Limit all endpoints for not logged in users

Here’s a snippet which hooks in a bit earlier, and prevents any REST requests if the user is logged out: https://gist.github.com/danielbachhuber/8f92af4c6a8db784771c

Thank you for the snippet!
I was looking axactly for something like this for “secure” our new CRM entirely based on WP and WP-API! ??

As I understand this hook is only suitable for in-browser authentication. Or it also works using Basic or Oauth authentication?

Yes, it works for all forms of REST authentication.

In my wp site I installed and activated JSON Basic Authentication.
Then I try to make request from third-party site:

$headers = array(
‘Authorization’ => ‘Basic ‘ . base64_encode( ‘login’ . ‘:’ . ‘password’ )
);
$url = ‘https://mysite.com/wp-json/wp/v2/posts’;

$curl = curl_init();
curl_setopt($curl, CURLOPT_URL, $url);
curl_setopt($curl, CURLOPT_HTTPHEADER, $headers);
curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
$response = curl_exec($curl);
echo $response;

In response I receive
{“code”:”restx_logged_out”,”message”:”Sorry, you must be logged in to make a request.”,”data”:{“status”:401}}

So, what’s wrong?