Plugin Settings
The OC Magento Bridge plugin settings page is at WordPress Admin > Settings > OC Magento Bridge.
Settings
Section titled “Settings”API Key
Section titled “API Key”A randomly generated key used to authenticate requests from Magento to WordPress. The key is sent as the X-OC-Bridge-Key header with every API request.
- Generated automatically on plugin activation
- Click Regenerate to create a new key (you must update Magento’s configuration if you do this)
- Copy this value and paste it into Magento Admin > Stores > Configuration > Orange Collar > WordPress Integration > Connection > API Key
Magento Webhook URL
Section titled “Magento Webhook URL”The full URL to the Magento webhook endpoint that receives cache purge notifications.
- Example:
https://your-magento-store.com/wordpress/webhook/cachepurge - Leave empty to disable webhooks
- Must be reachable from the WordPress server
How Authentication Works
Section titled “How Authentication Works”All oc-bridge/v1 REST endpoints use a custom authentication callback that checks the X-OC-Bridge-Key header against the stored API key using PHP’s hash_equals() function for timing-safe comparison.
If the header is missing or does not match, the endpoint returns a 401 Unauthorized response.