Security, privacy, multilingual routing and Installation Doctor update. Optional remote services remain off by default. Review authentication pages, protected paths and plugin Warnings after upgrading.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3674572,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3674572,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3674572,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3674572,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["0.9.2"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3674572,"resolution":"1","location":"assets","locale":"","width":3258,"height":1880},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3674572,"resolution":"2","location":"assets","locale":"","width":3248,"height":1872},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3674572,"resolution":"3","location":"assets","locale":"","width":3294,"height":1892},"screenshot-4.png":{"filename":"screenshot-4.png","revision":3674572,"resolution":"4","location":"assets","locale":"","width":3262,"height":1884},"screenshot-5.png":{"filename":"screenshot-5.png","revision":3674572,"resolution":"5","location":"assets","locale":"","width":3264,"height":1776}},"screenshots":{"1":"Custom Auth Suite admin dashboard.","2":"Authentication page configuration.","3":"Email customization settings.","4":"Installation Doctor compatibility checks.","5":"Upgrade CAS information cards."}},"plugin_section":[],"plugin_tags":[710,3691,18971,47793,5134],"plugin_category":[38],"plugin_contributors":[278518],"plugin_business_model":[],"class_list":["post-330183","plugin","type-plugin","status-publish","hentry","plugin_tags-authentication","plugin_tags-custom-login","plugin_tags-email-verification","plugin_tags-page-restriction","plugin_tags-user-registration","plugin_category-authentication","plugin_contributors-devdorado","plugin_committers-devdorado"],"banners":{"banner":"https:\/\/ps.w.org\/custom-auth-suite\/assets\/banner-772x250.png?rev=3674572","banner_2x":"https:\/\/ps.w.org\/custom-auth-suite\/assets\/banner-1544x500.png?rev=3674572","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/custom-auth-suite\/assets\/icon-128x128.png?rev=3674572","icon_2x":"https:\/\/ps.w.org\/custom-auth-suite\/assets\/icon-256x256.png?rev=3674572","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/custom-auth-suite\/assets\/screenshot-1.png?rev=3674572","caption":"Custom Auth Suite admin dashboard."},{"src":"https:\/\/ps.w.org\/custom-auth-suite\/assets\/screenshot-2.png?rev=3674572","caption":"Authentication page configuration."},{"src":"https:\/\/ps.w.org\/custom-auth-suite\/assets\/screenshot-3.png?rev=3674572","caption":"Email customization settings."},{"src":"https:\/\/ps.w.org\/custom-auth-suite\/assets\/screenshot-4.png?rev=3674572","caption":"Installation Doctor compatibility checks."},{"src":"https:\/\/ps.w.org\/custom-auth-suite\/assets\/screenshot-5.png?rev=3674572","caption":"Upgrade CAS information cards."}],"raw_content":"\n
Custom Auth Suite creates custom login, registration, password reset and email verification flows with protected paths and optional assisted support.<\/p>\n\n
The Free package includes:<\/p>\n\n
No paid license is required for these Free features.<\/p>\n\n
The Free interface may show clearly identified, read-only previews of separately distributed Advanced and Premium capabilities. Commercial modules are absent from the WordPress.org package; previews save no commercial settings and do not restrict Free features.<\/p>\n\n
In the WordPress.org Free package, Upgrade CAS may show two bundled Advanced\/Premium information cards. Each can be dismissed locally for 20 days and sends no impression, CTA-click or dismiss analytics.<\/p>\n\n
The Doctor Compatibility Scan lists plugin name, slug, version and status under \u201cPlugins recognized as CAS-relevant\u201d or \u201cOther unclassified plugins.\u201d Unclassified is not a safety judgment. Acknowledged Warnings remain visible but stop auto-opening until context changes. False diagnostic booleans are shown as Custom Auth Suite works with WordPress users. It does not create a membership or payment system.<\/p>\n\n CAS is local-first. These optional services contact external servers only under the stated conditions.<\/p>\n\n Disabled by default. After explicit administrator opt-in, CAS may request operational JSON notices from:<\/p>\n\n https:\/\/customauthsuite.com\/wp-json\/cas-remote-messages\/v1\/messages<\/p>\n\n A request may include CAS version\/package, placement, locale, plan or support status, limited compatibility context and a privacy-preserving site hash. Free notices are limited to security, compatibility, maintenance, documentation and support. A dismissible renewal notice may appear only for support already purchased and validated. Remote commercial upgrade cards are not requested or rendered.<\/p>\n\n CAS normalizes the response and does not execute remote PHP\/JavaScript or render arbitrary remote HTML. Disabling the option stops future requests.<\/p>\n\n Disabled by default and controlled separately. When enabled, CAS may send privacy-safe CTA-click events for remote notices and local review\/Doctor resource links. Data may include action\/message\/placement IDs, CTA label, CAS version\/package, available license context, a privacy-preserving site hash, timestamp and delivery status. Events are sent to:<\/p>\n\n https:\/\/customauthsuite.com\/wp-json\/cas-remote-messages\/v1\/events<\/p>\n\n Local preference actions are not sent.<\/p>\n\n The local Advanced\/Premium cards never send impression, CTA-click or dismiss events to CAS RM.<\/p>\n\n Disabled by default. After explicit opt-in and an administrator click on \u201cOpen support request\u201d, CAS creates one redacted Doctor report behind a random handoff token and opens the support page for retrieval. The handoff normally expires after 30 minutes and is bounded to one hour.<\/p>\n\n Disabling Assisted Doctor Support immediately invalidates existing handoffs, including those created before re-enablement. Reports are designed to exclude passwords, cookies, nonces, authorization headers, complete license keys, API secrets, private keys and diagnostic tokens.<\/p>\n\n This ticket-based mechanism requires case consent, a temporary signed token, an administrator with CAS may contact the revocation endpoint embedded in the signed support token to check whether the temporary session has been revoked. For CAS Support Desk tokens, the endpoint is:<\/p>\n\n https:\/\/customauthsuite.com\/wp-json\/cas-support-desk\/v1\/support-diagnostics\/revocation<\/p>\n\n Requests may include a token-identifier hash, case ID, privacy-preserving site hash and timestamp, but not the full signed token, WordPress credentials or private secrets. Local termination is immediate and remains effective if a remote notice fails. This is not a remote login, creates no users and does not automatically upload reports.<\/p>\n\n A manual link may open:<\/p>\n\n https:\/\/customauthsuite.com\/privacy-cookie-notes\/<\/p>\n\n The plugin opens it only when clicked. The request may include domain, language and selected package mode. Generated notes describe CAS-related data flows and should be reviewed and adapted to the site\u2019s actual configuration before publication.<\/p>\n\n Service information:<\/p>\n\n The Free package does not use commercial license, update or package-download services.<\/p>\n\n CAS primarily stores data locally. Depending on enabled features, this may include settings\/routes, authentication account fields, verification and password-reset state, protected paths, Doctor\/report data, warning fingerprints and enabled logs.<\/p>\n\n Doctor inventory entries contain only plugin name, slug, version and status. Reports and logs remain local unless deliberately shared; review them first. Uninstall cleanup follows the CAS retention setting.<\/p>\n\n Free support is provided through the official WordPress.org support forum after publication. Product information and commercial support options are available at:<\/p>\n\n https:\/\/customauthsuite.com\/<\/p>\n\n Never publish passwords, license keys, diagnostic tokens, cookies, nonces or other secrets in a public forum.<\/p>\n\n\n No. All included Free features work without a paid license.<\/p><\/dd>\nno<\/code>.<\/p>\n\nExternal Services<\/h3>\n\n
Remote Admin Messages<\/h4>\n\n
Remote Message Interaction Analytics<\/h4>\n\n
Assisted Doctor Support<\/h4>\n\n
Remote Support Diagnostics<\/h4>\n\n
manage_options<\/code>, and manual nonce-protected activation. Opening a support link does not activate it.<\/p>\n\nOptional manual website resource<\/h4>\n\n
\n
Privacy and Local Data Handling<\/h3>\n\n
Support<\/h3>\n\n
\n
\/wp-content\/plugins\/<\/code>.<\/li>\n\n
Does the Free package require a paid license?<\/h3><\/dt>\n