I'm looking to implement a WordPress API service using the WP REST API plugin. However, I do not want the frontend to access the API directly so I'm opting to implementing an API Proxy.

  • Can the WP REST API work behind a proxy?
  • Has anyone ever used the WP REST API behind a proxy?
  • Can anyone recommend an api proxy service that worked well with it?
  • 1
    Can I ask why you don't want the frontend to interact directly with the API? What benefit do you gain from adding another layer? Commented Nov 19, 2015 at 10:25
  • added security? I'm not comfortable with using wordpress as a backend service nor is the WP REST API plugin mature enough to be reliable
    – Kendall
    Commented Nov 20, 2015 at 1:10

1 Answer 1


Using a proxy is important when you cannot store your authentication credentials securely. One encounters this problem when building single page applications with client-side JavaScript Frameworks like Angular or Ember. This blog entry by Alex Bilbie nicely summarises the issue.

As a side project, involving a Angular/Ionic/Cordova application and WordPress, I'm building a proxy plugin for the WP REST API in order to communicate securely with the API. The code is available on GitHub, should you wish to check it out. It's a personal project (currently running inside a Vagrant box) geared towards understanding the API and polishing my Angular/Ionic skillset and based on my limited understanding of the OAuth spec, so there's bound to be a lot of bugs and other issues.

But to answer your three questions:

  • The REST API works behind a proxy;
  • I'm using both plugins (REST API and API proxy) as a primary datasource;
  • I'm not aware of any proxy services that work with the WP REST API, but a quick Google search lists some generic tutorials by Apigee and Amazon.

EDIT: I started working on my proxy attempt when version 1 of WP API was still in development and there are now several other authentication options, apart from Basic Auth and OAuth1. JWT based authentication seems to be a more streamlined option as opposed to a proxy. I'm currently experimenting with this JWT plugin developed for the API. Still uncertain about the security implications, though, as is this user. This provides an interesting, but rather bleak general overview.

  • Some good insight here man....hope you experiment does well. I'll look into your stuff though.
    – Kendall
    Commented Jan 13, 2016 at 2:48

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.