Add application password authorization flow to wp-login.php#551

Closed

obenland wants to merge 11 commits intoWordPress:trunkfrom

obenland:add/login-application-passwords

Commits on Feb 17, 2026

WordPress.org: Add application password authorization flow to wp-login.php.
obenland
committed
WordPress.org: Only render MCP config for the MCP app.
obenland
committed
WordPress.org: Fix double URL encoding and case-sensitive host comparison.
obenland
committed
WordPress.org: Gate application password authorization to login.wordpress.org.
obenland
committed
WordPress.org: Rename authorize-application-login.php to login-application-passwords.php.
obenland
committed
Apply suggestions from code review

obenland
and
dd32
committed
WordPress.org: Address code review feedback on application password authorization.
obenland
committed
WordPress.org: Convert login-application-passwords from mu-plugin to plugin.
obenland
committed
WordPress.org: Make allowed apps filterable and remove MCP-specific code.
obenland
committed
Login Application Passwords: Add MCP client and extract assets into files.
obenland
committed
Login Application Passwords: Add authorization link to MCP client file header.
obenland
committed