TextLink Auth — Passwordless OTP/Magic-Link for Woo + Apps

SMS OTP Login: Global carrier coverage, TOTP fallback, resend limits, and auto-read support on Android.

Social Sign-In: Apple, Google, Facebook, X, LinkedIn, GitHub (toggle providers per environment).

WooCommerce Sync: Seamless user mapping to wp_users + Woo customer profiles; merges duplicates by email/phone.

Single Customer View: Unified profile (email, phone, social IDs, consents, order history link).

Session & Tokens: OAuth 2.1/OIDC, PKCE, rotating refresh tokens, short-lived JWT access tokens.

MFA & Step-Up: Optional second factor for high-risk actions (checkout, payout, address change).

Fraud & Abuse Controls: Rate limiting, IP/device risk scoring, temporary blocks, CAPTCHA challenge.

Privacy & Compliance: Built-in consent capture, data export/delete, configurable data retention (GDPR/CCPA-friendly).

Admin Console: Real-time auth logs, user search, role-based access, environment keys, webhooks.

Developer-First: Flutter SDK, REST & GraphQL APIs, TypeScript admin client, Postman collection, sample apps.

Events & Webhooks: user.created, login.succeeded, otp.failed, consent.updated, order.linked.

Localization: OTP templates in 30+ languages, RTL support.

White-Label UI: Brandable SMS texts, buttons, and consent screens.

99.95% SLA: Global edge POPs, auto-retry delivery, status page.

Flutter developer experience (DX)

• Widgets: AuthNowButton(providers: [...]), SmsOtpFlow(autoRead: true)
• State: Stream-based auth state; interceptors for API clients
• Security: Token storage via platform keystores; biometric unlock optional
• Samples: Minimal app, checkout handoff, profile guard, deep-link magic sign-in

Security & compliance
TLS 1.2+, HSTS, rotating keys, IP allow/deny lists
OAuth 2.0/OIDC, PKCE, JWK rotation, nonce checking
PII minimization, regional data residency options
One-click data export/delete to honor privacy requests