{"id":353670,"date":"2026-08-20T18:03:48","date_gmt":"2026-08-20T18:03:48","guid":{"rendered":"https:\/\/fr.wordpress.org\/plugins\/oscar-seo-connector\/"},"modified":"2026-08-20T18:03:34","modified_gmt":"2026-08-20T18:03:34","slug":"oscar-seo-connector","status":"publish","type":"plugin","link":"https:\/\/hsb.wordpress.org\/plugins\/oscar-seo-connector\/","author":23549032,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.0.0","stable_tag":"1.0.0","tested":"7.0.4","requires":"5.9","requires_php":"7.4","requires_plugins":null,"header_name":"Oscar SEO Connector","header_author":"Oscar SEO","header_description":"Securely connects this site to the Oscar SEO platform so Oscar can verify the connection and publish articles (title, content, SEO meta, media, categories, tags) through a narrow, token-authenticated REST API. Replaces Application Passwords.","assets_banners_color":"","last_updated":"2026-08-20 18:03:34","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"","header_author_uri":"https:\/\/oscar-seo.ai","rating":0,"author_block_rating":0,"active_installs":0,"downloads":36,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0.0":{"tag":"1.0.0","author":"badrlg","date":"2026-08-20 18:03:34"}},"upgrade_notice":{"1.0.0":"<p>Initial release.<\/p>"},"ratings":[],"assets_icons":[],"assets_banners":[],"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.0"],"block_files":[],"assets_screenshots":[],"screenshots":[]},"plugin_section":[],"plugin_tags":[569,529,7143,23853,186],"plugin_category":[55],"plugin_contributors":[276689],"plugin_business_model":[],"class_list":["post-353670","plugin","type-plugin","status-publish","hentry","plugin_tags-automation","plugin_tags-content","plugin_tags-publishing","plugin_tags-rest-api","plugin_tags-seo","plugin_category-seo-and-marketing","plugin_contributors-badrlg","plugin_committers-badrlg"],"banners":[],"icons":{"svg":false,"icon":"https:\/\/s.w.org\/plugins\/geopattern-icon\/oscar-seo-connector.svg","icon_2x":false,"generated":true},"screenshots":[],"raw_content":"<!--section=description-->\n<p>Oscar SEO Connector replaces the Application Password flow that Oscar previously used to publish to self-hosted WordPress sites.<\/p>\n\n<p>Instead of a broad, account-wide Application Password, this plugin issues a single, narrow connection token that Oscar uses to call a small, dedicated REST API:<\/p>\n\n<ul>\n<li>Verify the connection (<code>ping<\/code>).<\/li>\n<li>Create or update a post, including title, content, excerpt, slug, status, categories, tags and a meta description (<code>publish<\/code>).<\/li>\n<li>Upload an image to the media library, from a URL or a direct file upload, for use as a featured or inline image (<code>media<\/code>).<\/li>\n<li>Optionally remove a post that Oscar created (<code>post\/{id}<\/code>).<\/li>\n<\/ul>\n\n<p><strong>Security first<\/strong><\/p>\n\n<ul>\n<li>The connection token is generated with a cryptographically secure random source and only its hash is ever stored in the database. The plaintext is shown exactly once, right after it is generated.<\/li>\n<li>Every request is authenticated with a <code>Bearer<\/code> token compared using a constant-time (<code>hash_equals<\/code>) check \u2014 no valid token, no access.<\/li>\n<li>Every REST route has an explicit permission check; none are public.<\/li>\n<li>All admin actions are nonce-protected and require the <code>manage_options<\/code> capability.<\/li>\n<\/ul>\n\n<p><strong>SEO plugin compatibility<\/strong><\/p>\n\n<p>When present, the meta description Oscar sends is also written to the fields read by Yoast SEO and Rank Math, in addition to the plugin's own field, so existing SEO plugins keep working without any extra configuration.<\/p>\n\n<h3>External services<\/h3>\n\n<p>This plugin connects your WordPress site to Oscar SEO (https:\/\/oscar-seo.ai), a third-party content platform that you must have an account with. The connection is initiated by you: you install this plugin, generate a connection token, and paste it into your Oscar account.<\/p>\n\n<p>What data is exchanged and when:<\/p>\n\n<ul>\n<li>Oscar calls this site's REST API (the <code>oscar\/v1<\/code> endpoints) using the connection token you provide, to verify the connection and to create or update posts (title, content, excerpt, slug, status, categories, tags, meta description).<\/li>\n<li>When a post includes images, the plugin downloads those images from the URLs Oscar provides and adds them to your Media Library.<\/li>\n<li>The plugin itself does not send your site's data to Oscar and does not track your site or its visitors. All requests are initiated by Oscar using the token you authorized, and the connection can be revoked at any time by regenerating or removing the token.<\/li>\n<\/ul>\n\n<p>By connecting, you agree to Oscar SEO's Terms of Service (https:\/\/oscar-seo.ai\/cgv) and Privacy Policy (https:\/\/oscar-seo.ai\/confidentialite).<\/p>\n\n<!--section=installation-->\n<ol>\n<li>Upload the <code>oscar-seo-connector<\/code> folder to <code>\/wp-content\/plugins\/<\/code>, or install the zip file through <strong>Plugins \u2192 Add New \u2192 Upload Plugin<\/strong>.<\/li>\n<li>Activate the plugin through the <strong>Plugins<\/strong> screen.<\/li>\n<li>Go to <strong>Oscar SEO<\/strong> in the admin menu.<\/li>\n<li>Copy the <strong>REST base URL<\/strong> and the <strong>connection token<\/strong> shown there (the token is only shown once).<\/li>\n<li>Paste both values into Oscar's WordPress connection settings.<\/li>\n<li>Oscar calls <code>GET \/oscar\/v1\/ping<\/code> to confirm the connection; the status on this page will switch to \"Connected\" after the first successful request.<\/li>\n<\/ol>\n\n<!--section=faq-->\n<dl>\n<dt id=\"where%20is%20my%20connection%20token%20stored%3F\"><h3>Where is my connection token stored?<\/h3><\/dt>\n<dd><p>Only a SHA-256 hash of the token is stored in the WordPress options table. The plaintext token is never persisted; it is shown once, immediately after it is generated or regenerated, and cannot be retrieved afterwards. If you lose it, use <strong>Regenerate<\/strong>.<\/p><\/dd>\n<dt id=\"what%20happens%20if%20i%20regenerate%20the%20token%3F\"><h3>What happens if I regenerate the token?<\/h3><\/dt>\n<dd><p>A brand-new token is generated and its hash replaces the old one. Any system still using the previous token will immediately get <code>401 Unauthorized<\/code> responses. Update Oscar with the new token right away.<\/p><\/dd>\n<dt id=\"does%20this%20work%20with%20yoast%20seo%20or%20rank%20math%3F\"><h3>Does this work with Yoast SEO or Rank Math?<\/h3><\/dt>\n<dd><p>Yes. If either plugin is active, the meta description sent by Oscar is also written to that plugin's own meta key. If neither is active, nothing extra happens \u2014 there are no fatal errors either way.<\/p><\/dd>\n<dt id=\"does%20this%20plugin%20send%20any%20data%20anywhere%20on%20its%20own%3F\"><h3>Does this plugin send any data anywhere on its own?<\/h3><\/dt>\n<dd><p>No. It does not phone home, it does not track the site or its visitors, and it schedules no background outbound requests. It only responds to authenticated requests initiated by Oscar (or by anyone holding a valid token). The one outbound network request it can make is downloading an image into the media library, and only when an authenticated request explicitly supplies that image URL (<code>featured_image_url<\/code> on publish, or <code>source_url<\/code> on the media endpoint) \u2014 the standard WordPress media sideload. No site data is ever sent to Oscar or any third party by the plugin itself.<\/p><\/dd>\n<dt id=\"can%20i%20still%20use%20application%20passwords%20alongside%20this%20plugin%3F\"><h3>Can I still use Application Passwords alongside this plugin?<\/h3><\/dt>\n<dd><p>Yes, they are independent. This plugin adds its own narrow, token-based API rather than replacing WordPress's core REST authentication.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>Initial release: connection token management, <code>oscar\/v1<\/code> REST API (ping, publish, media, delete), settings screen, Yoast\/Rank Math meta description support.<\/li>\n<\/ul>","raw_excerpt":"Securely connect this site to the Oscar SEO platform for one-click authentication and reliable article publishing.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/hsb.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/353670","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hsb.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/hsb.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/hsb.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=353670"}],"author":[{"embeddable":true,"href":"https:\/\/hsb.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/badrlg"}],"wp:attachment":[{"href":"https:\/\/hsb.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=353670"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/hsb.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=353670"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/hsb.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=353670"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/hsb.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=353670"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/hsb.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=353670"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/hsb.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=353670"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}