Block the ability to discover WordPress usernames from rest API

  • Resolved ale5000

    (@ale5000)


    7 years, 1 month ago

    Hi,
    the option to “Block the ability to discover WordPress usernames based on author IDs” doesn’t block the corresponding rest API (example.com/wp-json/wp/v2/users).

    It would be nice if it could block users discovery without disable the anonymous rest API completely.

    • This topic was modified 7 years, 1 month ago by ale5000.
Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author Paul

    (@paultgoodchild)

    Please check under the lockdown module – there is an option for this.

    Thread Starter ale5000

    (@ale5000)

    @paultgoodchild: I would like to leave the anonymous rest API enabled and block only the users discovery through anonymous rest API.

    The option only disable the anonymous rest API completely or I’m missing something?

    Plugin Author Paul

    (@paultgoodchild)

    Sorry, this isn’t currently an option..

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Block the ability to discover WordPress usernames from rest API’ is closed to new replies.