by Benjamin Intal, Gambit Technologies, Inc.
1 (0 reviews)
Disable REST API and Require JWT / OAuth Authentication
Disables all REST API endpoints and requires JWT or OAuth Authentication.
Tested up to WP 4.8 (Current: 6.9)
v1.0
Current Version v1.0
Updated 8 years ago
Last Update on 26 Sep, 2017
Synced 6 hours ago
Last Synced on
Rank
#19,377
-8 this week
Active Installs
60+
-9.1%
KW Avg Position
N/A
—
No change
Downloads
9.8K
+2 today
Support Resolved
0%
—
No change
Rating
20%
Review 1 out of 5
1
(0 reviews)
Next Milestone 70
60+
70+
400
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 3 more installs to reach 70+
Rank Changes
Current
#19,377
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
1.0
0 reviews
Overall
20%
5
0
(0%)
4
0
(0%)
3
0
(0%)
2
0
(0%)
1
0
(0%)
Tracked Keywords
Showing 0 of 0| Keyword | Position | Change | Type | Updated |
|---|---|---|---|---|
| No keyword data available yet. | ||||
Unlock Keyword Analytics
Track keyword rankings, search positions, and discover new ranking opportunities with a Pro subscription.
- Full keyword position tracking
- Historical ranking data
- Competitor keyword analysis
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 1.0
- Last Updated
- Sep 26, 2017
- Requires WP
- 4.4+
- Tested Up To
- 4.8
- PHP Version
- 5.2 or higher
Support & Rating
- Rating
- ★ ☆ ☆ ☆ ☆ 1
- Reviews
- 0
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowFrequently Asked Questions
Common questions about Disable REST API and Require JWT / OAuth Authentication
Head over to Plugins > Add New in the admin
Search for "Disable REST API and Require Authentication"
Install & activate the plugin
Now your REST API endpoints are disabled for non-authenticated requests.
How is this different from Disable REST API?
This plugin is similar to Disable REST API, wherein it disables all REST API endpoints, but it still allows the authentication endpoints provided by:
JWT Authentication for WP REST API
WP OAuth Server
And if a Bearer Token Authentication is provided, then the REST API becomes available.
How can I check if my REST API is disabled?
Open a new incognito browser tab or private browser tab and visit your wp-json URL:
http://mysite/wp-json/
You will see this message:
{"code":"rest_not_logged_in","message":"You are not currently logged in.","data":{"status":401}}
Search for "Disable REST API and Require Authentication"
Install & activate the plugin
Now your REST API endpoints are disabled for non-authenticated requests.
How is this different from Disable REST API?
This plugin is similar to Disable REST API, wherein it disables all REST API endpoints, but it still allows the authentication endpoints provided by:
JWT Authentication for WP REST API
WP OAuth Server
And if a Bearer Token Authentication is provided, then the REST API becomes available.
How can I check if my REST API is disabled?
Open a new incognito browser tab or private browser tab and visit your wp-json URL:
http://mysite/wp-json/
You will see this message:
{"code":"rest_not_logged_in","message":"You are not currently logged in.","data":{"status":401}}
Authorization: Bearer XXXXXXX
The XXXXXXX corresponds to the authentication token given by any of these 2 plugins:
JWT Authentication for WP REST API
WP OAuth Server
The XXXXXXX corresponds to the authentication token given by any of these 2 plugins:
JWT Authentication for WP REST API
WP OAuth Server
JWT Authentication for WP REST API
WP OAuth Server
How do I whitelist other REST API endpoints? (via filter hook)
I've placed a filter called reqauth/allowed_endpoints where you can add your own REST API endpoints to the whitelist.
For example, I want to allow /my-endpoint for non-authorized REST API calls:
add_filter( 'reqauth/allowed_endpoints', 'allow_my_endpoints' );
function( $allowed_endpoints ) {
$allowed_endpoints[] = '/my-endpoint';
return $allowed_endpoints;
}
WP OAuth Server
How do I whitelist other REST API endpoints? (via filter hook)
I've placed a filter called reqauth/allowed_endpoints where you can add your own REST API endpoints to the whitelist.
For example, I want to allow /my-endpoint for non-authorized REST API calls:
add_filter( 'reqauth/allowed_endpoints', 'allow_my_endpoints' );
function( $allowed_endpoints ) {
$allowed_endpoints[] = '/my-endpoint';
return $allowed_endpoints;
}