Questions tagged [authentication]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
0answers
15 views

Rest API authentication issue when called from fetch request in bundle.js

I'm able to use the Rest API for calls that don't need auth, but I'm having an auth issue for the routes that require it. Here is part of a .php view template for an admin page: <div id="...
0
votes
1answer
11 views

Advanced Access Manager: RESTful endpoint to refresh token

I'm using Advanced Access Manager (AAM) plugin, and have been trying to refresh a still valid JWT token using the /aam/v1/refresh-jwt RESTful endpoing, however I’m getting the following error: “...
0
votes
0answers
16 views

get original request_url (before redirect)

I have a wordpress page and want to add basic auth to the page, except for the wordpress rest api! The main problem seems to be the redirect that happens in the standard .htaccess of wordpress. ...
0
votes
0answers
12 views

Third Party Authorization Plugin for Wordpress [on hold]

I am trying to create a website that follows the format of TV Apps and cable providers were in order to access the content of my website, the user needs to be able to sign in with a third party auth. ...
0
votes
0answers
16 views

External requests to authenticate Wordpress Rest API, with a private secret key

I want to validate the Wordpress Rest API for requests from two different domains. Wordpress, Cookie or O-auth methods can be verified. But it is impossible to accept external requests with Cookie. ...
0
votes
0answers
17 views

how to add security questions on wp-registration page and validate it

I wanted to validate security questions which show's on wp-login page validation is if answers are blank user cant login and if user register with 2 questions and admin change no. question show on ...
0
votes
0answers
12 views

How can I secure my custom rest api endpoint or add under a already existing rest group

Creating a custom REST Endpoint I search a way to secure the route with JWT or integrate my endpoint under Woocommerce rest routes which already has an authentication logic. The perfect solution for ...
0
votes
1answer
16 views

How can I upload and password protect Javadocs in Wordpress?

I'm trying to host our software's Javadocs online behind a paywall. We tried to render the docs in Wordpress, which failed (obviously). My theory is that we could upload a folder directly to our root ...
0
votes
0answers
26 views

Troubleshooting logging into the backend (wp-admin)

I have a Wordpress website on a cloud plan at Siteground. I switched the website to WPML recently. Since then, my main user (the blog author) has been unable to log into the website backend (wp-admin) ...
0
votes
0answers
14 views

Network per-site authentication

Can I use WordPress multisite but have a per site users table, like this: https://core.trac.wordpress.org/ticket/15467 It seems I could use CUSTOM_USER_TABLE right? What would be the easiest way to ...
1
vote
0answers
10 views

Wordpress REST API “rest_authentication_errors” doesn't work external queries?

Wordpress REST API "rest_authentication_errors" doesn't work external queries? I was using following experimental codes for experimental purposes. add_filter('rest_authentication_errors', 'auth'); ...
0
votes
0answers
14 views

JWT Authorization Exposing Login Credentials?

I want to start using JWT to access an API endpoint that needs to be protected. There will be no logged in user, as this will be an HTTP call coming from a Vue frontend running on the same server. ...
2
votes
2answers
65 views

WordPress Rest API: How do we validate with our custom API key?

How we can verify "Cancel the header auth" the "endpoint" functions of WordPress with an API key that we produce. (Note: not a different endpoint, original endpoints) I have my own "Crypto" class/...
0
votes
0answers
20 views

Make authorization mandatory on custom routes

I'm setting up multiple custom api routes in my wordpress theme and I would like that to require a JWT token to access. So I have followed the steps in order to get the JWT Authentication for WP Rest ...
0
votes
0answers
16 views

Extend Cookie with auth_cookie_expiration not working

I was trying to extend the Login Cookie with the following Code function expiration_filter($seconds, $user_id, $remember){ //if "remember me" is checked; if ( $remember ) { //WP ...
0
votes
0answers
25 views

After upgrading to WP 5.1.1 sometimes I need to reauth infinitively

I have some blogs, and after upgrading to 5.1.1 I always have to reauth myself. If password/username is wrong, I got that error message but if I enter right data, the page simply reloads. So I go to: ...
0
votes
0answers
42 views

Authenticate my WordPress Plugin Client via OAuth2 “Authorization Code Grant”

I am about to create a WordPress Plugin with Client functionality. I basically want to post wordpress-data to a remote server using the servers REST-API (short overview: I want to simultaneously add ...
1
vote
1answer
579 views

How to Authenticate WP REST API with JWT Authentication using Fetch API

My goal is to send user comments with a POST request from a server-side Lambda function to my WordPress API. I'm using Gatsby and Netlify. When someone leaves a comment in the comment form of my ...
0
votes
0answers
54 views

auth error with react native and wordpress rest api jwt token

I am trying to user wordpress rest api with jwt token and react native but I have issues debugging with postman; jwt/token returns the token, and the user display, etc. jwt/token/validate returns ...
0
votes
0answers
328 views

get token using the 'WordPress REST API with JWT Authentication' plugin

I'm trying to build a Wordpress plugin that is an API which can be queried from remote websites. I want to secure it with JWT web tokens, so I did install the JWT Authentication for WP REST API ...
1
vote
0answers
30 views

How can I force the user to log in, even if they're already authenticated?

I am creating a link to a Wordpress page. In this scenario, multiple users may use the same machine and get confused about who is logged in, so every time they follow the link they must be forced to ...
0
votes
1answer
31 views

PHP: authenticate for a REST request?

I did create some custom endpoints for a plugin i'm working on, with the REST api. It works quite well, but now I would like to secure those requests : I don't want external users (EDIT: I mean remote ...
0
votes
0answers
13 views

Block unauthenticated users from downloading png (or other data) files

How can I block users from direct downloading image files ( if they are not authenticated)? I want to enable download just when user pass authentication header (JWT). Currently I have JWT enabled for ...
0
votes
0answers
29 views

Use Token-based Authentication in Contact Form 7 instead of using Basic auth

I am using a WordPress version of 5.0.3, I installed the Contact form 7 to API + Basic auth plugin for the purpose of passing the JSON data to our API. Can we have any support or ideas to implement ...
0
votes
1answer
103 views

Invalid key on activation and password reset

I am in a pickle now, about to release a Wordpress-based app and I can't get the registration complete because of the freaking password set/reset key is sometimes invalid. I say sometimes because ...
0
votes
0answers
136 views

How to extend expiry time of jwt wordpress token?

I am making Hybrid app with WordPress database in php, I am using JWT WordPress plugin to authenticate users. But token is expiring in almost 20 minutes, I am using following code to extend the expiry ...
1
vote
1answer
31 views

Authenticate a user for current request

Is there a way for a WordPress plugin to authenticate a user for the current request? My plan is to authenticate users via a HTTP header containing username and password. Then this information should ...
0
votes
1answer
209 views

JWT on Woocommerce cannot work with “Customer” role user

I developing mobile apps, that connect directly to woocommerce rest api. I use this plugin for authenticating, like registering, login, make an order, etc. So the issue come, when I register new user ...
0
votes
1answer
26 views

How to enforce authentication for all resources?

I want to host a personal journal with wordpress. I don't want to share it with 3rd parties but I want to be able to access it from anywhere with my admin credentials. There are several plugins ...
1
vote
1answer
27 views

Auth cookie value security risk?

A short question this time: How much of a security risk is it when an third party gets access to WordPress auth cookie? Can they for example simply copy the cookie and "be" logged in as the user who ...
0
votes
2answers
19 views

WP link for reset password is not received

I used my existing password but that did not work. So I asked for a new password. Your Email, with your link, has not been sent
0
votes
1answer
31 views

Disable emails for new user registration

I want to disable the default email that is send when user is registered. I am using this plugin for email verification User Verification By PickPlugins, which sends an email with confirmation link, ...
0
votes
0answers
16 views

How do I make WordPress use different database for passwords? [duplicate]

I have a website built with PHP and HTML I made a sub-directory and install WordPress on it. My problem is users should register twice on WordPress and on my php website. What I want is to make ...
0
votes
1answer
70 views

How can cookie/session authentication be used in wp-json fetch request?

I've written a /wp-json path like: add_action( 'rest_api_init', function () { register_rest_route( 'myplugin', 'foo', array( 'methods' => 'GET', 'callback' => function( $data ) { ...
0
votes
0answers
12 views

Using WooCommerce account to my other website

I'm is selling online trainings using WooCommerce store. When the client buys the item, he's given an unique key, which he can use to start new training on a dedicated training website (another ...
0
votes
1answer
87 views

Check for empty username or password on login

I'm building a custom login page for clients and wish to keep the wp-login page for site administrators. For checking for empty fields I'm using the code: function verify_user_pass($user, $username, ...
3
votes
0answers
259 views

WordPress REST API call generates nonce twice on every call

I'm trying to login a user via the REST API, and then retrieve the current user on subsequent requests. As per the documentation, in my plugin, I am creating and retrieving a nonce after a successful ...
0
votes
0answers
8 views

Wordpress external autentication

I have question about autentication. I have external aplication (with login form) for autentication users, it is not wordpress. Other apps use this application, it is SSO. Now I needed to change ...
3
votes
0answers
589 views

WordPress “Link has expired” error on updating posts

I'm maintaining a WordPress site on GoDaddy for a client and they started to get the "this link has expired error" when they saved a post. It does not happen when I upload a file. However, I am ...
0
votes
0answers
10 views

HTTP API: Request a page as authenticated user

Suppose i need to perform a HTTP request to a page inside my Wordpress itself, but i want it to be available only if actual user can manage options. It is basically a version of any page, with some ...
0
votes
0answers
29 views

Custom Login Integration not working in wordpress anymore

I have added a script in my functions.php file which checks a second custom database within the WordPress database when a member tries to login. This script was working correctly in the past and I ...
0
votes
1answer
617 views

Calling an API to do authentication / user login

I'm relatively new to wordpress and am working on a customized site. I have an API endpoint that I'd like to call to do authentication, because our users are going to have their credentials stored/...
0
votes
0answers
28 views

Add “edit” link to third-party application pages

I'm in the process migrating the WP theme to use a third-party client (JS web application). I'd like for people who are editing content to be able to easily click a link to go to edit the page. ...
0
votes
1answer
76 views

WordPress user Authentication

I am currently working on a plugin using WordPress. I created a register page that allow users to register, this information is then stored in custom database table called finusers. This is what I ...
0
votes
1answer
1k views

Rest API basic auth not working

I've setup a basic auth for quick testing a site. $headers = array ( 'Authorization' => 'Basic ' . base64_encode( 'admin' . ':' . 'Str0nGP@$$w0rd' ), ); $url = rest_url( 'wp/v2/posts/1' ); $...
1
vote
0answers
69 views

Wordpress + REST API v2 and private pages Load by slug

Im creating WP theme based on VUE, anyway I load pages based on slug - no by ID. I use base X-WP-Nonce header authentication, it working well with revision etc. So now I have a private page and my ...
0
votes
1answer
418 views

Possibility to login without password

I'm creating a webapplication for users that are racing in a rally. I have the following data from the different racers: Username Password Mobile phone Email The problem is they never know their ...
0
votes
0answers
631 views

Why does permission_callback not ovverride authentication?

I created a custome REST API endpoint for my WP instance, and upon reading the docs, they say that if you return true for the permission_callback function, that this will bypass the authentication ...
1
vote
1answer
57 views

implement authentication and authorization to user

i want to get authentication to my website like to be the page with name and password as a file reference to log in as visitor with detected authorization to each person want to visit the website how ...
0
votes
1answer
30 views

is_user_logged_in() returns different values on different pages

On most of my site, is_user_logged_in() works perfectly. On two pages with similar custom templates set, this incorrectly returns FALSE. The user can navigate back to other pages where it works ...