Ivan Jeremic

@ipstenu You said who own ‘WordPress Pro’ then? Let me then ask you who owns WooCommerce? Correct Automattic, the beauty of plugins is they are plugins and same as WooCommerce, WordPress Pro can be owned by Automattic and because it is a Plugin it can be installed on any installation easy as that just like WooCommerce.

I did not say built OAuth into Core I said plugin which leaves it extendable. You guys choose to be ignorant all the time without knowing what is going on outside WP world, People stopped building blogs ages ago.

Everything stays Open Source all I said is have a WordPress PRO plugin which users can use.

@otto42 This is what I meant with nostalgic feelings will let this project fall behind sooner or later.

It’s not about contributing to the current docs, whole www.ads-software.com needs to be rebuilt from ground up. If anything will kill wordpress than nostalgic people.

Ok, I understand let’s keep everything how it is. But at least for authentication WordPress can become more modern, I mean we have 2021 and there is still no OAuth or 2FA in core or at least as a plugin made by WordPress for WordPress, I don’t want to rely on companies like MiniOrange for these things. When I look at WordPress I see just a bunch of missed business opportunities and mistakes automattic is doing. OAuth and all other modern auth methods should be in core or by the team made as plugin and also work for API Authentication. There is also the story with Post-Types and Meta Boxes, What ACF and CPTUI are doing should definitely be in the core for ages now, we need a UI for building CPT and Fields and this in core! If anyone is afraid to make someone mad just acquire them.

@bcworkz I don’t mean the block settings, I understand that the block settings are a good place to use WordPress components and I will use them there, what I mean is the Block JSX itself which is displayed on the frontend, do I really need there also to use the WP Components?

@jnashhawkins No sorry I don’t want to depend on plugins for something critical like Auth I want something like this from the core team.

Has WordPress REST API Authentication now wp-cors feature?

Thank you can’t wait for the Update.

wp-cors works with domains yes, but what if I have a Desktop Software like I have currently? I have no IP or Domain I can specify the users who use the Desktop Software need to login when opening it, so cors need to be handled automatically in this case. Or is there any better solution inside miniOrange you can sugguest me for using inside Desktop Software?

• This reply was modified 5 years ago by Ivan Jeremic.

I swiched back to JWT Authentication for WP REST API, beceuse with your plugin I had Cors issues in my applications.

If anyone has same problem like me this is the plugin you need to use to solve this problem. https://www.ads-software.com/plugins/wp-rest-api-authentication/

There is private content that nobody has to read except the one logged in. I don’t want someone to be able to read the content by simmply going to a browser and type /wp-json/wp/v2/mybooks

More technical people that have browser extansions for detecting cms don’t buy a service that is made with wordpress not all but a big part, I have done a few tests now.