Hi everyone,
I desperately need help as I try to integrate Koalawriter into WordPress and it keeps showing this message:
401: {“code”:”incorrect_password”,”message”:”The provided password is an invalid application password.”,”data”:{“status”:401}}
Please help me @wfphil
Thank you so much.
]]>After enabling application password and adding a new password i am getting Application passwords are not available error .i deactivated and disabled still getting this error
]]>Following this:
Im getting this message: Error: WordPress API connection failed , api response : No permission.(rest_forbidden)
]]>Hi,
I am using an AWS Bitnami installation of wordpress.
When trying to set an Application Password for my users I get permission error
Login as wordpress Admin
Select a user and go to his/her profile.
Scroll down to Add New Application Passwords section.
Give a name and try to create the new Application Password.
It gives an error – “Sorry, you are not allowed to create application passwords for this user.”
I have tried suggestions on various forums for – Setting up API access to WordPress on AWS EC2 instance`
I have also raised this on https://community.bitnami.com/t/when-trying-to-set-application-password-for-a-user-it-gives-permission-issue/96803
[Moderator note: Please, No bumping].
]]>Please check Digital Forest for passwrod check
]]>I presume this would not be suitable for a multisite setup, to link with an external web app?
Would this need to be on a non-multisite to be suitable?
When activated on a multisite setup (single site or network active), it creates two repeating sections in the user profile page.
I am encountering an issue where The Events Calendar plugin is forcing user authentication during its initialization. The stack trace is as follows:
=> wp_validate_application_password() / .../wp-includes/class-wp-hook.php, line 287
=> apply_filters() / .../wp-includes/plugin.php, line 212
=> apply_filters() / .../wp-includes/user.php, line 3005
=> _wp_get_current_user() / .../wp-includes/pluggable.php, line 70
=> wp_get_current_user() / .../wp-includes/pluggable.php, line 2198
=> wp_create_nonce() / .../wp-content/plugins/the-events-calendar/common/src/Tribe/Admin/Help_Page.php, line 55
=> register_assets() / .../wp-content/plugins/the-events-calendar/common/src/Tribe/Main.php, line 264
=> load_assets() / .../wp-includes/class-wp-hook.php, line 287
=> apply_filters() / .../wp-includes/class-wp-hook.php, line 311
=> do_action() / .../wp-includes/plugin.php, line 484
=> do_action() / .../wp-content/plugins/the-events-calendar/common/src/Tribe/Main.php, line 107
=> plugins_loaded() / .../wp-includes/class-wp-hook.php, line 287
=> apply_filters() / .../wp-includes/class-wp-hook.php, line 311
=> do_action() / .../wp-includes/plugin.php, line 484
=> do_action() / .../wp-settings.php, line 420
=> require_once() / .../wp-config.php, line 133
=> require_once() / .../wp-load.php, line 37
=> require_once() / .../wp-blog-header.php, line 13
=> require() / .../index.php, line 17The register_assets() function calls wp_create_nonce(), which calls wp_get_current_user(), which triggers user authentication. Because this is happening at plugin init time, functions.php has not been loaded and therefore filters like rest_url_prefix are not in place yet. So it does not seem like REST_REQUEST can be properly set.
My question is whether The Events Calendar plugin is doing something wrong, or if there is something else that I am missing here.
Thanks for any insight and advice.
]]>Hello,
I’m hoping that someone here has dealt with this issue before, since podbean tech has said that it’s a www.ads-software.com problem. I’m trying to connect my podcast site to podbean so that new posts will auto-populate there. I’ve installed the “Application Passwords” plugin to WP, and followed podbean’s steps to connect, but am getting the error message below when I do.
“Error: WordPress API connection failed , api response : Your access to this service has been limited. Please check your WordPress Firewall settings. Original message :40 Going On 14(1)”
Things about my WP site that may be relevant.
– Currently redirected to PB’s page for us, did this *after* the error so it’s not something that would affect it.
– I have Jetpack installed
Thank you for any help!
]]>We have been using the Application Passwords plugin for 7 months with no problem. After updating to WP 5.6 I followed the recommendation to deactivate the Application Passwords plugin. This causes the rest connection to fail with a “You are not currently logged in” error. I tried revoking the password and creating a new one but the problem persists.
If I activate the Application Passwords plugin the problem goes away – the rest connection works.
]]>Was this plugin integrated in the recent WordPress 5.6 update?
]]>Hello George Stephanis, this plugin is very useful to me, I want to translate this plugin into Simplified Chinese, when will your plugin support translation?
]]>Unfortunately the translation of the plugin is not possible. I thought I’d write that here in case nobody noticed.
If the translation should be possible soon, I would let the Polyglot-Team know and send the German translation later.
]]>I need to give my clients the option to create each one, an API access password, but they don’t have access to the WP panel, how can I do this in the frontend?
]]>there is something confusion of my different website pages that has multiple icons so I want to put in this plugin. Guide about this.
]]>Hi.
We have an issue when we try to edit user profile in bbpress: https://d.pr/i/55aXk1
We only need that Application password run on backend.
Thanks.
]]>I’m seeing this Notice in my Dashboard:
Notice: register_rest_route was called incorrectly. The REST API route definition for 2fa/v1/test-basic-authorization-header is missing the required permission_callback argument. For REST API routes that are intended to be public, use __return_true as the permission callback. Please see Debugging in WordPress for more information. (This message was added in version 5.5.0.) in /var/www/wp-includes/functions.php on line 5225
Looks like it was introduced with the recent WP core 5.5 update:
]]>This message was added in version 5.5.0.
Do the passwords created with this plugin ever expire? If so, how do I find out when they expire?
Thanks!
]]>“Due to a potential server misconfiguration, it seems that HTTP Basic Authorization may not work for the REST API on this site: Authorization headers are not being sent to WordPress by the web server. You can learn more about this problem, and a possible solution, on our GitHub Wiki.”
Hello is it normal for this error to appear even after you have added the workaround in the htaccess file.
]]>Hello,
We’re using WordPress as a headless setup.
We have different urls for:
Site Address (URL) and WordPress Address (URL)
The issue is the site address is pointed offsite, we can’t create an application password since the data is being submitted to the site address instead to the WordPress Address.
Any workaround for this?
Thanks!
]]>Hi,
I’m trying to install the plugin and after attempting to activate I get the error:
Fatal error: Cannot declare class Application_Passwords, because the name is already in use in /webspace/siteapps/WordPress-181426/htdocs/wp-content/plugins/application-passwords/class.application-passwords.php on line 9
Wordpress v.5.4.2
Thanks in advance for any suggestions solutions you might share!
]]>Hi,
there is on plugin that we use, but your plugin is not playing nice with it ??
https://www.ads-software.com/plugins/wp-user-profiles/
Here is an error
Fatal error: Uncaught Error: Call to undefined function submit_button() in /home/wpdev/public_html/admin/wp-content/plugins/application-passwords/class.application-passwords.php:583 Stack trace: #0 /home/wpdev/public_html/admin/wp-includes/class-wp-hook.php(287): Application_Passwords::show_user_profile(Object(WP_User)) #1 /home/wpdev/public_html/admin/wp-includes/class-wp-hook.php(311): WP_Hook->apply_filters('', Array) #2 /home/wpdev/public_html/admin/wp-includes/plugin.php(478): WP_Hook->do_action(Array) #3 /home/wpdev/public_html/admin/wp-content/plugins/wp-user-profiles/wp-user-profiles/includes/common.php(459): do_action('show_user_profi...', Object(WP_User)) #4 /home/wpdev/public_html/admin/wp-includes/class-wp-hook.php(287): wp_user_profiles_has_profile_actions(false) #5 /home/wpdev/public_html/admin/wp-includes/plugin.php(206): WP_Hook->apply_filters(false, Array) #6 /home/wpdev/public_html/admin/wp-content/plugins/wp-user-profiles/wp-user-profiles/includes/sections.php(76): apply_filters('wp_user_profile...', fa in /home/wpdev/public_html/admin/wp-content/plugins/application-passwords/class.application-passwords.php on line 583
Hi,
This is the sensible way to authenticate for REST.
However, requests take a userid and not an email address. Email addresses have become a default standard for logons.
I don’t speak PHP but looking through the code and support forums it doesn’t look as it would be hard to add support.
Is there any interest?
Hi guys
Is it possible to limit an application’s scope to specific endpoints? Eg. if I wanted to allow an application API access to only one specific CPT.
Cheers
]]>We use Application Passwords on our WordPress site to bypass the two-factor Authentication and to have a more secure way to work with the REST APIs.
There is a forum (bbpress) section with users (WordPress users).
When authenticated the user can update their profile information using the update profile page which does seem to use the WordPress user update form.
The problem is that on this page, the Application Passwords section appears as well, and in fact it crashes the page with some server errors.
We would like to not display it there but just use the normal bbpress page instead.
It looks like with Application Passwords plugin enabled the Update profile form actually loads in the WordPress error page. See the screenshot : https://i.imgur.com/Z0Apwqd.png
]]>Hi, is it possible to automatically create the app password when creating a new user? via website or via api?
Thanks
Tom
]]>Hello!
I updated to 0.1.1 of Application Passwords and strange things happened with the subscriptions in MemberPress.
Here’s the flow I’ve got setup: ThriveCart ? Application Passwords ? MemberPress.
I’ve done some investigating and been in contact with both ThriveCart and MemberPress. However they cannot see anything unusual which is why I’m writing you.
There are two issues.
1. New customer or subscription renewal i ThriveCart send through Application Passwords to MemberPress but without the expiration date… Is this related to the AP plugin?
2. After updating to 0.1.1 there are 300+ “false” subscriptions showing up in MemberPress which we believe could be due to erroneous API calls? Not sure if this could be as a result of the updated plugin or not. What do you think?
I’m looking forward to hearing back from you.
Thanks for an overall great plugin.
/Greger
Application Passwords stopped working suddenly. Nothing happens when clicking on Add New, Revoke, Revoke all application passwords, except for Add New turning grey.
I have tried deactivating all other plug-ins. Please could you advise what else can be done?
Thank you.
]]>I’m trying to connect my Memberpress plugin with Thrivecart and am instructed to use Application Passwords to do so.
I am using this same configuration on two sites (Memberpress + Application Passwords + ThriveCart), one of which is hosted with Dreamhost, the other is hosted with Flywheel.
The site hosted on Flywheel has not been having any issues, but the site hosted with Dreamhost is having continual issues with this error message displaying again and again, despite Dreamhost making the adjustments needed to the htaccess file, as instructed by the plugin:
Due to a potential server misconfiguration, it seems that HTTP Basic Authorization may not work for the REST API on this site: Authorization headers are not being sent to WordPress by the web server. You can learn more about this problem, and a possible solution, on our GitHub Wiki.
After Dreamhost makes the changes to the htaccess file, the error message goes away and the connection works, but then the next day the error message returns and the connection breaks again.
This has happened four times.
Dreamhost said that this plugin seems to be reverting the changes to the .htaccess file.
What can be done about this?
Thanks in advance!
]]>The thought process behind this is to make an application with the ability to perform certain actions on my wordpress website. As such, I would like to restrict the access to these actions based off of hostname/ip address. I don’t see the option in the system to allow me to “whitelist”, like in hosts.allow to only allow certain ip addresses to perform these actions, which would allow me to further secure the system from potential abuse.
]]>I’m having the same issue another recent topic covered, but I have the latest version of the plugin and it is not resolved for me.
When I am trying to create an application password it just goes greyed out instead of popping up with the password. If I refresh I can see it has actioned the request, but obviously I have no way of seeing the password.
Delete and re-install did not work.
Thanks
]]>