Secure Iframe Embed for Genealorama

Secure Iframe Embed for Genealorama is a WordPress plugin designed to integrate the Genealorama web application into any WordPress site through interactive and secure iframes.

It allows logged-in users to view, visualize, or interact with genealogical research results while maintaining secure access rights.

✨ Automatic Installation

Upon activation, the plugin:
✅ Automatically creates a “Genealogy” page accessible at /genealorama/
✅ Applies a full-page template (without WordPress header/footer)
✅ Configures integration with the shortcode [genealorama_embed auto_height="true"]

No manual configuration needed to get started!

🔧 Features

• ✅ Automatic dedicated page: A /genealorama/ page created on activation
• ✅ Immersive template: Full-page display without distractions
• ✅ Flexible shortcode: [genealorama_embed] usable on any page
• ✅ Enhanced security: HMAC-SHA256 signature for authentication
• ✅ Members only: Access limited to logged-in users
• ✅ Adaptive height: Automatic iframe resizing
• ✅ Bidirectional communication: Support for messages between iframe and parent site
• 🆕 Credential validation: Automatic and manual verification of API keys

🔒 Security

• Authentication required: Users must be logged in to WordPress
• HMAC signature: Each request is cryptographically signed
• Temporal validation: Protection against replay attacks
• Iframe isolation: Secure communication via postMessage
• 🆕 Error detection: Automatic alert if credentials are invalid

📖 Usage

Use the shortcode on any page or post:
[genealorama_embed]

With options:
[genealorama_embed auto_height=”true” fullscreen=”true”]

Shortcode Parameters

• src – Application URL (default: https://genealogie.app/iframe-entry/)
• auto_height – Automatic height adjustment (default: true)
• fullscreen – Full screen mode (default: false)

External Services

This plugin connects to external services to provide genealogy visualization functionality:

Genealorama Application Service

• Purpose: Provides the main genealogy application interface through a secure iframe
• Service URL: https://genealogie.app
• Data sent: User authentication tokens, timestamps, and signatures for secure access
• When: Every time a user loads the genealogy interface
• Terms of Service: https://genealorama.com/terms
• Privacy Policy: https://genealorama.com/privacy

Partner Registration API

• Purpose: Registers WordPress sites as authorized partners for the genealogy service
• Service URL: https://partner-registration.genealogie.app
• Data sent: Site domain, admin email, WordPress version, plugin version
• When: During initial setup when admin clicks “Get My Credentials”
• Terms of Service: https://genealorama.com/terms
• Privacy Policy: https://genealorama.com/privacy

These external connections are required for the plugin to function properly and provide secure access to genealogy services.