Questions tagged [authentication]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
35 views

How to authenticate using JWT by ajax?

As WordPress REST API Doc said, the authentication by for REST API can be done by JWT (https://developer.wordpress.org/rest-api/using-the-rest-api/authentication/) The recommended plugin in the ...
0
votes
0answers
19 views

How to have private pages using CAS auth without requiring wordpress accounts?

I have a few sites that I am needing to find a way to make private pages where only people CAS authed can see them. I have been playing with Authorizer to handle the CAS authentication, and tying into ...
0
votes
0answers
16 views

Social login authentication via wordpress rest api

I am building a Vue app powered by Wordpress Rest API. After stumbling upon many options for authentication, I chose JWT authentication. However, i still haven't been able to find the solution for ...
0
votes
1answer
11 views

Authenticate current user to REST API

I have a Plugin similiar to woocommerce which is providing me an REST API Endpoint for getting some user specific data. When I try to access the API via Postman, i get an 401 - Not Authorized Error. ...
0
votes
1answer
21 views

Can I “protect” a page with a form asking for an email address?

I am developing a viewing room for an art gallery. Viewing rooms are pages with content that can only be seen by visitors if they provide their email address to add them to a newsletter. Something ...
0
votes
1answer
26 views

prevent anonymous access to Wordpress site (non-admin site)

I'm using WP to build a help/training portal for a commercial software product (Product X). We'd like to restrict access to this new WP site to only authenticated users of Product X as it contains ...
1
vote
1answer
45 views

How to build a plugin that supports authenticated POST requests to the REST API from external servers?

One of the main purposes of an API is to allow the integration of different services/systems. Let's consider that the WordPress REST API can have both public and protected endpoints, where public ...
0
votes
0answers
10 views

Authenticate Flask API with Wordpress

I have two websites, a Wordpress blog that hosts the majority of the content. I also have written an API with Flask. I would like to consume the API within Wordpress (a password-protected page), but I ...
0
votes
0answers
16 views

Custom user roles are unable to login

I have created custom user roles 'teacher' and 'student' using members plugin. But they are unable to log in using wp_signon but the admin and other roles are able to log in. I tried using my custom ...
0
votes
0answers
22 views

Using Wordpress login for a non word-press website

If I have a website on Wordpress say A, now I am making another website using React, say B (non-wordpress) We would have most of the users who are already on A, and some new ones, who might come ...
1
vote
1answer
143 views

Can't GET draft posts via REST API from headless frontend

I have a headless install of Wordpress on v5.4.0. The frontend can't GET any post that is in draft status, though when accessing the API url directly the data is returned without an issue. I'm ...
0
votes
1answer
19 views

Open authenticed Wordpress page from mobile app

I have mobile app that uses Worpdress JWT Token Plugin API to login. It uses WP users to authenticate to the app. The token is used for other WP API calls. Now I need to open up authenticated page ...
0
votes
0answers
12 views

Authenticate existing WP users from external application

Say I have built an application that runs on Android and iOS smartphones. Users will have to login to use it. For various reasons I'd like to register my users manually in an existing WP site. The app ...
0
votes
2answers
83 views

Changing auth_redirect() page

I understand that the auth_redirect() checks if a user is logged in, if not it redirects them to the login page then come back to the previous page on success. I need that functionality on my website ...
0
votes
0answers
20 views

WP REST API GET Requests require authentication

Is there a way to require authentication for WP REST API GET Requests? The people I was researching always added a command if the is_user_logged_in(). But it closes these external queries altogether. ...
0
votes
0answers
35 views

Programatic login user works partially

I try to login programatically. But this works only for some users. For other users it does not work. And I can't find a rule, why for some users the login works but for other users does not work. ...
0
votes
1answer
39 views

Prevent redirect to wp-login.php

So I have made a separate login page for my Wordpress site. When I log in I just go to the home page like how I want it to. But when I click forgot password and fill in my mail it redirects to wp-...
0
votes
0answers
14 views

Trying to wrap my head around the REST API, authentication, access tokens, and connecting an external app

Background and motivation I have been building an art education site for my mom for about a year and it's been a great learning experience / place to experiment. I use s2members to control access to ...
0
votes
0answers
21 views

Using Wordpress JWTs across Wordpress and ASP.NET Core App

So I'm curious as to what your thoughts are on the following: I've been building a Membership-based Web App, with an ASP.NET Core API handling my Windows-specific data processing back-end, and ...
0
votes
0answers
16 views

What is the benefit of logout using an nonce?

I get the purpose of nonce in general, but It seems like this particular action would be safe without an nonce. What benefit does it bring?
0
votes
0answers
13 views

The same session information for peer users on two different WordPress servers

The MultiSite feature of WordPress is very nice. But for different WordPress installations on different servers, I need something like this. When a user logs on site (A), if the same user has a ...
0
votes
0answers
39 views

Problem with ajax login/logout and nonces

My current flow is as follows: I use wp_localize_script to generate a nonce which my javascript can use. I pass this nonce with my login and logout request. When I login I touch the dom by removing ...
1
vote
0answers
100 views

How to use Azure AD for authentication?

What is the best method to authenticate users against Azure AD when trying to access WP? Doing some search I have come across sites like: https://wordpress.org/plugins/sso-with-azure-ad/ . https://...
0
votes
1answer
22 views

Access to customer profile with pin code

I am trying to achieve the following Customer has their profile page and can edit it etc I would like anyone with the URL to view a customers profile details by entering a pin code (prompted) after ...
1
vote
1answer
117 views

WordPress custom authentication implementation

I created a plugin to allow my website to have its own login functionality. My project has a new requirement which is to log in to the user with my own authentication method and not the one provided ...
3
votes
0answers
100 views

How to authenticate custom API endpoint in WooCommerce

I have created custom API, which is working fine, but I am not able to authenticate it, it returns result without checking for keys I have created consumer key and secret key from admin. How to ...
3
votes
2answers
36 views

How to assign user a role if none is present when logging in

I currently have a front end part of a WP site that allows admins to create new users and assign then user roles from a drop down - that works perfectly. However, I am using a plugin to also ...
1
vote
0answers
47 views

REST API: best place to set current user for JWT auth?

I've studied a couple of JWT auth plugins and notice the current user is being set in either the rest_api_init action: add_action( 'rest_api_init', function () { wp_set_current_user($token->...
2
votes
0answers
63 views

WordPress SSO with MemberPress

I've built an app using React. To authenticate users I am using a custom database with Auth0. My client is using https://memberpress.com/ to handle subscriptions for multiple things, the app, a forum,...
0
votes
0answers
28 views

How can I port class-phpass.php in Java?

I have a Java app that needs to check with a Wordpress MariaDB database for usernames and passwords. To do authentication into the WP framework, I need the password hashing for Wordpress; my app is ...
0
votes
0answers
149 views

Basic Auth .htaccess on wp-login, but allow logout from woocommerce

I use a .htaccess basic auth on my WC site to help prevent hackers accessing wp-login, which works well... except with WooCommerce if a logged in customer wants to logout from their account - upon ...
2
votes
1answer
181 views

Outgoing proxy connection problem

I'm trying to set up Wordpress on a server that requires a proxy connection to connect to the internet. Here's what I put in wp-config.php: /* Configure HTTP Proxy Server */ define('WP_PROXY_HOST', '...
2
votes
0answers
66 views

Limit REST API output to current logged in user that is also author of the content

https://developer.wordpress.org/rest-api/using-the-rest-api/frequently-asked-questions/#require-authentication-for-all-requests This requires authentication for all reque​sts. add_filter( '...
0
votes
0answers
21 views

How to logout remotely from other website

My requirement is something like: Let's say I have a client side app/website. There will be logout link and on clicking Logout link, it will also remotely logout wordpress site. I believe WP has a ...
0
votes
0answers
29 views

User login based on third party API

I am about to create a member site. I have all login credentials and user data in a external REST API. I want to use WordPress as the core to let the users login with their e-mail and password and ...
0
votes
1answer
51 views

Wordpress HTTP API NTLM Authentication

I was wondering if anyone has had to use NTLM authentication when using wp_remote_get? Trying to authenticate using Basic but that is returning the proxy error. When I use other authenticators for ...
0
votes
0answers
11 views

Is identity impersonation by cookie the go-to when trying to gain fast access in WordPress?

I'm trying to write a system that would allow me to access a WordPress website if the administrator chooses to share a link with me. That link, GPG-signed are his cookies, that I can then use to hit ...
1
vote
0answers
97 views

Create Session with JWT

I'm currently working on a shop like project that uses React as frontend and Wordpress with Woocommerce as a backend. To authenticate with the API I use the JWT Authentication for WP REST API, which ...
0
votes
0answers
13 views

htaccess authentication on a Wordpress/Woocommerce site = trouble for users

To begin with, you should know that I'm a copy and paste guy. When it comes to regular expressions, to me it means someone isn't smiling or angry looking; they just have a regular expression. So, I ...
0
votes
1answer
188 views

Rest API: wp_verify_nonce() fails despite receiving correct nonce value

I am generating a nonce to be used with client side fetch requests to the rest api: function prepAllAdminScripts() { wp_register_script( 'reactAdminArea' , PLUGIN_FOLDER_URL . 'shared/...
1
vote
1answer
49 views

current_user_can('administrator') returns false when I'm logged in

protected function isAdmin() : bool { $check = current_user_can('administrator'); return $check; // returns false as I am logged in as superadmin, refreshing the page for xdebug to run }...
1
vote
2answers
829 views

Authenticating with REST API

I have tried every which way to authenticate a post request. WP User Plugin - As per the docs, I've logged in at wp-json/wpuser/v1/user/login and received my token. I've passed that token as a header ...
1
vote
0answers
280 views

Blocks Rest API rest_cannot_delete

I'm trying to make a Postman call to the Wordpress API to delete a block. However, I keep getting a 403. This user is used to add and delete pages, tags, and posts just fine using the Application ...
0
votes
1answer
473 views

WooCommerce OAuth 1.0 + JWT authentication with JS/React

My scenario: JWT auth for user queries, which requires to customize .htaccess to recognize the Bearer Authorization header OAuth 1.0a for system queries, and because of .htaccess customization the ...
0
votes
1answer
736 views

Can we access the REST request parameters from within the permission_callback to enforce a 401 by returning false?

From what I have tried and tested so far, the getters and setters do not work inside the function permission_callback. The alternate way would be to throw a custom 401 from the callback itself. Is ...
2
votes
1answer
514 views

Rest API authentication issue when called from fetch request in bundle.js

I'm able to use the Rest API for calls that don't need auth, but I'm having an auth issue for the routes that require it. Here is part of a .php view template for an admin page: <div id="...
0
votes
1answer
212 views

Advanced Access Manager: RESTful endpoint to refresh token

I'm using Advanced Access Manager (AAM) plugin, and have been trying to refresh a still valid JWT token using the /aam/v1/refresh-jwt RESTful endpoing, however I’m getting the following error: “...
0
votes
0answers
40 views

get original request_url (before redirect)

I have a wordpress page and want to add basic auth to the page, except for the wordpress rest api! The main problem seems to be the redirect that happens in the standard .htaccess of wordpress. ...
0
votes
0answers
38 views

External requests to authenticate Wordpress Rest API, with a private secret key

I want to validate the Wordpress Rest API for requests from two different domains. Wordpress, Cookie or O-auth methods can be verified. But it is impossible to accept external requests with Cookie. ...
0
votes
0answers
47 views

how to add security questions on wp-registration page and validate it

I wanted to validate security questions which show's on wp-login page validation is if answers are blank user cant login and if user register with 2 questions and admin change no. question show on ...

1
2 3 4 5 6