How to Fix Login Issues on the BuddyBoss App (with X Social Login)

Users may be unable to log in to the BuddyBoss App due to several common scenarios—from Jetpack integration quirks to server-level restrictions. This article walks through each issue and provides solutions so you can restore seamless app authentication.

WordPress.com vs Site Credentials

If your site is hosted on WordPress.com or uses the Jetpack plugin, users might attempt to log in with their WordPress.com credentials rather than their actual site account. To fix this:

1. In your WordPress dashboard, go to Jetpack > Dashboard, then click Settings (top right).

2. Under Security, disable Allow users to log in to this site using WordPress.com accounts.
   

2. Have affected users visit the app login screen, which will now redirect to your site’s native login form.
   
3. Users may need to reset their site password to match their app credentials.
   

Note: BuddyBoss App does not yet support Jetpack social login. (See https://roadmap.buddyboss.com/c/26-use-social-accounts-to-login-and-register)

Blocked Authentication Endpoints

A “Login failed. Please try again. Error while generating JWT token” message often means your server or a security plugin is blocking the REST API endpoints required by the app.

1. Contact your hosting provider and request that these paths be whitelisted:
   
   • /wp-json/*
   • /wp-json/buddyboss-app/*
     
2. If you run a security plugin (e.g., Wordfence, Sucuri), temporarily deactivate it and clear all caches.
   
3. If login succeeds, reconfigure your security plugin to allow the BuddyBoss App endpoints, then reactivate and clear caches again.
   

reCAPTCHA on the Login Page

If you’ve enabled reCAPTCHA for your site’s login form, the BuddyBoss App won’t be able to submit credentials. To resolve:

• Disable reCAPTCHA on the login page or
  
• Follow the recommended reCAPTCHA setup for the BuddyBoss App.

Troubleshooting and FAQs

Q: I still get a 400 error after whitelisting endpoints—what next?
A: Ask your host to review server logs (e.g., Nginx/Apache or WAF logs) for blocked requests matching /wp-json/* patterns.

Q: Could a caching or CDN layer interfere?
A: Yes. Purge any server-side, plugin, or CDN caches after making changes to endpoint access.

Q: Is this a BuddyBoss or WordPress issue?
A: This is a server or plugin configuration issue affecting the WordPress REST API, which the BuddyBoss App relies on for authentication.

Bonus Guide: How to Set Up X Social Login for BuddyBoss

X Social Login (formerly known as Twitter) allows users to seamlessly log in or register on your BuddyBoss Platform (Web and App) using their X accounts. This guide provides step-by-step instructions as to how you can set up X Social Login for BuddyBoss, enhancing user convenience while simplifying account management.

Explore BuddyBoss Platform | BuddyBoss App | BuddyBoss Pricing | Try BuddyBoss Demo

Tutorial Video

Prerequisites and Key Considerations

App Publishing Requirements

• If you enable Social Login in the BuddyBoss App, both Google and Apple Social Logins are required for publishing on app stores. This is mandatory even if other social providers (e.g., X, Facebook, LinkedIn) are used, ensuring compatibility with device-associated accounts.
• Google and Apple Social Logins are optional only if the BuddyBoss App exclusively uses your company’s account sign-in system.

Notes:
Due to limitations with X’s v2 API, users cannot sign up using their X account. However, after logging in, they can connect their X account by going to:Profile > Account Settings > Social Accounts and selecting X (formerly Twitter) as the provider.

Any changes to the Social Login settings require new builds for both iOS and Android apps. Ensure to regenerate and publish updated app versions after making any modifications.

Required Information for X Social Login

To enable X Social Login, you need the following details:

• Client ID (V2)
• Client Secret (V2)

Creating an X App for Social Login

Follow the steps below to create an X App and obtain the required Client ID and Client Secret for integrating X Social Login with your BuddyBoss Platform.

Access X Developer Portal

1. Navigate to the X Developer Portal.
2. Log in using your X credentials.

Apply for Developer Account

• If you don’t have a Developer Account:
  1. Apply for one by filling in all the required details.
  2. Approval is required before proceeding with the setup.

Create a New Project

1. From the Dashboard, click on the + Create Project button.

2. In the Project Name tab:
   • Enter a name for your project in the text field.
   • Click Next.

3. In the Use Case tab:
   • Select the option that best describes how you intend to use the X Developer Platform.
   • Click Next.

4. In the Project Description tab:
   • Describe your project in the text field.
   • Click Next.

After clicking the Next button, your Project will become a sub-page under Projects & Apps page.

Create a New App

1. In the App Name tab:
   • Enter a name for your app.
   • Click Next.

2. In the Keys & Tokens tab, you will find:
   • API Key
   • API Key Secret
   • Bearer Token

Obtain Client ID and Client Secret

1. Click the App Settings button to complete the setup.

2. You will be redirected to Projects & Apps > [Your App Name] > Settings.
3. Under User Authentication Settings, click Set Up.

Configure User Authentication Settings

1. In the User Authentication Settings page, configure the following sections:
   • App Permissions:
     • Select Read to grant read-only permissions.
     • To access the user’s email address, enable Request email from users.
     • If enabled, you must also provide Terms of Service and Privacy Policy URLs.
   • Type of App:
     • Select Web App, Automated App or Bot.

• Callback URI / Redirect URL:
  • Enter the following URL:
    https://yourdomain.com/wp-login.php
  • Alternatively, navigate to:
    • WordPress Dashboard > BuddyBoss Plugin > Settings > General > Registration.
    • Click the pencil icon for X.
    • Copy the Callback URI / Redirect URL and paste it here.

• Website URL:
  • Enter your website’s URL.

2. Click Save to complete the setup.

Obtain OAuth 2.0 Client ID and Client Secret

1. After saving, you will be redirected to the page displaying your OAuth 2.0 Client ID and Client Secret.
2. Copy the details before clicking Done.

Complete Setup in BuddyBoss Platform

1. Go to your WordPress Dashboard.
2. Navigate to BuddyBoss Plugin > Settings > General > Registration.
3. Click the pen icon next to X Social Login.
4. Paste the copied Client ID and Client Secret into the respective fields.
5. Click Save Changes.

Verify and Enable X Social Login

1. After clicking Save Changes, a pop-up for Login to X will appear.

2. Sign in using your X credentials.
3. In the X pop-up, click Authorize App.

Once verified, a message will appear: Settings have been verified. Please wait while we redirect you.

4. You can now enable the X Social Login checkbox.
5. Click Save Settings to finalize.

Note: If the checkbox for X Social Login remains greyed out, click the pencil icon again and select Verify Settings.

Explore BuddyBoss Platform | BuddyBoss App | BuddyBoss Pricing | Try BuddyBoss Demo

Troubleshooting and FAQs

Q: Why is the X Social Login not appearing on my site?
A: Ensure Enable Social Login is checked in BuddyBoss Settings. Verify that the Client ID and Client Secret are correctly entered and saved.

Q: Why can’t users register using X Social Login?
A: Due to limitations with X’s v2 API, registration using X accounts is not supported. Users can only connect their X account after logging in.

Q: Why is the X Social Login checkbox greyed out?
A: Click the pencil icon next to X Social Login and select Verify Settings to ensure all configurations are correct.

Explore BuddyBoss web and App Pricing at a glance.