=== MzSocial Connect ===
Contributors: mzdigital
Tags: social login, google, facebook, oauth, woocommerce
Requires at least: 6.0
Requires PHP: 7.4
Stable tag: 0.6.0
License: GPLv2 or later

== Description ==
Staging build with Google and Facebook OAuth, a guided configuration wizard, shortcode login buttons, WooCommerce login placement, diagnostics and live Google button preview. OAuth requires external provider credentials and HTTPS.

== Changelog ==
= 0.6.0 =
* Added instant button designer preview without saving.
* Respect WordPress users_can_register setting when creating new social-login users.
* Updated version metadata and documentation.

== Testing ==
PHP syntax and ZIP integrity checks do not establish production readiness. Test both OAuth providers, account linking, WooCommerce and registration policies on staging before deployment.

== Version 0.7.0 ==
* Bind OAuth state to an HttpOnly SameSite=Lax browser cookie to mitigate login CSRF and session swapping.
* Use POST for Facebook code exchange; send access token in Authorization header rather than URL.
* Browser privacy settings that block cookies can prevent sign-in; start again with cookies enabled.
* Existing OAuth requests started before upgrading must be restarted.
* Live provider and WordPress integration tests remain required.

Version 0.8.0 changes:
- Adds [mzsocial_account] shortcode for logged-in users to inspect and disconnect social links.
- Adds an account-management nonce and ownership checks for disconnect requests.
- Removes duplicate [mzsocial_buttons] shortcode registration.
- NOTE: Live provider authentication and WooCommerce tests are still required before public release.
- Account recovery should be verified before disconnecting providers.
