Wolvy Video for WordPress

What it does#

Install & connect#

1. InstallIn wp-admin go to Plugins → Add New, search for Wolvy Video, then Install and Activate. Or download it from WordPress.org.
2. Add your API keyCreate one in the Wolvy dashboard (Settings → API) with the scopes below. In Wolvy → Settings, paste it and press Verify API key — this also discovers your account id.
3. Add your signing secretCopy it from Settings → Watermark → Signing secret, paste it and press Verify signing secret.
4. Check HealthOpen Wolvy → Health and fix anything that is not a pass before you publish a page with a video.

API key scopes#

The key powers the admin features only — playback never uses it. A missing scope hides the feature that needs it rather than breaking the site.

Secrets in wp-config.php#

Settings saved in wp-admin are encrypted with keys derived from your site’s salts, which protects them if only the database leaks. To keep them out of the database entirely, define constants — a constant always wins over the saved setting.

// wp-config.php — above the line "That's all, stop editing!"
define( 'WOLVY_API_KEY', 'wv_live_…' );
define( 'WOLVY_VIEWER_SIGN_SECRET', '…64 hex characters…' );

Embedding videos#

Block editor

Add the Wolvy Video block and pick a video from your library — searchable, filterable by folder. The block renders on the server, so each visitor gets their own token.

Shortcode

[wolvy id="a1b2c3d4e5f60718293a"]

[wolvy id="a1b2c3d4e5f60718293a" aspect="9:16" max_width="420px"]

[wolvy id="a1b2c3d4e5f60718293a" facade="1" title="Lesson 3 — Pricing strategy"]

[wolvy_video] works as an alias. An attribute the plugin cannot honour — autoplay is the usual one — shows a notice to administrators instead of being silently ignored: playback behaviour is an account setting in the Wolvy dashboard.

Elementor

Drag in the Wolvy Video widget (it appears only when Elementor is active) and choose a video in the panel.

Theme templates

<?php
// In a theme template. Returns nothing when the plugin is inactive.
if ( function_exists( 'wolvy_video' ) ) {
    wolvy_video( 'a1b2c3d4e5f60718293a', array( 'aspect' => '16:9', 'facade' => 1 ) );
}

Who can watch#

Everyone, by default. A signed-in visitor gets a signed token, so the watermark and session records name them. A visitor who is not signed in gets an unsigned embed, which plays unless your account has enforcement on.

• To restrict playback, turn on Require visitors to sign in in Wolvy → Settings and choose what others see: a message, a sign-in link, or nothing.
• For finer rules — a membership level, a purchased course — use the wolvy_can_view filter.

What the watermark shows

The id is stored in user meta and registered with WordPress’s personal-data export and erase tools. Pages that carry a viewer token are marked uncacheable (DONOTCACHEPAGE and Cache-Control: private, no-store); pages for anonymous visitors cache normally.

Filters & actions#

Hook into the plugin from your theme’s functions.php or a small site plugin.

<?php
// Only members may watch. Replace the role check with your membership plugin's own test.
add_filter( 'wolvy_can_view', function ( $can_view, $video_id ) {
    if ( ! is_user_logged_in() ) {
        return false;
    }
    $roles = (array) wp_get_current_user()->roles;
    return (bool) array_intersect( array( 'administrator', 'member' ), $roles );
}, 10, 2 );

<?php
// Put the student number on the watermark instead of the default pseudonymous id.
add_filter( 'wolvy_viewer_id', function ( $id, $user_id ) {
    $student_no = get_user_meta( $user_id, 'student_number', true );
    return $student_no ? 'STU-' . $student_no : $id;
}, 10, 2 );

<?php
// Add a data attribute for your own analytics. Leave allow and referrerpolicy untouched.
add_filter( 'wolvy_iframe_attributes', function ( $attributes, $video_id, $atts ) {
    $attributes['data-lesson'] = $video_id;
    return $attributes;
}, 10, 3 );

<?php
// Email the site admin when a video finishes encoding. Runs only for verified deliveries.
add_action( 'wolvy_webhook_event', function ( $type, $data, $event ) {
    if ( 'video.ready' !== $type ) {
        return;
    }
    wp_mail(
        get_option( 'admin_email' ),
        'A Wolvy video is ready',
        sprintf( 'Video %s finished encoding and can be published.', $data['id'] )
    );
}, 10, 3 );

Webhooks#

Optional. Encoding is asynchronous, so a video added to a page right after upload is cached as “processing”. With webhooks on, Wolvy tells the site the moment it is ready and the cached copy is refreshed.

1. EnableIn Wolvy → Settings, register the webhook. The site must be reachable on a public https address — localhost and .test domains cannot receive deliveries.
2. DoneThe plugin creates the endpoint https://your-site.com/wp-json/wolvy/v1/webhook for video.ready, video.failed, video.deleted and caption.ready, stores its secret, and verifies every delivery’s signature and timestamp.

Build on it with the wolvy_webhook_event action. If you deactivate the plugin for good, remove the endpoint in Wolvy → Settings first, so Wolvy stops sending to a URL that no longer answers.

Health & troubleshooting#

Common questions#