=== WP Multi Manager Connector ===
Contributors: wpmultimanager
Tags: rest-api, remote-management, autologin, multisite
Requires at least: 5.6
Tested up to: 6.6
Requires PHP: 7.4
Stable tag: 1.1.0
License: GPLv2 or later

Connector plugin for WP Multi Manager — enables remote plugin upload & secure
one-time auto-login links via the WP REST API.

== Description ==

This plugin adds custom REST endpoints (namespace `wpmm/v1`) used by the
WP Multi Manager dashboard to manage this site remotely:

* `POST /wp-json/wpmm/v1/plugins/upload`   – install a plugin from a ZIP file.
* `POST /wp-json/wpmm/v1/plugins/update`   – trigger a plugin update.
* `GET  /wp-json/wpmm/v1/info`             – version / connectivity check.
* `POST /wp-json/wpmm/v1/autologin/create` – mint a single-use auto-login token.

The auto-login flow lets the dashboard create a short-lived (120s), single-use
magic link and redirect the admin browser to `wp-admin`, logged in as the
chosen user — without typing a password.

All endpoints are authenticated with a WordPress Application Password, and the
auto-login creation additionally requires the `edit_users` capability.

== Installation ==

1. Upload the `wpmm-connector` folder to `/wp-content/plugins/` (or upload the
   ZIP via Plugins → Add New → Upload Plugin).
2. Activate the plugin.
3. Ensure the dashboard user has an Application Password created in
   Users → Profile → Application Passwords.

== Changelog ==

= 1.1.0 =
* Added single-use auto-login magic-link endpoints (`/autologin/create` + `init` redemption).
* Permission for auto-login creation requires `edit_users`.

= 1.0.0 =
* Initial release: plugin upload, update, and info endpoints.
