How do I authenticate HTTP requests in WordPress 4.7?

Question

The new WordPress v4.7 integrates WordPress REST API plugin into the core of WP. This makes posts, pages, and media publicly available using HTTP calls even on private sites.

Is there a setting in WP to block or authenticate GET and POST (etc.) requests?

I'm building an Angular 1.5 REST app with WP and it would be great to authenticate these public requests.

The members plugin by Justin Tadlock wordpress.org/plugins/members now has an option to require authentication to the REST API. — Brian
– Brian, Commented Aug 1, 2017 at 14:55

Htaccess24 · Accepted Answer · 2016-12-20 20:40:19Z

0

Sure you can authenticate the requests. I found a link inside the documentation about authentication. It works with Cookies, OAuth and Password as well.

WordPress API Authentication

answered Dec 20, 2016 at 20:40

Htaccess24

595 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Brian Over a year ago

I've come across this page but maybe I missed something? In my testing I used postman to test GET .../wp-json/wp/v2/posts and the request went through without verifying any credentials. I haven't been able to find any WP setting to disable this (at the minimum) now that this behavior is included by default.

Brian · Accepted Answer · 2017-11-16 17:55:00Z

The latest WordPress API now includes authentication for all requests. Adding the filter is_user_logged_in to the rest_authentication_errors filer should require authentication:

add_filter(&#039;rest_authentication_errors&#039;, function($result) {
    if (!empty($result)) {
        return $result;
    }
    if (!is_user_logged_in()) {
        return new WP_Error(&#039;rest_not_logged_in&#039;, &#039;You are not currently logged in.&#039;, array(&#039;status&#039; => 401));
    }
    return $result;
});

Collectives™ on Stack Overflow

How do I authenticate HTTP requests in WordPress 4.7?

2 Answers 2

1 Comment

Comments

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

Comments

Related