Whiteliste requests with specific query parameters

Hi there,

we need help with how to whitelist requests with specific query parameters. Is there a way to do this?

The background: our fulfillment partner zenfulfillment.com does not receive data concerning order returns or exchanges in some cases. We have whitelisted their domain, but it seems this does not solve the problem. Their IT team advice us to whitelist requests with specific query parameters. They write:

“Whitelisting our domain has no effect since the requests are not made from our domain but from one of our syncing servers.

The most effective solution would be to whitelist any requests that contain the following query parameters:

consumer_key=xxxxxxxxx (changed for security reasons)
consumer_secret= xxxxxxxxx (changed for security reasons)

For example an authenticated request could look like this:

https://lindabra.com/wp-json/wc/v2/orders?consumer_key=xxxxxxxxx&consumer_secret= xxxxxxxxx

Allowing * any endpoint * request that includes both query parameters consumer_key & consumer_secret would effectively allow all our integration requests to pass through.”

Can someone help?

Rainer

The page I need help with: [log in to see the link]