How to get/generate this WP_Error Object on my own, to return back? $error = new WP_Error; It is fairly well documented in the Codex. Once you instantiate the object there are methods for adding errors and for retrieving them, and functions like is_wp_error to check a variable to see if it is an error object … Read more
As far as the WordPress part is concerned, you’ll need to write a plugin which creates a widget or otherwise inserts a link onto your WordPress site. The following assumes you are familiar with plugin development. Generate the link by using a wp_nonce_url to help ensure the WordPress user is the one who clicked the … Read more
Here is the function to redirect non-users to login page. function redirect_user() { if ( ! is_user_logged_in() && ! is_page( ‘login’ ) ) { $return_url = esc_url( home_url( ‘/login/’ ) ); wp_redirect( $return_url ); exit; } } add_action( ‘template_redirect’, ‘redirect_user’ );
You can not and probably should not. The proper full name of that setting should have been “remember me on this browser (for 14 days)”. The point is that it is not even a user based settings and it can have different values on the same computer with different browser sessions. In addition since it … Read more
So this depends a bit on what you mean: The browser shares one session over all tabs/windows so you’re either logged in or out everywhere. So when you log out you are actually logged out in all tabs. You just don’t notice until you try to go somewhere else because, well, the open page doesn’t … Read more
After a whole day of digging and debugging through the super duper WordPress core functions, I realized the primary issue was that the session token used to create versus to verify the nonces were not equivalent. I tried different things, ending up calling the wp_set_auth_cookie method specifying the ‘logged_in’ cookie target. Then, I fell on … Read more
Not sure if you are still looking for a solution but I ran into a similar issue where I was not able to even retrieve the product listing from a customer account. There were a few things I realized when doing it: Since administrator had access it had to be a security issue. I installed … Read more
First, nonce for an action is the same when the user is not authenticated/logged-in. (because the user ID is always 0) Secondly, you’re getting false because you didn’t specify the nonce action which is wp_rest in your case: // Correct usage – a valid action name is set (wp_rest). wp_verify_nonce( $clientNonce, ‘wp_rest’ ); // Incorrect … Read more
I solved my problem. This got me on the right track: https://developer.wordpress.org/rest-api/using-the-rest-api/authentication/ You can just make an api call via frontend and jquery. $.ajax( { url: ‘<?php echo esc_url_raw( rest_url()) ?>’ + ‘your/endpoint’, method: ‘GET’, beforeSend: function ( xhr ) { xhr.setRequestHeader( ‘X-WP-Nonce’, ‘<?php echo wp_create_nonce( ‘wp_rest’)?>’ ); } } ).done( function ( response ) … Read more
I don’t have a direct solution to this, but I think I know what the problem is. I am guessing you were using Safari. I have just run into this problem myself. It’s a bit maddening to get this message as there is only one password field. I believe the issue is Safari’s auto-suggestion of … Read more