• Resolved bmcprocess

    (@bmcprocess)


    This plugin is GREAT. It returns all the information I need from my site, but I dont want everyone to have access to the data via the exposed endpoints. Is there a way to make it use a token or password to only allow authorised users access to the data?

    Thanks

Viewing 1 replies (of 1 total)
  • Plugin Contributor jpowersdev

    (@jpowersdev)

    Hi @bmcprocess,

    This is not a feature of our plugin, but there are other plugins that can provide that functionality. GET requests are by default open on the WordPress API. For example, if you go to any WordPress site (that doesn’t explicitly lock it down) and visit /wp-json/wp/v2/posts, you’ll see a JSON response with a list of posts.

    It looks like this plugin (https://www.ads-software.com/plugins/disable-json-api/) could be installed and used in tandem with our plugin. It seems to allow you to control which types of users have access.

    Let me know if that helps,
    Jon

Viewing 1 replies (of 1 total)
  • The topic ‘Secure REST endpoints’ is closed to new replies.