Didit Verify

Didit Verify lets you require identity verification on your WordPress site. Drop a shortcode on any page or require it at WooCommerce checkout.

Two integration modes:

• UniLink — paste a URL from the workflow you want from Didit Console. No backend needed.
• API Session — [RECOMMENDED] the plugin creates a unique session per user. Your API key stays server-side.

Display options:

• Modal — opens a centered overlay on top of the page
• Embedded — renders the verification inline where the shortcode is placed
• Configurable close button, exit confirmation dialog, and auto-close on completion
• Debug logging for SDK events in the browser console

Button appearance:

• Fully configurable from the admin panel: text, colors, border radius, padding, font size
• Live preview in Settings that updates as you change values
• Shortcode attributes can override the button text per page

Content gating:

• [didit_gate] shortcode — restrict any content to verified users only
• [didit_status] shortcode — show the user’s verification status anywhere
• Verification status saved to WordPress user meta and visible in the admin Users list

WooCommerce support:

• Require verification at checkout with 4 position options
• Automatically send billing data (name, email, phone, address) to Didit for pre-filling and cross-validation
• Verification session ID saved to order meta for audit

Developer extensibility:

• PHP action hooks: didit_session_created, didit_verification_completed, didit_verification_cancelled
• PHP filter: didit_sdk_url to change the SDK CDN
• DOM CustomEvent: didit:complete for frontend JavaScript

Security (API mode):

• API key stored server-side only — never sent to the browser
• CSRF nonce on every request
• Per-user rate limit: 10 sessions/hour
• Per-IP rate limit: 3 sessions/hour (guests)
• All input whitelisted and sanitized

Third-Party Service

This plugin connects to the Didit identity verification service to process user verifications. When a verification session is created (API mode), the plugin sends data to Didit’s servers. When the verification UI is displayed, an iframe loads content from verify.didit.me.

This plugin bundles the Didit Web SDK (version 0.1.6) as assets/js/didit-sdk.umd.min.js. The full unminified source code is publicly available at the GitHub repository and npm package linked below.

• Service: https://didit.me
• SDK source code: https://github.com/didit-protocol/sdk-web
• SDK npm package: https://www.npmjs.com/package/@didit-protocol/sdk-web
• SDK license: MIT
• Terms of Use: https://didit.me/en/terms/identity-verification/
• Privacy Policy: https://didit.me/en/terms/privacy-policy/

The SDK can be rebuilt from source with npm install && npm run build (uses Rollup). See the GitHub repository for full build instructions.

No data is sent to Didit until the site administrator configures the plugin and a user initiates verification.