Questions tagged [authentication]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
15 views

How to store a secret for a plugin inside public_html

My friend has a Wordpress site, I have a django server. I am trying to talk to his Wordpress site custom endpoints of the REST API, and do priviledged activities like create and unpublish posts. I am ...
0
votes
1answer
22 views

Wordpress REST API calls that depend on the Wordpress User

I have a Wordpress site, and I have another server. People login into the wordpress site, then at a later stage browse the other server. On the other server page, there are JS fetch requests getting ...
0
votes
0answers
29 views

Secure WordPress API, how?

I'm writing a plugin that expose a custom resource via WordPress API's. Now the resource is public so anyone knows the API's endpoint can get the resource but I would to secure it, what's the best ...
0
votes
0answers
24 views

how to authenticate email and phone number separately in ajax login form?

I'm writing my own login and register plugin and I'm using Ajax in this plugin...so I want to set an option for site admin if he/she wants to enable login with phone number(I've already write phone ...
0
votes
1answer
22 views

create pages automatically and dynamically in wordPress

Is there an easy way to create pages automatically and dynamically in wordPress? Let me explain further: I am developing a website where I have more than 20 equal pages, with the same layout, where ...
0
votes
0answers
5 views

Auto-login from Wordpress Page to CRM Tools

I was asked to build an "intranet" with WordPress. Users should have different dashboards here with links for tools. These include tools such as Hubspot, Salesforce, but also simple links to ...
0
votes
0answers
12 views

What can I store externally to later on validate a request came from a WP admin?

I'm working on something to authenticate a service inside a plugin and I need to send the request back from my server to the REST API I created that ships with the plugin. The authentication will only ...
1
vote
0answers
87 views

How to save generated JWT token to cookies on login?

I'm developing a Chrome extension and I want my users to authenticate via my WP login page. I configured JWT Authentication for WP Rest API. I want the users to go to my website, login, and then have ...
0
votes
0answers
16 views

How to allow access based on the user meta flag

I want to check user meta data and allow access. where I am inserting user_status in wp_usermeta table at the time of Registration. How to validate/verify meta value with password for login. Here is ...
0
votes
0answers
27 views

Authentication between two different sites using the WordPress login cookie

Two different WordPress, two different users, same account and password. In this case, if the user wants to go to (A -> B) the B site after logging in to the A site, the session HASH is already ...
0
votes
0answers
10 views

wp_validate_auth_cookie interfering on Woocommerce API

I'm with some strange issue. Everything about generating and validating auth_cookies is working fine, but when I validate a cookie anywhere using wp_validate_auth_cookie, the Woocommerce API doesn't ...
0
votes
1answer
13 views

Login cookies blocked after customizing hashing method

I get the following error when trying to login: Error: Cookies are blocked due to unexpected output. I customized the wordpress core functions wp_hash_password() and wp_check_password() to use SHA1 ...
0
votes
0answers
27 views

How to make conditional statement in WpBakery (formarly Visual Composer)

I am building a new membership website with WordPress using WpBakery (formally visual composer). I created a heading text which I linked to my login page, everything works fine but the problem is that ...
0
votes
0answers
23 views

Application to Website authentication

I'm new to Wordpress. I'm working on an application that takes in user information and checks it on my website. If the user exists, continue, else, Quit. I know this is possible with REST api but use ...
1
vote
0answers
11 views

how to oauth1 Wp plug-in revoke/reset.?

Am using this plugin to gives access to a app-backend dashboard for android/iOS apps. I authorized it and every thing was fine but apps were not working so for troubleshooting I generated another ...
0
votes
0answers
24 views

Blacklisting jwt after logout in wordpress

I need to blacklist jwt after logout. Does anyone implemented it in in wordpress and could share his approach? What I’ve thought of is storing blacklisted user jwt in user meta (value and expiration ...
0
votes
1answer
97 views

wp_nonce vs jwt

I’ve recently added jwt authentication to my website because frontend of my site is completely decoupled from backend. What I haven’t thought of is that I could use wp_nonce instead of jwt - create ...
0
votes
2answers
25 views

Force REST API Authentication for each request method

WordPress end points default rules, GET ----> PUBLIC POST, PUT, DELETE ----> AUTH How can I force authentication the WordPress REST API GET method requests?
0
votes
0answers
10 views

Create a Middleware that intercepts and modifies incoming api requests

I'm trying to create a firebase rest api social login plugin, but do not want the headache of managing multiple tokens (social and Wordpress) one, so I thought that I can intercept incoming requests ...
1
vote
1answer
59 views

SSO autologin Wordpress + Ajax

That one keeps me awake at night. The problem is that the user is properly logging in, but AFTER page refresh and should be immediately logged in without page reload. Need a fresh eyes to look at it. ...
0
votes
0answers
24 views

Logging in directly without a password (not via OTP)

I'm developing a website there the users are going to have access to their own data. I'm gonna use a specific authenticator called BankID which is widely used in Sweden, a kind of extern authenticator ...
1
vote
1answer
34 views

how to send Ajax request in wordpress backend

On the fronted the wp_localize_script seems to be working as when I view the source I can see the nonce. wp_localize_script('scripts', 'myAjax', array( 'root_url' => get_site_url(), '...
0
votes
0answers
22 views

How can I store a JWT generated by wordpress on localstorage?

I am a complete noob in Wordpress, I don't work with it and I never used it in a project before, but I am a full stack developer and just got assigned a task in my company to migrate part of a client'...
0
votes
1answer
56 views

register/login api

I have been looking all over google and all I can find is fairly old plugins that appear outdated in assisting with an API registration/login. Basically, I have a mobile app that needs to get data ...
1
vote
1answer
35 views

How do I get WordPress login to ignore the password input if a particular username is used?

I am trying to build a login where users with an account number as their username can login without a password or email. When the user clicks login, if the username that has been input exists in the ...
0
votes
0answers
50 views

Use WP cookie to authentificate user on an external app

Is it possible to authentificate a logged in WP user by it's wp auth cookie from an external app (simple JS webapp on a different domain)? The setup is: My webapp is on domain.com/generator/ The ...
0
votes
0answers
43 views

How to post frontend login form to a different authentication script from wp-login?

I would like to separate my front-end login from back-end login, but the front-end login will use oAuth-based third-party authentication whereas the back-end will continue to use the WordPress ...
0
votes
0answers
59 views

External authentication for a single page

I have looked through the previously asked questions regarding external authentication for WordPress, but I haven't been able to really get to an answer or a combination of answers that suit the ...
1
vote
0answers
30 views

Problem with getting RSS because of authentication

Im am trying to get the rss feed from a wordpress website that someone else has built. But I get stuck in authentication problems, and i am not able to find the right solution. When I put http://...
0
votes
2answers
65 views

check the first login for specific roles

Based on this answer i created a small functionality for users that are logging in for the first 3 times to make some elements classes use css animation. What i am trying to do is to adjust this code ...
0
votes
1answer
54 views

What am is missing? (API CORS)

I created a plug-in that retrieves data from an api(at least tries to!). This is the code of the function. function call_back(){ $apiKey = 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'; $response = ...
1
vote
0answers
38 views

Authentication with the Rest API when using an External Application

Good day! I'm new to rest api. My task: to make authorization and management of user meta-information on WordPress. More specifically: I write games in html5 (in fact, this is a Java script), and I ...
1
vote
0answers
103 views

How to force JWT auth for default GET endpoints of Wordpress rest api?

The default GET endpoints (for e.g. http://scintec.net/wp-json/wp/v2/posts/) of the Wordpress Rest api are public and can be accessed by anyone. I am currently interacting with a Wordpress Rest api ...
0
votes
0answers
147 views

How to authenticate using JWT by ajax?

As WordPress REST API Doc said, the authentication by for REST API can be done by JWT (https://developer.wordpress.org/rest-api/using-the-rest-api/authentication/) The recommended plugin in the ...
0
votes
0answers
172 views

Social login authentication via wordpress rest api

I am building a Vue app powered by Wordpress Rest API. After stumbling upon many options for authentication, I chose JWT authentication. However, i still haven't been able to find the solution for ...
0
votes
1answer
121 views

Authenticate current user to REST API

I have a Plugin similiar to woocommerce which is providing me an REST API Endpoint for getting some user specific data. When I try to access the API via Postman, i get an 401 - Not Authorized Error. ...
0
votes
1answer
36 views

Can I “protect” a page with a form asking for an email address?

I am developing a viewing room for an art gallery. Viewing rooms are pages with content that can only be seen by visitors if they provide their email address to add them to a newsletter. Something ...
0
votes
1answer
120 views

prevent anonymous access to Wordpress site (non-admin site)

I'm using WP to build a help/training portal for a commercial software product (Product X). We'd like to restrict access to this new WP site to only authenticated users of Product X as it contains ...
3
votes
1answer
1k views

How to build a plugin that supports authenticated POST requests to the REST API from external servers?

One of the main purposes of an API is to allow the integration of different services/systems. Let's consider that the WordPress REST API can have both public and protected endpoints, where public ...
0
votes
0answers
21 views

Custom user roles are unable to login

I have created custom user roles 'teacher' and 'student' using members plugin. But they are unable to log in using wp_signon but the admin and other roles are able to log in. I tried using my custom ...
0
votes
0answers
33 views

Using Wordpress login for a non word-press website

If I have a website on Wordpress say A, now I am making another website using React, say B (non-wordpress) We would have most of the users who are already on A, and some new ones, who might come ...
2
votes
1answer
1k views

Can't GET draft posts via REST API from headless frontend

I have a headless install of Wordpress on v5.4.0. The frontend can't GET any post that is in draft status, though when accessing the API url directly the data is returned without an issue. I'm ...
0
votes
1answer
27 views

Open authenticed Wordpress page from mobile app

I have mobile app that uses Worpdress JWT Token Plugin API to login. It uses WP users to authenticate to the app. The token is used for other WP API calls. Now I need to open up authenticated page ...
0
votes
2answers
835 views

Changing auth_redirect() page

I understand that the auth_redirect() checks if a user is logged in, if not it redirects them to the login page then come back to the previous page on success. I need that functionality on my website ...
1
vote
1answer
89 views

WP REST API GET Requests require authentication

Is there a way to require authentication for WP REST API GET Requests? The people I was researching always added a command if the is_user_logged_in(). But it closes these external queries altogether. ...
0
votes
1answer
100 views

Prevent redirect to wp-login.php

So I have made a separate login page for my Wordpress site. When I log in I just go to the home page like how I want it to. But when I click forgot password and fill in my mail it redirects to wp-...
0
votes
0answers
19 views

The same session information for peer users on two different WordPress servers

The MultiSite feature of WordPress is very nice. But for different WordPress installations on different servers, I need something like this. When a user logs on site (A), if the same user has a ...
1
vote
0answers
632 views

How to use Azure AD for authentication?

What is the best method to authenticate users against Azure AD when trying to access WP? Doing some search I have come across sites like: https://wordpress.org/plugins/sso-with-azure-ad/ . https://...
0
votes
1answer
32 views

Access to customer profile with pin code

I am trying to achieve the following Customer has their profile page and can edit it etc I would like anyone with the URL to view a customers profile details by entering a pin code (prompted) after ...
3
votes
1answer
1k views

WordPress custom authentication implementation

I created a plugin to allow my website to have its own login functionality. My project has a new requirement which is to log in to the user with my own authentication method and not the one provided ...

1
2 3 4 5 6