permalinks later, the redirect URI changes and must be updated in Entra ID."
msgstr "Einfache Permalinks sind aktiv, daher verwendet der Callback einen Query-String. Werden später sprechende Permalinks aktiviert, ändert sich die Umleitungs-URI und muss in Entra ID angepasst werden." msgstr "Einfache Permalinks sind aktiv, daher verwendet der Callback einen Query-String. Werden später sprechende Permalinks aktiviert, ändert sich die Umleitungs-URI und muss in Entra ID angepasst werden."
#: includes/class-m365-login-admin.php:551 #: includes/class-m365-login-admin.php:578
msgid "Your site does not use HTTPS. Microsoft only accepts http:// redirect URIs for localhost; production sites must use HTTPS." msgid "Your site does not use HTTPS. Microsoft only accepts http:// redirect URIs for localhost; production sites must use HTTPS."
msgstr "Diese Website nutzt kein HTTPS. Microsoft akzeptiert http://-Umleitungs-URIs nur für localhost; produktive Websites benötigen HTTPS." msgstr "Diese Website nutzt kein HTTPS. Microsoft akzeptiert http://-Umleitungs-URIs nur für localhost; produktive Websites benötigen HTTPS."
#: includes/class-m365-login-admin.php:556 #: includes/class-m365-login-admin.php:583
msgid "Setup in 5 steps" msgid "Setup in 5 steps"
msgstr "Einrichtung in 5 Schritten" msgstr "Einrichtung in 5 Schritten"
#: includes/class-m365-login-admin.php:558 #: includes/class-m365-login-admin.php:585
msgid "Open the Microsoft Entra admin center → App registrations → New registration." msgid "Open the Microsoft Entra admin center → App registrations → New registration."
msgstr "Microsoft Entra Admin Center öffnen → App-Registrierungen → Neue Registrierung." msgstr "Microsoft Entra Admin Center öffnen → App-Registrierungen → Neue Registrierung."
#: includes/class-m365-login-admin.php:559 #: includes/class-m365-login-admin.php:586
msgid "Choose \"Accounts in this organizational directory only\", set the platform to Web and paste the redirect URI above." msgid "Choose \"Accounts in this organizational directory only\", set the platform to Web and paste the redirect URI above."
msgstr "„Nur Konten in diesem Organisationsverzeichnis“ wählen, Plattform „Web“ auswählen und die Umleitungs-URI von oben einfügen." msgstr "„Nur Konten in diesem Organisationsverzeichnis“ wählen, Plattform „Web“ auswählen und die Umleitungs-URI von oben einfügen."
#: includes/class-m365-login-admin.php:560 #: includes/class-m365-login-admin.php:587
msgid "Copy the Application (client) ID and Directory (tenant) ID from the overview page." msgid "Copy the Application (client) ID and Directory (tenant) ID from the overview page."
msgstr "Anwendungs-ID (Client) und Verzeichnis-ID (Mandant) von der Übersichtsseite kopieren." msgstr "Anwendungs-ID (Client) und Verzeichnis-ID (Mandant) von der Übersichtsseite kopieren."
#: includes/class-m365-login-admin.php:561 #: includes/class-m365-login-admin.php:588
msgid "Under Certificates & secrets create a client secret and copy its value (not the ID)." msgid "Under Certificates & secrets create a client secret and copy its value (not the ID)."
msgstr "Unter „Zertifikate & Geheimnisse“ einen geheimen Clientschlüssel erstellen und dessen Wert (nicht die ID) kopieren." msgstr "Unter „Zertifikate & Geheimnisse“ einen geheimen Clientschlüssel erstellen und dessen Wert (nicht die ID) kopieren."
#: includes/class-m365-login-admin.php:562 #: includes/class-m365-login-admin.php:589
msgid "Under Token configuration add the optional claim \"email\" for ID tokens (recommended), then save this page." msgid "Under Token configuration add the optional claim \"email\" for ID tokens (recommended), then save this page."
msgstr "Unter „Tokenkonfiguration“ den optionalen Anspruch „email“ für ID-Tokens hinzufügen (empfohlen), dann diese Seite speichern." msgstr "Unter „Tokenkonfiguration“ den optionalen Anspruch „email“ für ID-Tokens hinzufügen (empfohlen), dann diese Seite speichern."
#: includes/class-m365-login-admin.php:564 #: includes/class-m365-login-admin.php:591
msgid "Required API permission: openid, profile, email (delegated) – granted by default." msgid "Required API permission: openid, profile, email (delegated) – granted by default."
msgstr "Benötigte API-Berechtigungen: openid, profile, email (delegiert) – standardmäßig vorhanden." msgstr "Benötigte API-Berechtigungen: openid, profile, email (delegiert) – standardmäßig vorhanden."
#: includes/class-m365-login-admin.php:565 #: includes/class-m365-login-admin.php:592
msgid "Optional, for group restrictions: application permissions GroupMember.Read.All and User.Read.All (Microsoft Graph) with admin consent." msgid "Optional, for group restrictions: application permissions GroupMember.Read.All and User.Read.All (Microsoft Graph) with admin consent."
msgstr "Optional für Gruppen-Beschränkungen: Anwendungsberechtigungen GroupMember.Read.All und User.Read.All (Microsoft Graph) mit Administratorzustimmung." msgstr "Optional für Gruppen-Beschränkungen: Anwendungsberechtigungen GroupMember.Read.All und User.Read.All (Microsoft Graph) mit Administratorzustimmung."
#: includes/class-m365-login-admin.php:569 #: includes/class-m365-login-admin.php:596
msgid "Shortcode" msgid "Shortcode"
msgstr "Shortcode" msgstr "Shortcode"
#: includes/class-m365-login-admin.php:570 #: includes/class-m365-login-admin.php:597
msgid "Place the button on a custom login page:" msgid "Place the button on a custom login page:"
msgstr "Button auf einer eigenen Login-Seite platzieren:" msgstr "Button auf einer eigenen Login-Seite platzieren:"
#: includes/class-m365-login-auth.php:136 #: includes/class-m365-login-admin.php:599
msgid "More options on the Button tab under \"Custom login page\"."
msgstr "Weitere Optionen im Tab „Button“ unter „Eigene Login-Seite“."
#: includes/class-m365-login-auth.php:173
msgid "Password sign-in is disabled on this site. Please use the Microsoft button." msgid "Password sign-in is disabled on this site. Please use the Microsoft button."
msgstr "Die Anmeldung mit Passwort ist auf dieser Website deaktiviert. Bitte den Microsoft-Button verwenden." msgstr "Die Anmeldung mit Passwort ist auf dieser Website deaktiviert. Bitte den Microsoft-Button verwenden."
#: includes/class-m365-login-auth.php:751 #: includes/class-m365-login-auth.php:777
msgid "Password sign-in is temporarily enabled for this browser (30 minutes)." msgid "Password sign-in is temporarily enabled for this browser (30 minutes)."
msgstr "Die Passwort-Anmeldung ist für diesen Browser vorübergehend aktiviert (30 Minuten)." msgstr "Die Passwort-Anmeldung ist für diesen Browser vorübergehend aktiviert (30 Minuten)."
#: includes/class-m365-login-auth.php:758 includes/class-m365-login-graph.php:63 #: includes/class-m365-login-auth.php:798 includes/class-m365-login-graph.php:63
msgid "Microsoft login is not configured yet." msgid "Microsoft login is not configured yet."
msgstr "Die Microsoft-Anmeldung ist noch nicht eingerichtet." msgstr "Die Microsoft-Anmeldung ist noch nicht eingerichtet."
#: includes/class-m365-login-auth.php:759 #: includes/class-m365-login-auth.php:799
msgid "The login request expired or was invalid. Please try again." msgid "The login request expired or was invalid. Please try again."
msgstr "Die Anmeldeanfrage ist abgelaufen oder ungültig. Bitte erneut versuchen." msgstr "Die Anmeldeanfrage ist abgelaufen oder ungültig. Bitte erneut versuchen."
#: includes/class-m365-login-auth.php:760 #: includes/class-m365-login-auth.php:800
msgid "Microsoft sign-in was cancelled." msgid "Microsoft sign-in was cancelled."
msgstr "Die Microsoft-Anmeldung wurde abgebrochen." msgstr "Die Microsoft-Anmeldung wurde abgebrochen."
#: includes/class-m365-login-auth.php:761 #: includes/class-m365-login-auth.php:801
msgid "Microsoft returned an error. Please try again." msgid "Microsoft returned an error. Please try again."
msgstr "Microsoft hat einen Fehler gemeldet. Bitte erneut versuchen." msgstr "Microsoft hat einen Fehler gemeldet. Bitte erneut versuchen."
#: includes/class-m365-login-auth.php:762 #: includes/class-m365-login-auth.php:802
msgid "Could not complete the sign-in with Microsoft. Please try again or contact an administrator." msgid "Could not complete the sign-in with Microsoft. Please try again or contact an administrator."
msgstr "Die Anmeldung über Microsoft konnte nicht abgeschlossen werden. Bitte erneut versuchen oder einen Administrator kontaktieren." msgstr "Die Anmeldung über Microsoft konnte nicht abgeschlossen werden. Bitte erneut versuchen oder einen Administrator kontaktieren."
#: includes/class-m365-login-auth.php:763 #: includes/class-m365-login-auth.php:803
msgid "The Microsoft sign-in could not be verified." msgid "The Microsoft sign-in could not be verified."
msgstr "Die Microsoft-Anmeldung konnte nicht verifiziert werden." msgstr "Die Microsoft-Anmeldung konnte nicht verifiziert werden."
#: includes/class-m365-login-auth.php:764 #: includes/class-m365-login-auth.php:804
msgid "Your Microsoft account did not provide an e-mail address." msgid "Your Microsoft account did not provide an e-mail address."
msgstr "Das Microsoft-Konto hat keine E-Mail-Adresse übermittelt." msgstr "Das Microsoft-Konto hat keine E-Mail-Adresse übermittelt."
#: includes/class-m365-login-auth.php:765 #: includes/class-m365-login-auth.php:805
msgid "Your e-mail domain is not allowed to sign in here." msgid "Your e-mail domain is not allowed to sign in here."
msgstr "Diese E-Mail-Domain ist hier nicht zur Anmeldung zugelassen." msgstr "Diese E-Mail-Domain ist hier nicht zur Anmeldung zugelassen."
#: includes/class-m365-login-auth.php:766 #: includes/class-m365-login-auth.php:806
msgid "No WordPress account exists for your Microsoft e-mail address." msgid "No WordPress account exists for your Microsoft e-mail address."
msgstr "Für die E-Mail-Adresse des Microsoft-Kontos existiert kein WordPress-Konto." msgstr "Für die E-Mail-Adresse des Microsoft-Kontos existiert kein WordPress-Konto."
#: includes/class-m365-login-auth.php:767 #: includes/class-m365-login-auth.php:807
msgid "This WordPress account is linked to a different Microsoft account. Please contact an administrator." msgid "This WordPress account is linked to a different Microsoft account. Please contact an administrator."
msgstr "Dieses WordPress-Konto ist mit einem anderen Microsoft-Konto verknüpft. Bitte einen Administrator kontaktieren." msgstr "Dieses WordPress-Konto ist mit einem anderen Microsoft-Konto verknüpft. Bitte einen Administrator kontaktieren."
#: includes/class-m365-login-auth.php:768 #: includes/class-m365-login-auth.php:808
msgid "You are not allowed to sign in with this account." msgid "You are not allowed to sign in with this account."
msgstr "Die Anmeldung mit diesem Konto ist nicht erlaubt." msgstr "Die Anmeldung mit diesem Konto ist nicht erlaubt."
#: includes/class-m365-login-auth.php:769 #: includes/class-m365-login-auth.php:809
msgid "Your Microsoft account is not a member of a group that is allowed to sign in here." msgid "Your Microsoft account is not a member of a group that is allowed to sign in here."
msgstr "Das Microsoft-Konto ist in keiner Gruppe, die sich hier anmelden darf." msgstr "Das Microsoft-Konto ist in keiner Gruppe, die sich hier anmelden darf."
#: includes/class-m365-login-auth.php:770 #: includes/class-m365-login-auth.php:810
msgid "Your group membership could not be verified. Please contact an administrator." msgid "Your group membership could not be verified. Please contact an administrator."
msgstr "Die Gruppenmitgliedschaft konnte nicht geprüft werden. Bitte einen Administrator kontaktieren." msgstr "Die Gruppenmitgliedschaft konnte nicht geprüft werden. Bitte einen Administrator kontaktieren."
#: includes/class-m365-login-auth.php:771 #: includes/class-m365-login-auth.php:811
msgid "The fallback key is not valid." msgid "The fallback key is not valid."
msgstr "Der Fallback-Schlüssel ist ungültig." msgstr "Der Fallback-Schlüssel ist ungültig."
#: includes/class-m365-login-auth.php:772 #: includes/class-m365-login-auth.php:812
msgid "Too many attempts. Please wait 15 minutes." msgid "Too many attempts. Please wait 15 minutes."
msgstr "Zu viele Versuche. Bitte 15 Minuten warten." msgstr "Zu viele Versuche. Bitte 15 Minuten warten."
@ -568,22 +612,26 @@ msgstr "Login mit Microsoft"
msgid "or" msgid "or"
msgstr "oder" msgstr "oder"
#: includes/class-m365-login-settings.php:245 #: includes/class-m365-login-settings.php:272
msgid "The tenant ID must be a GUID (e.g. 1a2b3c4d-…) or one of \"organizations\", \"common\", \"consumers\"." msgid "The tenant ID must be a GUID (e.g. 1a2b3c4d-…) or one of \"organizations\", \"common\", \"consumers\"."
msgstr "Die Tenant-ID muss eine GUID (z. B. 1a2b3c4d-…) oder einer der Werte „organizations“, „common“, „consumers“ sein." msgstr "Die Tenant-ID muss eine GUID (z. B. 1a2b3c4d-…) oder einer der Werte „organizations“, „common“, „consumers“ sein."
#: includes/class-m365-login-settings.php:253 #: includes/class-m365-login-settings.php:280
msgid "The application (client) ID must be a GUID." msgid "The application (client) ID must be a GUID."
msgstr "Die Anwendungs-ID (Client) muss eine GUID sein." msgstr "Die Anwendungs-ID (Client) muss eine GUID sein."
#: includes/class-m365-login-settings.php:265 #: includes/class-m365-login-settings.php:292
msgid "The client secret contains invalid characters." msgid "The client secret contains invalid characters."
msgstr "Das Client Secret enthält ungültige Zeichen." msgstr "Das Client Secret enthält ungültige Zeichen."
#: includes/class-m365-login-settings.php:269 #: includes/class-m365-login-settings.php:296
msgid "The client secret could not be encrypted. Is the OpenSSL extension available?" msgid "The client secret could not be encrypted. Is the OpenSSL extension available?"
msgstr "Das Client Secret konnte nicht verschlüsselt werden. Ist die OpenSSL-Erweiterung verfügbar?" msgstr "Das Client Secret konnte nicht verschlüsselt werden. Ist die OpenSSL-Erweiterung verfügbar?"
#: includes/class-m365-login-settings.php:346
msgid "The custom login page must be a URL on this site."
msgstr "Die eigene Login-Seite muss eine URL dieser Website sein."
#: includes/class-m365-login.php:102 #: includes/class-m365-login.php:102
msgid "Settings" msgid "Settings"
msgstr "Einstellungen" msgstr "Einstellungen"

BIN
languages/m365-login-de_DE_formal.mo
View file

Binary file not shown.

198
languages/m365-login-de_DE_formal.po
View file

@ -40,7 +40,7 @@ msgstr "Dieses Icon verwenden"
msgid "Copied!" msgid "Copied!"
msgstr "Kopiert!" msgstr "Kopiert!"
#: includes/class-m365-login-admin.php:148 includes/class-m365-login-admin.php:502 includes/class-m365-login-admin.php:545 #: includes/class-m365-login-admin.php:148 includes/class-m365-login-admin.php:529 includes/class-m365-login-admin.php:572
msgid "Copy" msgid "Copy"
msgstr "Kopieren" msgstr "Kopieren"
@ -64,11 +64,11 @@ msgstr "Suche läuft …"
msgid "Add" msgid "Add"
msgstr "Hinzufügen" msgstr "Hinzufügen"
#: includes/class-m365-login-admin.php:154 includes/class-m365-login-admin.php:476 #: includes/class-m365-login-admin.php:154 includes/class-m365-login-admin.php:503
msgid "Remove" msgid "Remove"
msgstr "Entfernen" msgstr "Entfernen"
#: includes/class-m365-login-admin.php:155 includes/class-m365-login-admin.php:210 includes/class-m365-login-admin.php:461 #: includes/class-m365-login-admin.php:155 includes/class-m365-login-admin.php:210 includes/class-m365-login-admin.php:488
msgid "Save the connection settings first, then search for groups." msgid "Save the connection settings first, then search for groups."
msgstr "Zuerst die Verbindungseinstellungen speichern, dann Gruppen suchen." msgstr "Zuerst die Verbindungseinstellungen speichern, dann Gruppen suchen."
@ -286,265 +286,309 @@ msgstr "Azure-Blau"
msgid "WordPress blue" msgid "WordPress blue"
msgstr "WordPress-Blau" msgstr "WordPress-Blau"
#: includes/class-m365-login-admin.php:412
msgid "Custom login page"
msgstr "Eigene Login-Seite"
#: includes/class-m365-login-admin.php:413
msgid "Using your own login page instead of wp-login.php? Tell the plugin where it is so error messages, the fallback link and the post-logout redirect point there."
msgstr "Eigene Login-Seite statt wp-login.php? Hier eintragen, damit Fehlermeldungen, der Fallback-Link und die Weiterleitung nach dem Abmelden dorthin zeigen."
#: includes/class-m365-login-admin.php:416 #: includes/class-m365-login-admin.php:416
msgid "URL of your login page"
msgstr "URL der Login-Seite"
#: includes/class-m365-login-admin.php:418
msgid "Must be on this site. Leave empty to use wp-login.php."
msgstr "Muss auf dieser Website liegen. Leer lassen, um wp-login.php zu verwenden."
#: includes/class-m365-login-admin.php:424
msgid "Add the button to every wp_login_form() form automatically"
msgstr "Button automatisch in jedes wp_login_form()-Formular einfügen"
#: includes/class-m365-login-admin.php:425
msgid "Covers themes and plugins that use the WordPress login form function. Page-builder widgets need the shortcode or the template function below."
msgstr "Deckt Themes und Plugins ab, die die WordPress-Login-Formularfunktion verwenden. Page-Builder-Widgets benötigen den Shortcode oder die Template-Funktion unten."
#: includes/class-m365-login-admin.php:430
msgid "Manual placement"
msgstr "Manuelle Platzierung"
#: includes/class-m365-login-admin.php:431
msgid "Shortcode (block editor, page builders):"
msgstr "Shortcode (Block-Editor, Page Builder):"
#: includes/class-m365-login-admin.php:433
msgid "Template function (theme files):"
msgstr "Template-Funktion (Theme-Dateien):"
#: includes/class-m365-login-admin.php:435
msgid "Both show the error messages of the last attempt; use m365_login_messages() to place them separately."
msgstr "Beide zeigen die Fehlermeldungen des letzten Versuchs; mit m365_login_messages() lassen sie sich separat platzieren."
#: includes/class-m365-login-admin.php:443
msgid "User matching & hardening" msgid "User matching & hardening"
msgstr "Benutzerzuordnung & Härtung" msgstr "Benutzerzuordnung & Härtung"
#: includes/class-m365-login-admin.php:417 #: includes/class-m365-login-admin.php:444
msgid "Users are never created automatically. A Microsoft sign-in only succeeds when a WordPress user with the same e-mail address already exists." msgid "Users are never created automatically. A Microsoft sign-in only succeeds when a WordPress user with the same e-mail address already exists."
msgstr "Benutzer werden nie automatisch angelegt. Eine Microsoft-Anmeldung gelingt nur, wenn bereits ein WordPress-Benutzer mit derselben E-Mail-Adresse existiert." msgstr "Benutzer werden nie automatisch angelegt. Eine Microsoft-Anmeldung gelingt nur, wenn bereits ein WordPress-Benutzer mit derselben E-Mail-Adresse existiert."
#: includes/class-m365-login-admin.php:422 #: includes/class-m365-login-admin.php:449
msgid "Bind WordPress accounts to the Microsoft object ID" msgid "Bind WordPress accounts to the Microsoft object ID"
msgstr "WordPress-Konten an die Microsoft-Objekt-ID binden" msgstr "WordPress-Konten an die Microsoft-Objekt-ID binden"
#: includes/class-m365-login-admin.php:423 #: includes/class-m365-login-admin.php:450
msgid "On first sign-in the immutable Microsoft object ID is stored with the user. Later sign-ins with the same e-mail but a different Microsoft identity are rejected. Strongly recommended." msgid "On first sign-in the immutable Microsoft object ID is stored with the user. Later sign-ins with the same e-mail but a different Microsoft identity are rejected. Strongly recommended."
msgstr "Bei der ersten Anmeldung wird die unveränderliche Microsoft-Objekt-ID am Benutzer gespeichert. Spätere Anmeldungen mit gleicher E-Mail, aber anderer Microsoft-Identität werden abgelehnt. Dringend empfohlen." msgstr "Bei der ersten Anmeldung wird die unveränderliche Microsoft-Objekt-ID am Benutzer gespeichert. Spätere Anmeldungen mit gleicher E-Mail, aber anderer Microsoft-Identität werden abgelehnt. Dringend empfohlen."
#: includes/class-m365-login-admin.php:430 #: includes/class-m365-login-admin.php:457
msgid "Fall back to the user principal name (UPN)" msgid "Fall back to the user principal name (UPN)"
msgstr "Auf den User Principal Name (UPN) zurückgreifen" msgstr "Auf den User Principal Name (UPN) zurückgreifen"
#: includes/class-m365-login-admin.php:431 #: includes/class-m365-login-admin.php:458
msgid "If the token contains no \"email\" claim, use the UPN (e.g. jane@contoso.com) when it is a valid e-mail address. Usually required for work accounts." msgid "If the token contains no \"email\" claim, use the UPN (e.g. jane@contoso.com) when it is a valid e-mail address. Usually required for work accounts."
msgstr "Enthält das Token keinen „email“-Claim, wird der UPN (z. B. jane@contoso.com) verwendet, sofern er eine gültige E-Mail-Adresse ist. Für Geschäftskonten meist erforderlich." msgstr "Enthält das Token keinen „email“-Claim, wird der UPN (z. B. jane@contoso.com) verwendet, sofern er eine gültige E-Mail-Adresse ist. Für Geschäftskonten meist erforderlich."
#: includes/class-m365-login-admin.php:438 #: includes/class-m365-login-admin.php:465
msgid "Keep users signed in (\"Remember me\")" msgid "Keep users signed in (\"Remember me\")"
msgstr "Benutzer angemeldet lassen („Angemeldet bleiben“)" msgstr "Benutzer angemeldet lassen („Angemeldet bleiben“)"
#: includes/class-m365-login-admin.php:439 #: includes/class-m365-login-admin.php:466
msgid "Issues a 14-day WordPress session instead of a browser session." msgid "Issues a 14-day WordPress session instead of a browser session."
msgstr "Erstellt eine 14-tägige WordPress-Sitzung statt einer Browser-Sitzung." msgstr "Erstellt eine 14-tägige WordPress-Sitzung statt einer Browser-Sitzung."
#: includes/class-m365-login-admin.php:444 #: includes/class-m365-login-admin.php:471
msgid "Allowed e-mail domains (optional)" msgid "Allowed e-mail domains (optional)"
msgstr "Erlaubte E-Mail-Domains (optional)" msgstr "Erlaubte E-Mail-Domains (optional)"
#: includes/class-m365-login-admin.php:446 #: includes/class-m365-login-admin.php:473
msgid "One or more domains separated by commas or new lines. Leave empty to allow any domain of your tenant." msgid "One or more domains separated by commas or new lines. Leave empty to allow any domain of your tenant."
msgstr "Eine oder mehrere Domains, getrennt durch Kommas oder Zeilenumbrüche. Leer lassen, um alle Domains des Tenants zuzulassen." msgstr "Eine oder mehrere Domains, getrennt durch Kommas oder Zeilenumbrüche. Leer lassen, um alle Domains des Tenants zuzulassen."
#: includes/class-m365-login-admin.php:451 #: includes/class-m365-login-admin.php:478
msgid "Allowed Entra groups (optional)" msgid "Allowed Entra groups (optional)"
msgstr "Erlaubte Entra-Gruppen (optional)" msgstr "Erlaubte Entra-Gruppen (optional)"
#: includes/class-m365-login-admin.php:452 #: includes/class-m365-login-admin.php:479
msgid "Only members of at least one of these groups may sign in. Leave empty to allow every matched user. Nested memberships count." msgid "Only members of at least one of these groups may sign in. Leave empty to allow every matched user. Nested memberships count."
msgstr "Nur Mitglieder mindestens einer dieser Gruppen dürfen sich anmelden. Leer lassen, um alle zugeordneten Benutzer zuzulassen. Verschachtelte Mitgliedschaften zählen." msgstr "Nur Mitglieder mindestens einer dieser Gruppen dürfen sich anmelden. Leer lassen, um alle zugeordneten Benutzer zuzulassen. Verschachtelte Mitgliedschaften zählen."
#: includes/class-m365-login-admin.php:455 #: includes/class-m365-login-admin.php:482
msgid "Search groups" msgid "Search groups"
msgstr "Gruppen suchen" msgstr "Gruppen suchen"
#: includes/class-m365-login-admin.php:457 #: includes/class-m365-login-admin.php:484
msgid "Type a group name or paste an object ID…" msgid "Type a group name or paste an object ID…"
msgstr "Gruppenname eingeben oder Objekt-ID einfügen …" msgstr "Gruppenname eingeben oder Objekt-ID einfügen …"
#: includes/class-m365-login-admin.php:458 #: includes/class-m365-login-admin.php:485
msgid "Search" msgid "Search"
msgstr "Suchen" msgstr "Suchen"
#: includes/class-m365-login-admin.php:463 #: includes/class-m365-login-admin.php:490
msgid "Needs the application permission \"GroupMember.Read.All\" with admin consent. Without it you can still paste group object IDs." msgid "Needs the application permission \"GroupMember.Read.All\" with admin consent. Without it you can still paste group object IDs."
msgstr "Benötigt die Anwendungsberechtigung „GroupMember.Read.All“ mit Administratorzustimmung. Ohne sie können Gruppen-Objekt-IDs trotzdem eingefügt werden." msgstr "Benötigt die Anwendungsberechtigung „GroupMember.Read.All“ mit Administratorzustimmung. Ohne sie können Gruppen-Objekt-IDs trotzdem eingefügt werden."
#: includes/class-m365-login-admin.php:469 #: includes/class-m365-login-admin.php:496
msgid "Selected groups" msgid "Selected groups"
msgstr "Ausgewählte Gruppen" msgstr "Ausgewählte Gruppen"
#: includes/class-m365-login-admin.php:470 #: includes/class-m365-login-admin.php:497
msgid "No groups selected – every matched user may sign in." msgid "No groups selected – every matched user may sign in."
msgstr "Keine Gruppen ausgewählt – jeder zugeordnete Benutzer darf sich anmelden." msgstr "Keine Gruppen ausgewählt – jeder zugeordnete Benutzer darf sich anmelden."
#: includes/class-m365-login-admin.php:480 #: includes/class-m365-login-admin.php:507
msgid "Membership is read from the \"groups\" claim of the ID token when present; otherwise the plugin asks Microsoft Graph (application permission \"User.Read.All\" or \"Directory.Read.All\"). If neither works, the sign-in is refused." msgid "Membership is read from the \"groups\" claim of the ID token when present; otherwise the plugin asks Microsoft Graph (application permission \"User.Read.All\" or \"Directory.Read.All\"). If neither works, the sign-in is refused."
msgstr "Die Mitgliedschaft wird aus dem „groups“-Claim des ID-Tokens gelesen, falls vorhanden; andernfalls fragt das Plugin Microsoft Graph (Anwendungsberechtigung „User.Read.All“ oder „Directory.Read.All“). Funktioniert beides nicht, wird die Anmeldung abgelehnt." msgstr "Die Mitgliedschaft wird aus dem „groups“-Claim des ID-Tokens gelesen, falls vorhanden; andernfalls fragt das Plugin Microsoft Graph (Anwendungsberechtigung „User.Read.All“ oder „Directory.Read.All“). Funktioniert beides nicht, wird die Anmeldung abgelehnt."
#: includes/class-m365-login-admin.php:485 #: includes/class-m365-login-admin.php:512
msgid "Button-only mode" msgid "Button-only mode"
msgstr "Nur-Button-Modus" msgstr "Nur-Button-Modus"
#: includes/class-m365-login-admin.php:486 #: includes/class-m365-login-admin.php:513
msgid "Hide the username/password form and the \"Lost your password?\" link, and refuse password sign-ins on the login page. Application passwords, REST and XML-RPC are not affected." msgid "Hides the username/password fields (on wp-login.php and in wp_login_form() forms) and refuses every interactive password sign-in on the site, including custom login forms. Application passwords, REST, XML-RPC and WP-CLI are not affected."
msgstr "Blendet das Benutzername/Passwort-Formular und den Link „Passwort vergessen?“ aus und lehnt Passwort-Anmeldungen auf der Login-Seite ab. Anwendungspasswörter, REST und XML-RPC sind nicht betroffen." msgstr "Blendet die Benutzername/Passwort-Felder aus (auf wp-login.php und in wp_login_form()-Formularen) und lehnt jede interaktive Passwort-Anmeldung auf der Website ab, auch in eigenen Login-Formularen. Anwendungspasswörter, REST, XML-RPC und WP-CLI sind nicht betroffen."
#: includes/class-m365-login-admin.php:491 #: includes/class-m365-login-admin.php:518
msgid "Show only the Microsoft button on the login page" msgid "Show only the Microsoft button on the login page"
msgstr "Auf der Login-Seite nur den Microsoft-Button anzeigen" msgstr "Auf der Login-Seite nur den Microsoft-Button anzeigen"
#: includes/class-m365-login-admin.php:492 #: includes/class-m365-login-admin.php:519
msgid "Becomes active once the connection is configured. Make sure your own account can sign in via Microsoft before enabling this." msgid "Becomes active once the connection is configured. Make sure your own account can sign in via Microsoft before enabling this."
msgstr "Wird aktiv, sobald die Verbindung eingerichtet ist. Vor dem Aktivieren sicherstellen, dass das eigene Konto sich per Microsoft anmelden kann." msgstr "Wird aktiv, sobald die Verbindung eingerichtet ist. Vor dem Aktivieren sicherstellen, dass das eigene Konto sich per Microsoft anmelden kann."
#: includes/class-m365-login-admin.php:497 #: includes/class-m365-login-admin.php:524
msgid "Fallback link (keep it secret)" msgid "Fallback link (keep it secret)"
msgstr "Fallback-Link (geheim halten)" msgstr "Fallback-Link (geheim halten)"
#: includes/class-m365-login-admin.php:498 #: includes/class-m365-login-admin.php:525
msgid "Opening this link shows the password form again in that browser for 30 minutes. Bookmark it somewhere safe – it is your way back in if Microsoft sign-in ever breaks." msgid "Opening this link shows the password form again in that browser for 30 minutes and allows password sign-in there. Bookmark it somewhere safe – it is your way back in if Microsoft sign-in ever breaks."
msgstr "Wer diesen Link öffnet, sieht in diesem Browser 30 Minuten lang wieder das Passwort-Formular. Sicher aufbewahren – er ist der Weg zurück, falls die Microsoft-Anmeldung einmal nicht funktioniert." msgstr "Wer diesen Link öffnet, sieht in diesem Browser 30 Minuten lang wieder das Passwort-Formular und kann sich dort mit Passwort anmelden. Sicher aufbewahren – er ist der Weg zurück, falls die Microsoft-Anmeldung einmal nicht funktioniert."
#: includes/class-m365-login-admin.php:506 #: includes/class-m365-login-admin.php:533
msgid "Generate a new key when saving" msgid "Generate a new key when saving"
msgstr "Beim Speichern einen neuen Schlüssel erzeugen" msgstr "Beim Speichern einen neuen Schlüssel erzeugen"
#: includes/class-m365-login-admin.php:509 #: includes/class-m365-login-admin.php:536
msgid "A key is generated automatically the first time you save these settings." msgid "A key is generated automatically the first time you save these settings."
msgstr "Beim ersten Speichern dieser Einstellungen wird automatisch ein Schlüssel erzeugt." msgstr "Beim ersten Speichern dieser Einstellungen wird automatisch ein Schlüssel erzeugt."
#. translators: %s: PHP constant #. translators: %s: PHP constant
#: includes/class-m365-login-admin.php:515 #: includes/class-m365-login-admin.php:542
msgid "Emergency switch: add %s to wp-config.php to disable button-only mode entirely." msgid "Emergency switch: add %s to wp-config.php to disable button-only mode entirely."
msgstr "Notschalter: %s in die wp-config.php eintragen, um den Nur-Button-Modus vollständig abzuschalten." msgstr "Notschalter: %s in die wp-config.php eintragen, um den Nur-Button-Modus vollständig abzuschalten."
#. translators: %s: PHP constant #. translators: %s: PHP constant
#: includes/class-m365-login-admin.php:524 #: includes/class-m365-login-admin.php:551
msgid "What the plugin does to keep sign-ins safe" msgid "What the plugin does to keep sign-ins safe"
msgstr "So schützt das Plugin die Anmeldung" msgstr "So schützt das Plugin die Anmeldung"
#: includes/class-m365-login-admin.php:526 #: includes/class-m365-login-admin.php:553
msgid "OpenID Connect authorization code flow with PKCE (S256) – no tokens ever pass through the browser." msgid "OpenID Connect authorization code flow with PKCE (S256) – no tokens ever pass through the browser."
msgstr "OpenID Connect Authorization Code Flow mit PKCE (S256) – Tokens laufen nie durch den Browser." msgstr "OpenID Connect Authorization Code Flow mit PKCE (S256) – Tokens laufen nie durch den Browser."
#: includes/class-m365-login-admin.php:527 #: includes/class-m365-login-admin.php:554
msgid "Single-use state and nonce values bound to the browser via an HttpOnly cookie (CSRF and replay protection)." msgid "Single-use state and nonce values bound to the browser via an HttpOnly cookie (CSRF and replay protection)."
msgstr "Einmalige State- und Nonce-Werte, per HttpOnly-Cookie an den Browser gebunden (CSRF- und Replay-Schutz)." msgstr "Einmalige State- und Nonce-Werte, per HttpOnly-Cookie an den Browser gebunden (CSRF- und Replay-Schutz)."
#: includes/class-m365-login-admin.php:528 #: includes/class-m365-login-admin.php:555
msgid "ID token signature verified against Microsoft’s published signing keys; issuer, audience, tenant, expiry and nonce are checked." msgid "ID token signature verified against Microsoft’s published signing keys; issuer, audience, tenant, expiry and nonce are checked."
msgstr "Signatur des ID-Tokens wird gegen Microsofts veröffentlichte Signaturschlüssel geprüft; Issuer, Audience, Tenant, Ablauf und Nonce werden kontrolliert." msgstr "Signatur des ID-Tokens wird gegen Microsofts veröffentlichte Signaturschlüssel geprüft; Issuer, Audience, Tenant, Ablauf und Nonce werden kontrolliert."
#: includes/class-m365-login-admin.php:529 #: includes/class-m365-login-admin.php:556
msgid "Client secret encrypted at rest; no accounts are created, no passwords are changed." msgid "Client secret encrypted at rest; no accounts are created, no passwords are changed."
msgstr "Client Secret verschlüsselt gespeichert; es werden keine Konten angelegt und keine Passwörter geändert." msgstr "Client Secret verschlüsselt gespeichert; es werden keine Konten angelegt und keine Passwörter geändert."
#: includes/class-m365-login-admin.php:535 #: includes/class-m365-login-admin.php:562
msgid "Save changes" msgid "Save changes"
msgstr "Änderungen speichern" msgstr "Änderungen speichern"
#: includes/class-m365-login-admin.php:541 #: includes/class-m365-login-admin.php:568
msgid "Redirect URI" msgid "Redirect URI"
msgstr "Umleitungs-URI (Redirect URI)" msgstr "Umleitungs-URI (Redirect URI)"
#: includes/class-m365-login-admin.php:542 #: includes/class-m365-login-admin.php:569
msgid "Register this URI in your app registration under Authentication → Web → Redirect URIs:" msgid "Register this URI in your app registration under Authentication → Web → Redirect URIs:"
msgstr "Diese URI in der App-Registrierung unter Authentifizierung → Web → Umleitungs-URIs eintragen:" msgstr "Diese URI in der App-Registrierung unter Authentifizierung → Web → Umleitungs-URIs eintragen:"
#: includes/class-m365-login-admin.php:548 #: includes/class-m365-login-admin.php:575
msgid "Plain permalinks are active, so the callback uses a query string. If you enable pretty permalinks later, the redirect URI changes and must be updated in Entra ID." msgid "Plain permalinks are active, so the callback uses a query string. If you enable pretty permalinks later, the redirect URI changes and must be updated in Entra ID."
msgstr "Einfache Permalinks sind aktiv, daher verwendet der Callback einen Query-String. Werden später sprechende Permalinks aktiviert, ändert sich die Umleitungs-URI und muss in Entra ID angepasst werden." msgstr "Einfache Permalinks sind aktiv, daher verwendet der Callback einen Query-String. Werden später sprechende Permalinks aktiviert, ändert sich die Umleitungs-URI und muss in Entra ID angepasst werden."
#: includes/class-m365-login-admin.php:551 #: includes/class-m365-login-admin.php:578
msgid "Your site does not use HTTPS. Microsoft only accepts http:// redirect URIs for localhost; production sites must use HTTPS." msgid "Your site does not use HTTPS. Microsoft only accepts http:// redirect URIs for localhost; production sites must use HTTPS."
msgstr "Diese Website nutzt kein HTTPS. Microsoft akzeptiert http://-Umleitungs-URIs nur für localhost; produktive Websites benötigen HTTPS." msgstr "Diese Website nutzt kein HTTPS. Microsoft akzeptiert http://-Umleitungs-URIs nur für localhost; produktive Websites benötigen HTTPS."
#: includes/class-m365-login-admin.php:556 #: includes/class-m365-login-admin.php:583
msgid "Setup in 5 steps" msgid "Setup in 5 steps"
msgstr "Einrichtung in 5 Schritten" msgstr "Einrichtung in 5 Schritten"
#: includes/class-m365-login-admin.php:558 #: includes/class-m365-login-admin.php:585
msgid "Open the Microsoft Entra admin center → App registrations → New registration." msgid "Open the Microsoft Entra admin center → App registrations → New registration."
msgstr "Microsoft Entra Admin Center öffnen → App-Registrierungen → Neue Registrierung." msgstr "Microsoft Entra Admin Center öffnen → App-Registrierungen → Neue Registrierung."
#: includes/class-m365-login-admin.php:559 #: includes/class-m365-login-admin.php:586
msgid "Choose \"Accounts in this organizational directory only\", set the platform to Web and paste the redirect URI above." msgid "Choose \"Accounts in this organizational directory only\", set the platform to Web and paste the redirect URI above."
msgstr "„Nur Konten in diesem Organisationsverzeichnis“ wählen, Plattform „Web“ auswählen und die Umleitungs-URI von oben einfügen." msgstr "„Nur Konten in diesem Organisationsverzeichnis“ wählen, Plattform „Web“ auswählen und die Umleitungs-URI von oben einfügen."
#: includes/class-m365-login-admin.php:560 #: includes/class-m365-login-admin.php:587
msgid "Copy the Application (client) ID and Directory (tenant) ID from the overview page." msgid "Copy the Application (client) ID and Directory (tenant) ID from the overview page."
msgstr "Anwendungs-ID (Client) und Verzeichnis-ID (Mandant) von der Übersichtsseite kopieren." msgstr "Anwendungs-ID (Client) und Verzeichnis-ID (Mandant) von der Übersichtsseite kopieren."
#: includes/class-m365-login-admin.php:561 #: includes/class-m365-login-admin.php:588
msgid "Under Certificates & secrets create a client secret and copy its value (not the ID)." msgid "Under Certificates & secrets create a client secret and copy its value (not the ID)."
msgstr "Unter „Zertifikate & Geheimnisse“ einen geheimen Clientschlüssel erstellen und dessen Wert (nicht die ID) kopieren." msgstr "Unter „Zertifikate & Geheimnisse“ einen geheimen Clientschlüssel erstellen und dessen Wert (nicht die ID) kopieren."
#: includes/class-m365-login-admin.php:562 #: includes/class-m365-login-admin.php:589
msgid "Under Token configuration add the optional claim \"email\" for ID tokens (recommended), then save this page." msgid "Under Token configuration add the optional claim \"email\" for ID tokens (recommended), then save this page."
msgstr "Unter „Tokenkonfiguration“ den optionalen Anspruch „email“ für ID-Tokens hinzufügen (empfohlen), dann diese Seite speichern." msgstr "Unter „Tokenkonfiguration“ den optionalen Anspruch „email“ für ID-Tokens hinzufügen (empfohlen), dann diese Seite speichern."
#: includes/class-m365-login-admin.php:564 #: includes/class-m365-login-admin.php:591
msgid "Required API permission: openid, profile, email (delegated) – granted by default." msgid "Required API permission: openid, profile, email (delegated) – granted by default."
msgstr "Benötigte API-Berechtigungen: openid, profile, email (delegiert) – standardmäßig vorhanden." msgstr "Benötigte API-Berechtigungen: openid, profile, email (delegiert) – standardmäßig vorhanden."
#: includes/class-m365-login-admin.php:565 #: includes/class-m365-login-admin.php:592
msgid "Optional, for group restrictions: application permissions GroupMember.Read.All and User.Read.All (Microsoft Graph) with admin consent." msgid "Optional, for group restrictions: application permissions GroupMember.Read.All and User.Read.All (Microsoft Graph) with admin consent."
msgstr "Optional für Gruppen-Beschränkungen: Anwendungsberechtigungen GroupMember.Read.All und User.Read.All (Microsoft Graph) mit Administratorzustimmung." msgstr "Optional für Gruppen-Beschränkungen: Anwendungsberechtigungen GroupMember.Read.All und User.Read.All (Microsoft Graph) mit Administratorzustimmung."
#: includes/class-m365-login-admin.php:569 #: includes/class-m365-login-admin.php:596
msgid "Shortcode" msgid "Shortcode"
msgstr "Shortcode" msgstr "Shortcode"
#: includes/class-m365-login-admin.php:570 #: includes/class-m365-login-admin.php:597
msgid "Place the button on a custom login page:" msgid "Place the button on a custom login page:"
msgstr "Button auf einer eigenen Login-Seite platzieren:" msgstr "Button auf einer eigenen Login-Seite platzieren:"
#: includes/class-m365-login-auth.php:136 #: includes/class-m365-login-admin.php:599
msgid "More options on the Button tab under \"Custom login page\"."
msgstr "Weitere Optionen im Tab „Button“ unter „Eigene Login-Seite“."
#: includes/class-m365-login-auth.php:173
msgid "Password sign-in is disabled on this site. Please use the Microsoft button." msgid "Password sign-in is disabled on this site. Please use the Microsoft button."
msgstr "Die Anmeldung mit Passwort ist auf dieser Website deaktiviert. Bitte den Microsoft-Button verwenden." msgstr "Die Anmeldung mit Passwort ist auf dieser Website deaktiviert. Bitte den Microsoft-Button verwenden."
#: includes/class-m365-login-auth.php:751 #: includes/class-m365-login-auth.php:777
msgid "Password sign-in is temporarily enabled for this browser (30 minutes)." msgid "Password sign-in is temporarily enabled for this browser (30 minutes)."
msgstr "Die Passwort-Anmeldung ist für diesen Browser vorübergehend aktiviert (30 Minuten)." msgstr "Die Passwort-Anmeldung ist für diesen Browser vorübergehend aktiviert (30 Minuten)."
#: includes/class-m365-login-auth.php:758 includes/class-m365-login-graph.php:63 #: includes/class-m365-login-auth.php:798 includes/class-m365-login-graph.php:63
msgid "Microsoft login is not configured yet." msgid "Microsoft login is not configured yet."
msgstr "Die Microsoft-Anmeldung ist noch nicht eingerichtet." msgstr "Die Microsoft-Anmeldung ist noch nicht eingerichtet."
#: includes/class-m365-login-auth.php:759 #: includes/class-m365-login-auth.php:799
msgid "The login request expired or was invalid. Please try again." msgid "The login request expired or was invalid. Please try again."
msgstr "Die Anmeldeanfrage ist abgelaufen oder ungültig. Bitte erneut versuchen." msgstr "Die Anmeldeanfrage ist abgelaufen oder ungültig. Bitte erneut versuchen."
#: includes/class-m365-login-auth.php:760 #: includes/class-m365-login-auth.php:800
msgid "Microsoft sign-in was cancelled." msgid "Microsoft sign-in was cancelled."
msgstr "Die Microsoft-Anmeldung wurde abgebrochen." msgstr "Die Microsoft-Anmeldung wurde abgebrochen."
#: includes/class-m365-login-auth.php:761 #: includes/class-m365-login-auth.php:801
msgid "Microsoft returned an error. Please try again." msgid "Microsoft returned an error. Please try again."
msgstr "Microsoft hat einen Fehler gemeldet. Bitte erneut versuchen." msgstr "Microsoft hat einen Fehler gemeldet. Bitte erneut versuchen."
#: includes/class-m365-login-auth.php:762 #: includes/class-m365-login-auth.php:802
msgid "Could not complete the sign-in with Microsoft. Please try again or contact an administrator." msgid "Could not complete the sign-in with Microsoft. Please try again or contact an administrator."
msgstr "Die Anmeldung über Microsoft konnte nicht abgeschlossen werden. Bitte erneut versuchen oder einen Administrator kontaktieren." msgstr "Die Anmeldung über Microsoft konnte nicht abgeschlossen werden. Bitte erneut versuchen oder einen Administrator kontaktieren."
#: includes/class-m365-login-auth.php:763 #: includes/class-m365-login-auth.php:803
msgid "The Microsoft sign-in could not be verified." msgid "The Microsoft sign-in could not be verified."
msgstr "Die Microsoft-Anmeldung konnte nicht verifiziert werden." msgstr "Die Microsoft-Anmeldung konnte nicht verifiziert werden."
#: includes/class-m365-login-auth.php:764 #: includes/class-m365-login-auth.php:804
msgid "Your Microsoft account did not provide an e-mail address." msgid "Your Microsoft account did not provide an e-mail address."
msgstr "Das Microsoft-Konto hat keine E-Mail-Adresse übermittelt." msgstr "Das Microsoft-Konto hat keine E-Mail-Adresse übermittelt."
#: includes/class-m365-login-auth.php:765 #: includes/class-m365-login-auth.php:805
msgid "Your e-mail domain is not allowed to sign in here." msgid "Your e-mail domain is not allowed to sign in here."
msgstr "Diese E-Mail-Domain ist hier nicht zur Anmeldung zugelassen." msgstr "Diese E-Mail-Domain ist hier nicht zur Anmeldung zugelassen."
#: includes/class-m365-login-auth.php:766 #: includes/class-m365-login-auth.php:806
msgid "No WordPress account exists for your Microsoft e-mail address." msgid "No WordPress account exists for your Microsoft e-mail address."
msgstr "Für die E-Mail-Adresse des Microsoft-Kontos existiert kein WordPress-Konto." msgstr "Für die E-Mail-Adresse des Microsoft-Kontos existiert kein WordPress-Konto."
#: includes/class-m365-login-auth.php:767 #: includes/class-m365-login-auth.php:807
msgid "This WordPress account is linked to a different Microsoft account. Please contact an administrator." msgid "This WordPress account is linked to a different Microsoft account. Please contact an administrator."
msgstr "Dieses WordPress-Konto ist mit einem anderen Microsoft-Konto verknüpft. Bitte einen Administrator kontaktieren." msgstr "Dieses WordPress-Konto ist mit einem anderen Microsoft-Konto verknüpft. Bitte einen Administrator kontaktieren."
#: includes/class-m365-login-auth.php:768 #: includes/class-m365-login-auth.php:808
msgid "You are not allowed to sign in with this account." msgid "You are not allowed to sign in with this account."
msgstr "Die Anmeldung mit diesem Konto ist nicht erlaubt." msgstr "Die Anmeldung mit diesem Konto ist nicht erlaubt."
#: includes/class-m365-login-auth.php:769 #: includes/class-m365-login-auth.php:809
msgid "Your Microsoft account is not a member of a group that is allowed to sign in here." msgid "Your Microsoft account is not a member of a group that is allowed to sign in here."
msgstr "Das Microsoft-Konto ist in keiner Gruppe, die sich hier anmelden darf." msgstr "Das Microsoft-Konto ist in keiner Gruppe, die sich hier anmelden darf."
#: includes/class-m365-login-auth.php:770 #: includes/class-m365-login-auth.php:810
msgid "Your group membership could not be verified. Please contact an administrator." msgid "Your group membership could not be verified. Please contact an administrator."
msgstr "Die Gruppenmitgliedschaft konnte nicht geprüft werden. Bitte einen Administrator kontaktieren." msgstr "Die Gruppenmitgliedschaft konnte nicht geprüft werden. Bitte einen Administrator kontaktieren."
#: includes/class-m365-login-auth.php:771 #: includes/class-m365-login-auth.php:811
msgid "The fallback key is not valid." msgid "The fallback key is not valid."
msgstr "Der Fallback-Schlüssel ist ungültig." msgstr "Der Fallback-Schlüssel ist ungültig."
#: includes/class-m365-login-auth.php:772 #: includes/class-m365-login-auth.php:812
msgid "Too many attempts. Please wait 15 minutes." msgid "Too many attempts. Please wait 15 minutes."
msgstr "Zu viele Versuche. Bitte 15 Minuten warten." msgstr "Zu viele Versuche. Bitte 15 Minuten warten."
@ -568,22 +612,26 @@ msgstr "Login mit Microsoft"
msgid "or" msgid "or"
msgstr "oder" msgstr "oder"
#: includes/class-m365-login-settings.php:245 #: includes/class-m365-login-settings.php:272
msgid "The tenant ID must be a GUID (e.g. 1a2b3c4d-…) or one of \"organizations\", \"common\", \"consumers\"." msgid "The tenant ID must be a GUID (e.g. 1a2b3c4d-…) or one of \"organizations\", \"common\", \"consumers\"."
msgstr "Die Tenant-ID muss eine GUID (z. B. 1a2b3c4d-…) oder einer der Werte „organizations“, „common“, „consumers“ sein." msgstr "Die Tenant-ID muss eine GUID (z. B. 1a2b3c4d-…) oder einer der Werte „organizations“, „common“, „consumers“ sein."
#: includes/class-m365-login-settings.php:253 #: includes/class-m365-login-settings.php:280
msgid "The application (client) ID must be a GUID." msgid "The application (client) ID must be a GUID."
msgstr "Die Anwendungs-ID (Client) muss eine GUID sein." msgstr "Die Anwendungs-ID (Client) muss eine GUID sein."
#: includes/class-m365-login-settings.php:265 #: includes/class-m365-login-settings.php:292
msgid "The client secret contains invalid characters." msgid "The client secret contains invalid characters."
msgstr "Das Client Secret enthält ungültige Zeichen." msgstr "Das Client Secret enthält ungültige Zeichen."
#: includes/class-m365-login-settings.php:269 #: includes/class-m365-login-settings.php:296
msgid "The client secret could not be encrypted. Is the OpenSSL extension available?" msgid "The client secret could not be encrypted. Is the OpenSSL extension available?"
msgstr "Das Client Secret konnte nicht verschlüsselt werden. Ist die OpenSSL-Erweiterung verfügbar?" msgstr "Das Client Secret konnte nicht verschlüsselt werden. Ist die OpenSSL-Erweiterung verfügbar?"
#: includes/class-m365-login-settings.php:346
msgid "The custom login page must be a URL on this site."
msgstr "Die eigene Login-Seite muss eine URL dieser Website sein."
#: includes/class-m365-login.php:102 #: includes/class-m365-login.php:102
msgid "Settings" msgid "Settings"
msgstr "Einstellungen" msgstr "Einstellungen"

236
languages/m365-login.pot
View file

@ -38,7 +38,7 @@ msgstr ""
msgid "Copied!" msgid "Copied!"
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:148 includes/class-m365-login-admin.php:502 includes/class-m365-login-admin.php:545 #: includes/class-m365-login-admin.php:148 includes/class-m365-login-admin.php:529 includes/class-m365-login-admin.php:572
msgid "Copy" msgid "Copy"
msgstr "" msgstr ""
@ -62,11 +62,11 @@ msgstr ""
msgid "Add" msgid "Add"
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:154 includes/class-m365-login-admin.php:476 #: includes/class-m365-login-admin.php:154 includes/class-m365-login-admin.php:503
msgid "Remove" msgid "Remove"
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:155 includes/class-m365-login-admin.php:210 includes/class-m365-login-admin.php:461 #: includes/class-m365-login-admin.php:155 includes/class-m365-login-admin.php:210 includes/class-m365-login-admin.php:488
msgid "Save the connection settings first, then search for groups." msgid "Save the connection settings first, then search for groups."
msgstr "" msgstr ""
@ -284,265 +284,309 @@ msgstr ""
msgid "WordPress blue" msgid "WordPress blue"
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:412
msgid "Custom login page"
msgstr ""
#: includes/class-m365-login-admin.php:413
msgid "Using your own login page instead of wp-login.php? Tell the plugin where it is so error messages, the fallback link and the post-logout redirect point there."
msgstr ""
#: includes/class-m365-login-admin.php:416 #: includes/class-m365-login-admin.php:416
msgid "User matching & hardening" msgid "URL of your login page"
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:417 #: includes/class-m365-login-admin.php:418
msgid "Users are never created automatically. A Microsoft sign-in only succeeds when a WordPress user with the same e-mail address already exists." msgid "Must be on this site. Leave empty to use wp-login.php."
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:422 #: includes/class-m365-login-admin.php:424
msgid "Bind WordPress accounts to the Microsoft object ID" msgid "Add the button to every wp_login_form() form automatically"
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:423 #: includes/class-m365-login-admin.php:425
msgid "On first sign-in the immutable Microsoft object ID is stored with the user. Later sign-ins with the same e-mail but a different Microsoft identity are rejected. Strongly recommended." msgid "Covers themes and plugins that use the WordPress login form function. Page-builder widgets need the shortcode or the template function below."
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:430 #: includes/class-m365-login-admin.php:430
msgid "Fall back to the user principal name (UPN)" msgid "Manual placement"
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:431 #: includes/class-m365-login-admin.php:431
msgid "If the token contains no \"email\" claim, use the UPN (e.g. jane@contoso.com) when it is a valid e-mail address. Usually required for work accounts." msgid "Shortcode (block editor, page builders):"
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:438 #: includes/class-m365-login-admin.php:433
msgid "Keep users signed in (\"Remember me\")" msgid "Template function (theme files):"
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:439 #: includes/class-m365-login-admin.php:435
msgid "Issues a 14-day WordPress session instead of a browser session." msgid "Both show the error messages of the last attempt; use m365_login_messages() to place them separately."
msgstr ""
#: includes/class-m365-login-admin.php:443
msgid "User matching & hardening"
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:444 #: includes/class-m365-login-admin.php:444
msgid "Allowed e-mail domains (optional)" msgid "Users are never created automatically. A Microsoft sign-in only succeeds when a WordPress user with the same e-mail address already exists."
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:446 #: includes/class-m365-login-admin.php:449
msgid "One or more domains separated by commas or new lines. Leave empty to allow any domain of your tenant." msgid "Bind WordPress accounts to the Microsoft object ID"
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:451 #: includes/class-m365-login-admin.php:450
msgid "Allowed Entra groups (optional)" msgid "On first sign-in the immutable Microsoft object ID is stored with the user. Later sign-ins with the same e-mail but a different Microsoft identity are rejected. Strongly recommended."
msgstr ""
#: includes/class-m365-login-admin.php:452
msgid "Only members of at least one of these groups may sign in. Leave empty to allow every matched user. Nested memberships count."
msgstr ""
#: includes/class-m365-login-admin.php:455
msgid "Search groups"
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:457 #: includes/class-m365-login-admin.php:457
msgid "Type a group name or paste an object ID…" msgid "Fall back to the user principal name (UPN)"
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:458 #: includes/class-m365-login-admin.php:458
msgid "Search" msgid "If the token contains no \"email\" claim, use the UPN (e.g. jane@contoso.com) when it is a valid e-mail address. Usually required for work accounts."
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:463 #: includes/class-m365-login-admin.php:465
msgid "Needs the application permission \"GroupMember.Read.All\" with admin consent. Without it you can still paste group object IDs." msgid "Keep users signed in (\"Remember me\")"
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:469 #: includes/class-m365-login-admin.php:466
msgid "Selected groups" msgid "Issues a 14-day WordPress session instead of a browser session."
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:470 #: includes/class-m365-login-admin.php:471
msgid "No groups selected – every matched user may sign in." msgid "Allowed e-mail domains (optional)"
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:480 #: includes/class-m365-login-admin.php:473
msgid "Membership is read from the \"groups\" claim of the ID token when present; otherwise the plugin asks Microsoft Graph (application permission \"User.Read.All\" or \"Directory.Read.All\"). If neither works, the sign-in is refused." msgid "One or more domains separated by commas or new lines. Leave empty to allow any domain of your tenant."
msgstr ""
#: includes/class-m365-login-admin.php:478
msgid "Allowed Entra groups (optional)"
msgstr ""
#: includes/class-m365-login-admin.php:479
msgid "Only members of at least one of these groups may sign in. Leave empty to allow every matched user. Nested memberships count."
msgstr ""
#: includes/class-m365-login-admin.php:482
msgid "Search groups"
msgstr ""
#: includes/class-m365-login-admin.php:484
msgid "Type a group name or paste an object ID…"
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:485 #: includes/class-m365-login-admin.php:485
msgid "Button-only mode" msgid "Search"
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:486 #: includes/class-m365-login-admin.php:490
msgid "Hide the username/password form and the \"Lost your password?\" link, and refuse password sign-ins on the login page. Application passwords, REST and XML-RPC are not affected." msgid "Needs the application permission \"GroupMember.Read.All\" with admin consent. Without it you can still paste group object IDs."
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:491 #: includes/class-m365-login-admin.php:496
msgid "Show only the Microsoft button on the login page" msgid "Selected groups"
msgstr ""
#: includes/class-m365-login-admin.php:492
msgid "Becomes active once the connection is configured. Make sure your own account can sign in via Microsoft before enabling this."
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:497 #: includes/class-m365-login-admin.php:497
msgid "No groups selected – every matched user may sign in."
msgstr ""
#: includes/class-m365-login-admin.php:507
msgid "Membership is read from the \"groups\" claim of the ID token when present; otherwise the plugin asks Microsoft Graph (application permission \"User.Read.All\" or \"Directory.Read.All\"). If neither works, the sign-in is refused."
msgstr ""
#: includes/class-m365-login-admin.php:512
msgid "Button-only mode"
msgstr ""
#: includes/class-m365-login-admin.php:513
msgid "Hides the username/password fields (on wp-login.php and in wp_login_form() forms) and refuses every interactive password sign-in on the site, including custom login forms. Application passwords, REST, XML-RPC and WP-CLI are not affected."
msgstr ""
#: includes/class-m365-login-admin.php:518
msgid "Show only the Microsoft button on the login page"
msgstr ""
#: includes/class-m365-login-admin.php:519
msgid "Becomes active once the connection is configured. Make sure your own account can sign in via Microsoft before enabling this."
msgstr ""
#: includes/class-m365-login-admin.php:524
msgid "Fallback link (keep it secret)" msgid "Fallback link (keep it secret)"
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:498 #: includes/class-m365-login-admin.php:525
msgid "Opening this link shows the password form again in that browser for 30 minutes. Bookmark it somewhere safe – it is your way back in if Microsoft sign-in ever breaks." msgid "Opening this link shows the password form again in that browser for 30 minutes and allows password sign-in there. Bookmark it somewhere safe – it is your way back in if Microsoft sign-in ever breaks."
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:506 #: includes/class-m365-login-admin.php:533
msgid "Generate a new key when saving" msgid "Generate a new key when saving"
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:509 #: includes/class-m365-login-admin.php:536
msgid "A key is generated automatically the first time you save these settings." msgid "A key is generated automatically the first time you save these settings."
msgstr "" msgstr ""
#. translators: %s: PHP constant #. translators: %s: PHP constant
#: includes/class-m365-login-admin.php:515 #: includes/class-m365-login-admin.php:542
msgid "Emergency switch: add %s to wp-config.php to disable button-only mode entirely." msgid "Emergency switch: add %s to wp-config.php to disable button-only mode entirely."
msgstr "" msgstr ""
#. translators: %s: PHP constant #. translators: %s: PHP constant
#: includes/class-m365-login-admin.php:524 #: includes/class-m365-login-admin.php:551
msgid "What the plugin does to keep sign-ins safe" msgid "What the plugin does to keep sign-ins safe"
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:526 #: includes/class-m365-login-admin.php:553
msgid "OpenID Connect authorization code flow with PKCE (S256) – no tokens ever pass through the browser." msgid "OpenID Connect authorization code flow with PKCE (S256) – no tokens ever pass through the browser."
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:527 #: includes/class-m365-login-admin.php:554
msgid "Single-use state and nonce values bound to the browser via an HttpOnly cookie (CSRF and replay protection)." msgid "Single-use state and nonce values bound to the browser via an HttpOnly cookie (CSRF and replay protection)."
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:528 #: includes/class-m365-login-admin.php:555
msgid "ID token signature verified against Microsoft’s published signing keys; issuer, audience, tenant, expiry and nonce are checked." msgid "ID token signature verified against Microsoft’s published signing keys; issuer, audience, tenant, expiry and nonce are checked."
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:529 #: includes/class-m365-login-admin.php:556
msgid "Client secret encrypted at rest; no accounts are created, no passwords are changed." msgid "Client secret encrypted at rest; no accounts are created, no passwords are changed."
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:535 #: includes/class-m365-login-admin.php:562
msgid "Save changes" msgid "Save changes"
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:541 #: includes/class-m365-login-admin.php:568
msgid "Redirect URI" msgid "Redirect URI"
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:542 #: includes/class-m365-login-admin.php:569
msgid "Register this URI in your app registration under Authentication → Web → Redirect URIs:" msgid "Register this URI in your app registration under Authentication → Web → Redirect URIs:"
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:548 #: includes/class-m365-login-admin.php:575
msgid "Plain permalinks are active, so the callback uses a query string. If you enable pretty permalinks later, the redirect URI changes and must be updated in Entra ID." msgid "Plain permalinks are active, so the callback uses a query string. If you enable pretty permalinks later, the redirect URI changes and must be updated in Entra ID."
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:551 #: includes/class-m365-login-admin.php:578
msgid "Your site does not use HTTPS. Microsoft only accepts http:// redirect URIs for localhost; production sites must use HTTPS." msgid "Your site does not use HTTPS. Microsoft only accepts http:// redirect URIs for localhost; production sites must use HTTPS."
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:556 #: includes/class-m365-login-admin.php:583
msgid "Setup in 5 steps" msgid "Setup in 5 steps"
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:558 #: includes/class-m365-login-admin.php:585
msgid "Open the Microsoft Entra admin center → App registrations → New registration." msgid "Open the Microsoft Entra admin center → App registrations → New registration."
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:559 #: includes/class-m365-login-admin.php:586
msgid "Choose \"Accounts in this organizational directory only\", set the platform to Web and paste the redirect URI above." msgid "Choose \"Accounts in this organizational directory only\", set the platform to Web and paste the redirect URI above."
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:560 #: includes/class-m365-login-admin.php:587
msgid "Copy the Application (client) ID and Directory (tenant) ID from the overview page." msgid "Copy the Application (client) ID and Directory (tenant) ID from the overview page."
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:561 #: includes/class-m365-login-admin.php:588
msgid "Under Certificates & secrets create a client secret and copy its value (not the ID)." msgid "Under Certificates & secrets create a client secret and copy its value (not the ID)."
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:562 #: includes/class-m365-login-admin.php:589
msgid "Under Token configuration add the optional claim \"email\" for ID tokens (recommended), then save this page." msgid "Under Token configuration add the optional claim \"email\" for ID tokens (recommended), then save this page."
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:564 #: includes/class-m365-login-admin.php:591
msgid "Required API permission: openid, profile, email (delegated) – granted by default." msgid "Required API permission: openid, profile, email (delegated) – granted by default."
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:565 #: includes/class-m365-login-admin.php:592
msgid "Optional, for group restrictions: application permissions GroupMember.Read.All and User.Read.All (Microsoft Graph) with admin consent." msgid "Optional, for group restrictions: application permissions GroupMember.Read.All and User.Read.All (Microsoft Graph) with admin consent."
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:569 #: includes/class-m365-login-admin.php:596
msgid "Shortcode" msgid "Shortcode"
msgstr "" msgstr ""
#: includes/class-m365-login-admin.php:570 #: includes/class-m365-login-admin.php:597
msgid "Place the button on a custom login page:" msgid "Place the button on a custom login page:"
msgstr "" msgstr ""
#: includes/class-m365-login-auth.php:136 #: includes/class-m365-login-admin.php:599
msgid "More options on the Button tab under \"Custom login page\"."
msgstr ""
#: includes/class-m365-login-auth.php:173
msgid "Password sign-in is disabled on this site. Please use the Microsoft button." msgid "Password sign-in is disabled on this site. Please use the Microsoft button."
msgstr "" msgstr ""
#: includes/class-m365-login-auth.php:751 #: includes/class-m365-login-auth.php:777
msgid "Password sign-in is temporarily enabled for this browser (30 minutes)." msgid "Password sign-in is temporarily enabled for this browser (30 minutes)."
msgstr "" msgstr ""
#: includes/class-m365-login-auth.php:758 includes/class-m365-login-graph.php:63 #: includes/class-m365-login-auth.php:798 includes/class-m365-login-graph.php:63
msgid "Microsoft login is not configured yet." msgid "Microsoft login is not configured yet."
msgstr "" msgstr ""
#: includes/class-m365-login-auth.php:759 #: includes/class-m365-login-auth.php:799
msgid "The login request expired or was invalid. Please try again." msgid "The login request expired or was invalid. Please try again."
msgstr "" msgstr ""
#: includes/class-m365-login-auth.php:760 #: includes/class-m365-login-auth.php:800
msgid "Microsoft sign-in was cancelled." msgid "Microsoft sign-in was cancelled."
msgstr "" msgstr ""
#: includes/class-m365-login-auth.php:761 #: includes/class-m365-login-auth.php:801
msgid "Microsoft returned an error. Please try again." msgid "Microsoft returned an error. Please try again."
msgstr "" msgstr ""
#: includes/class-m365-login-auth.php:762 #: includes/class-m365-login-auth.php:802
msgid "Could not complete the sign-in with Microsoft. Please try again or contact an administrator." msgid "Could not complete the sign-in with Microsoft. Please try again or contact an administrator."
msgstr "" msgstr ""
#: includes/class-m365-login-auth.php:763 #: includes/class-m365-login-auth.php:803
msgid "The Microsoft sign-in could not be verified." msgid "The Microsoft sign-in could not be verified."
msgstr "" msgstr ""
#: includes/class-m365-login-auth.php:764 #: includes/class-m365-login-auth.php:804
msgid "Your Microsoft account did not provide an e-mail address." msgid "Your Microsoft account did not provide an e-mail address."
msgstr "" msgstr ""
#: includes/class-m365-login-auth.php:765 #: includes/class-m365-login-auth.php:805
msgid "Your e-mail domain is not allowed to sign in here." msgid "Your e-mail domain is not allowed to sign in here."
msgstr "" msgstr ""
#: includes/class-m365-login-auth.php:766 #: includes/class-m365-login-auth.php:806
msgid "No WordPress account exists for your Microsoft e-mail address." msgid "No WordPress account exists for your Microsoft e-mail address."
msgstr "" msgstr ""
#: includes/class-m365-login-auth.php:767 #: includes/class-m365-login-auth.php:807
msgid "This WordPress account is linked to a different Microsoft account. Please contact an administrator." msgid "This WordPress account is linked to a different Microsoft account. Please contact an administrator."
msgstr "" msgstr ""
#: includes/class-m365-login-auth.php:768 #: includes/class-m365-login-auth.php:808
msgid "You are not allowed to sign in with this account." msgid "You are not allowed to sign in with this account."
msgstr "" msgstr ""
#: includes/class-m365-login-auth.php:769 #: includes/class-m365-login-auth.php:809
msgid "Your Microsoft account is not a member of a group that is allowed to sign in here." msgid "Your Microsoft account is not a member of a group that is allowed to sign in here."
msgstr "" msgstr ""
#: includes/class-m365-login-auth.php:770 #: includes/class-m365-login-auth.php:810
msgid "Your group membership could not be verified. Please contact an administrator." msgid "Your group membership could not be verified. Please contact an administrator."
msgstr "" msgstr ""
#: includes/class-m365-login-auth.php:771 #: includes/class-m365-login-auth.php:811
msgid "The fallback key is not valid." msgid "The fallback key is not valid."
msgstr "" msgstr ""
#: includes/class-m365-login-auth.php:772 #: includes/class-m365-login-auth.php:812
msgid "Too many attempts. Please wait 15 minutes." msgid "Too many attempts. Please wait 15 minutes."
msgstr "" msgstr ""
@ -566,22 +610,26 @@ msgstr ""
msgid "or" msgid "or"
msgstr "" msgstr ""
#: includes/class-m365-login-settings.php:245 #: includes/class-m365-login-settings.php:272
msgid "The tenant ID must be a GUID (e.g. 1a2b3c4d-…) or one of \"organizations\", \"common\", \"consumers\"." msgid "The tenant ID must be a GUID (e.g. 1a2b3c4d-…) or one of \"organizations\", \"common\", \"consumers\"."
msgstr "" msgstr ""
#: includes/class-m365-login-settings.php:253 #: includes/class-m365-login-settings.php:280
msgid "The application (client) ID must be a GUID." msgid "The application (client) ID must be a GUID."
msgstr "" msgstr ""
#: includes/class-m365-login-settings.php:265 #: includes/class-m365-login-settings.php:292
msgid "The client secret contains invalid characters." msgid "The client secret contains invalid characters."
msgstr "" msgstr ""
#: includes/class-m365-login-settings.php:269 #: includes/class-m365-login-settings.php:296
msgid "The client secret could not be encrypted. Is the OpenSSL extension available?" msgid "The client secret could not be encrypted. Is the OpenSSL extension available?"
msgstr "" msgstr ""
#: includes/class-m365-login-settings.php:346
msgid "The custom login page must be a URL on this site."
msgstr ""
#: includes/class-m365-login.php:102 #: includes/class-m365-login.php:102
msgid "Settings" msgid "Settings"
msgstr "" msgstr ""

1
m365-login.php
View file

@ -30,6 +30,7 @@ require_once M365_LOGIN_DIR . 'includes/class-m365-login-auth.php';
require_once M365_LOGIN_DIR . 'includes/class-m365-login-button.php'; require_once M365_LOGIN_DIR . 'includes/class-m365-login-button.php';
require_once M365_LOGIN_DIR . 'includes/class-m365-login-admin.php'; require_once M365_LOGIN_DIR . 'includes/class-m365-login-admin.php';
require_once M365_LOGIN_DIR . 'includes/class-m365-login.php'; require_once M365_LOGIN_DIR . 'includes/class-m365-login.php';
require_once M365_LOGIN_DIR . 'includes/functions.php';
register_activation_hook( __FILE__, array( 'M365_Login', 'activate' ) ); register_activation_hook( __FILE__, array( 'M365_Login', 'activate' ) );

5
readme.txt
View file

@ -22,7 +22,7 @@ The plugin is deliberately small and strict:
* **Entra group restriction.** Search and pick the groups whose members may sign in, right in the settings screen. Membership is checked via the ID token's `groups` claim or Microsoft Graph (nested groups included). * **Entra group restriction.** Search and pick the groups whose members may sign in, right in the settings screen. Membership is checked via the ID token's `groups` claim or Microsoft Graph (nested groups included).
* **Button-only mode.** Hide the username/password form and refuse password sign-ins on the login page. A secret fallback link (and a `wp-config.php` constant) brings the form back when you need it. * **Button-only mode.** Hide the username/password form and refuse password sign-ins on the login page. A secret fallback link (and a `wp-config.php` constant) brings the form back when you need it.
* **Clean settings screen** with a copy-and-paste redirect URI, a tenant connectivity test and a five-step setup guide. * **Clean settings screen** with a copy-and-paste redirect URI, a tenant connectivity test and a five-step setup guide.
* **Shortcode** `[m365_login_button]` for custom login pages. * **Custom login pages.** The button is added to every `wp_login_form()` form automatically; a shortcode and a template function cover page builders and theme templates. Point the plugin at your login page and error messages, the fallback link and the post-logout redirect go there instead of wp-login.php.
= Security = = Security =
@ -43,6 +43,7 @@ The plugin is deliberately small and strict:
* `m365_login_match_email` – filter the e-mail address used for the lookup. * `m365_login_match_email` – filter the e-mail address used for the lookup.
* `m365_login_allow_user` – filter, return `false` to block a matched user (e.g. group checks). * `m365_login_allow_user` – filter, return `false` to block a matched user (e.g. group checks).
* `m365_login_success` – action after a successful sign-in, receives the user and verified claims. * `m365_login_success` – action after a successful sign-in, receives the user and verified claims.
* `m365_login_block_password_login` – filter, return `false` to exempt a password sign-in from button-only mode.
== External services == == External services ==
@ -104,7 +105,7 @@ Open the fallback link shown on the Security tab (`wp-login.php?m365_fallback=KE
= Does it work with custom login pages? = = Does it work with custom login pages? =
Yes, use the shortcode `[m365_login_button redirect="/dashboard/"]`. Yes. Forms rendered with `wp_login_form()` get the button automatically. For page builders use the shortcode `[m365_login_button redirect="/dashboard/" divider="yes"]`, in theme templates call `m365_login_button()`. Enter the page's URL on the Button tab so error messages and the fallback link point there. Button-only mode blocks password sign-ins from custom forms as well.
= Does it support multisite? = = Does it support multisite? =