parent pages page attributes fail to load in gutenberg editor

I have read these threads but they have slight different situations to my issue:

https://www.ads-software.com/support/topic/no-parent-page-option-in-gutenberg/
https://www.ads-software.com/support/topic/parent-pages-list-js-error/

I have WordPress 5.1.1

Like the other posts the issue is because the query to the wp rest api is failing. The query is to:

https://my-site.at/wp-json/wp/v2/pages?per_page=100&exclude=119&parent_exclude=119&orderby=menu_order&order=asc&context=edit&lang=en&_locale=user

But the response to this in the browser is:

{"code":"rest_forbidden_context","message":"Sorry, you are not allowed to edit posts in this post type.","data":{"status":401}}

There is a security plugin called Wordfence installed but I get the same response when it is activated or deactivated.

We are using a Shibboleth login plugin so I am wondering if there is some issue regarding using permissions with the rest api and the Shibboleth plugin.

Maybe the headers are useful to show:

REQUEST

Host: my-site.at
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:65.0) Gecko/20100101 Firefox/65.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ga=GA1.3.1817404781.1506499693; pll_language=en; cookie_notice_accepted=true; wp-settings-7=libraryContent%3Dbrowse%26mfold%3Do; wp-settings-time-7=1553005598; wordpress_test_cookie=WP+Cookie+check; wordpress_logged_in_f1a92a78119e1f29d09c2a4b62b5fd5a=jnorris%40ist.ac.at%7C1553238788%7CahQ4RHXGQQIynmV7O2ooqJ8EfarcDlVpYZ8jPDQs2S8%7C8c622bd1b709ce7201479972cd51452e7b70cd2d80c762dbcd90b0e9c156fd6a; wfwaf-authcookie-099440e2f12e8357f620e3b810785e64=7%7Cadministrator%7Cce6caac2a05afe4d0069740458d409a53b1a9748399ff0d97bc05e4cdaafd159
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

RESPONSE

HTTP/1.1 401 Unauthorized
Date: Wed, 20 Mar 2019 15:41:01 GMT
Server: Apache/2.4.25 (Debian)
X-Robots-Tag: noindex
Link: <https://my-site.at/wp-json/>; rel="https://api.w.org/"
X-Content-Type-Options: nosniff
Access-Control-Expose-Headers: X-WP-Total, X-WP-TotalPages
Access-Control-Allow-Headers: Authorization, Content-Type
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Strict-Transport-Security: max-age=15768000
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/json; charset=UTF-8

Does anybody have any ideas why this could be happening?

• This topic was modified 5 years, 8 months ago by jonathannorris.