Questions tagged [authentication]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
5 views

Upload Image Remotely from Rest API using JWT Authorization INVALID_AUTHORIZATION_HEADER_TOKEN_TYPE

Trying to upload images into my media gallery programatically from my local machine to webserver. Using this function here to get the JWT token along with the WordPress REST API Authentication plugin ...
0
votes
0answers
11 views

External authentication for a single page

I have looked through the previously asked questions regarding external authentication for WordPress, but I haven't been able to really get to an answer or a combination of answers that suit the ...
1
vote
0answers
22 views

Problem with getting RSS because of authentication

Im am trying to get the rss feed from a wordpress website that someone else has built. But I get stuck in authentication problems, and i am not able to find the right solution. When I put http://...
0
votes
2answers
30 views

check the first login for specific roles

Based on this answer i created a small functionality for users that are logging in for the first 3 times to make some elements classes use css animation. What i am trying to do is to adjust this code ...
0
votes
1answer
24 views

What am is missing? (API CORS)

I created a plug-in that retrieves data from an api(at least tries to!). This is the code of the function. function call_back(){ $apiKey = 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'; $response = ...
1
vote
0answers
16 views

Authentication with the Rest API when using an External Application

Good day! I'm new to rest api. My task: to make authorization and management of user meta-information on WordPress. More specifically: I write games in html5 (in fact, this is a Java script), and I ...
0
votes
0answers
10 views

What, if any, tools exist to establish SSO between WordPress and a MediaWiki?

I would like to have a MediaWiki on a directory within a WordPress installation. Are there any tools? I searched plugins and found no obvious candidate. If there are not existing solutions, how should ...
0
votes
0answers
32 views

How to force JWT auth for default GET endpoints of Wordpress rest api?

The default GET endpoints (for e.g. http://scintec.net/wp-json/wp/v2/posts/) of the Wordpress Rest api are public and can be accessed by anyone. I am currently interacting with a Wordpress Rest api ...
0
votes
0answers
57 views

How to authenticate using JWT by ajax?

As WordPress REST API Doc said, the authentication by for REST API can be done by JWT (https://developer.wordpress.org/rest-api/using-the-rest-api/authentication/) The recommended plugin in the ...
0
votes
0answers
22 views

How to have private pages using CAS auth without requiring wordpress accounts?

I have a few sites that I am needing to find a way to make private pages where only people CAS authed can see them. I have been playing with Authorizer to handle the CAS authentication, and tying into ...
0
votes
0answers
28 views

Social login authentication via wordpress rest api

I am building a Vue app powered by Wordpress Rest API. After stumbling upon many options for authentication, I chose JWT authentication. However, i still haven't been able to find the solution for ...
0
votes
1answer
17 views

Authenticate current user to REST API

I have a Plugin similiar to woocommerce which is providing me an REST API Endpoint for getting some user specific data. When I try to access the API via Postman, i get an 401 - Not Authorized Error. ...
0
votes
1answer
23 views

Can I “protect” a page with a form asking for an email address?

I am developing a viewing room for an art gallery. Viewing rooms are pages with content that can only be seen by visitors if they provide their email address to add them to a newsletter. Something ...
0
votes
1answer
38 views

prevent anonymous access to Wordpress site (non-admin site)

I'm using WP to build a help/training portal for a commercial software product (Product X). We'd like to restrict access to this new WP site to only authenticated users of Product X as it contains ...
1
vote
1answer
230 views

How to build a plugin that supports authenticated POST requests to the REST API from external servers?

One of the main purposes of an API is to allow the integration of different services/systems. Let's consider that the WordPress REST API can have both public and protected endpoints, where public ...
0
votes
0answers
28 views

Authenticate Flask API with Wordpress

I have two websites, a Wordpress blog that hosts the majority of the content. I also have written an API with Flask. I would like to consume the API within Wordpress (a password-protected page), but I ...
0
votes
0answers
18 views

Custom user roles are unable to login

I have created custom user roles 'teacher' and 'student' using members plugin. But they are unable to log in using wp_signon but the admin and other roles are able to log in. I tried using my custom ...
0
votes
0answers
26 views

Using Wordpress login for a non word-press website

If I have a website on Wordpress say A, now I am making another website using React, say B (non-wordpress) We would have most of the users who are already on A, and some new ones, who might come ...
2
votes
1answer
395 views

Can't GET draft posts via REST API from headless frontend

I have a headless install of Wordpress on v5.4.0. The frontend can't GET any post that is in draft status, though when accessing the API url directly the data is returned without an issue. I'm ...
0
votes
1answer
20 views

Open authenticed Wordpress page from mobile app

I have mobile app that uses Worpdress JWT Token Plugin API to login. It uses WP users to authenticate to the app. The token is used for other WP API calls. Now I need to open up authenticated page ...
0
votes
0answers
15 views

Authenticate existing WP users from external application

Say I have built an application that runs on Android and iOS smartphones. Users will have to login to use it. For various reasons I'd like to register my users manually in an existing WP site. The app ...
0
votes
2answers
263 views

Changing auth_redirect() page

I understand that the auth_redirect() checks if a user is logged in, if not it redirects them to the login page then come back to the previous page on success. I need that functionality on my website ...
0
votes
0answers
33 views

WP REST API GET Requests require authentication

Is there a way to require authentication for WP REST API GET Requests? The people I was researching always added a command if the is_user_logged_in(). But it closes these external queries altogether. ...
0
votes
0answers
37 views

Programatic login user works partially

I try to login programatically. But this works only for some users. For other users it does not work. And I can't find a rule, why for some users the login works but for other users does not work. ...
0
votes
1answer
50 views

Prevent redirect to wp-login.php

So I have made a separate login page for my Wordpress site. When I log in I just go to the home page like how I want it to. But when I click forgot password and fill in my mail it redirects to wp-...
0
votes
0answers
20 views

Trying to wrap my head around the REST API, authentication, access tokens, and connecting an external app

Background and motivation I have been building an art education site for my mom for about a year and it's been a great learning experience / place to experiment. I use s2members to control access to ...
0
votes
0answers
36 views

Using Wordpress JWTs across Wordpress and ASP.NET Core App

So I'm curious as to what your thoughts are on the following: I've been building a Membership-based Web App, with an ASP.NET Core API handling my Windows-specific data processing back-end, and ...
0
votes
0answers
17 views

What is the benefit of logout using an nonce?

I get the purpose of nonce in general, but It seems like this particular action would be safe without an nonce. What benefit does it bring?
0
votes
0answers
13 views

The same session information for peer users on two different WordPress servers

The MultiSite feature of WordPress is very nice. But for different WordPress installations on different servers, I need something like this. When a user logs on site (A), if the same user has a ...
0
votes
0answers
74 views

Problem with ajax login/logout and nonces

My current flow is as follows: I use wp_localize_script to generate a nonce which my javascript can use. I pass this nonce with my login and logout request. When I login I touch the dom by removing ...
1
vote
0answers
267 views

How to use Azure AD for authentication?

What is the best method to authenticate users against Azure AD when trying to access WP? Doing some search I have come across sites like: https://wordpress.org/plugins/sso-with-azure-ad/ . https://...
0
votes
1answer
26 views

Access to customer profile with pin code

I am trying to achieve the following Customer has their profile page and can edit it etc I would like anyone with the URL to view a customers profile details by entering a pin code (prompted) after ...
2
votes
1answer
422 views

WordPress custom authentication implementation

I created a plugin to allow my website to have its own login functionality. My project has a new requirement which is to log in to the user with my own authentication method and not the one provided ...
4
votes
1answer
237 views

How to authenticate custom API endpoint in WooCommerce

I have created custom API, which is working fine, but I am not able to authenticate it, it returns result without checking for keys I have created consumer key and secret key from admin. How to ...
3
votes
2answers
70 views

How to assign user a role if none is present when logging in

I currently have a front end part of a WP site that allows admins to create new users and assign then user roles from a drop down - that works perfectly. However, I am using a plugin to also ...
1
vote
0answers
67 views

REST API: best place to set current user for JWT auth?

I've studied a couple of JWT auth plugins and notice the current user is being set in either the rest_api_init action: add_action( 'rest_api_init', function () { wp_set_current_user($token->...
2
votes
0answers
109 views

WordPress SSO with MemberPress

I've built an app using React. To authenticate users I am using a custom database with Auth0. My client is using https://memberpress.com/ to handle subscriptions for multiple things, the app, a forum,...
0
votes
0answers
45 views

How can I port class-phpass.php in Java?

I have a Java app that needs to check with a Wordpress MariaDB database for usernames and passwords. To do authentication into the WP framework, I need the password hashing for Wordpress; my app is ...
0
votes
0answers
204 views

Basic Auth .htaccess on wp-login, but allow logout from woocommerce

I use a .htaccess basic auth on my WC site to help prevent hackers accessing wp-login, which works well... except with WooCommerce if a logged in customer wants to logout from their account - upon ...
2
votes
1answer
312 views

Outgoing proxy connection problem

I'm trying to set up Wordpress on a server that requires a proxy connection to connect to the internet. Here's what I put in wp-config.php: /* Configure HTTP Proxy Server */ define('WP_PROXY_HOST', '...
2
votes
0answers
70 views

Limit REST API output to current logged in user that is also author of the content

https://developer.wordpress.org/rest-api/using-the-rest-api/frequently-asked-questions/#require-authentication-for-all-requests This requires authentication for all reque​sts. add_filter( '...
0
votes
0answers
37 views

How to logout remotely from other website

My requirement is something like: Let's say I have a client side app/website. There will be logout link and on clicking Logout link, it will also remotely logout wordpress site. I believe WP has a ...
0
votes
0answers
33 views

User login based on third party API

I am about to create a member site. I have all login credentials and user data in a external REST API. I want to use WordPress as the core to let the users login with their e-mail and password and ...
0
votes
1answer
99 views

Wordpress HTTP API NTLM Authentication

I was wondering if anyone has had to use NTLM authentication when using wp_remote_get? Trying to authenticate using Basic but that is returning the proxy error. When I use other authenticators for ...
0
votes
0answers
11 views

Is identity impersonation by cookie the go-to when trying to gain fast access in WordPress?

I'm trying to write a system that would allow me to access a WordPress website if the administrator chooses to share a link with me. That link, GPG-signed are his cookies, that I can then use to hit ...
2
votes
0answers
142 views

Create Session with JWT

I'm currently working on a shop like project that uses React as frontend and Wordpress with Woocommerce as a backend. To authenticate with the API I use the JWT Authentication for WP REST API, which ...
0
votes
1answer
327 views

Rest API: wp_verify_nonce() fails despite receiving correct nonce value

I am generating a nonce to be used with client side fetch requests to the rest api: function prepAllAdminScripts() { wp_register_script( 'reactAdminArea' , PLUGIN_FOLDER_URL . 'shared/...
1
vote
1answer
110 views

current_user_can('administrator') returns false when I'm logged in

protected function isAdmin() : bool { $check = current_user_can('administrator'); return $check; // returns false as I am logged in as superadmin, refreshing the page for xdebug to run }...
1
vote
2answers
1k views

Authenticating with REST API

I have tried every which way to authenticate a post request. WP User Plugin - As per the docs, I've logged in at wp-json/wpuser/v1/user/login and received my token. I've passed that token as a header ...
1
vote
0answers
397 views

Blocks Rest API rest_cannot_delete

I'm trying to make a Postman call to the Wordpress API to delete a block. However, I keep getting a 403. This user is used to add and delete pages, tags, and posts just fine using the Application ...

1
2 3 4 5 6