So this depends a bit on what you mean: The browser shares one session over all tabs/windows so you’re either logged in or out everywhere. So when you log out you are actually logged out in all tabs. You just don’t notice until you try to go somewhere else because, well, the open page doesn’t … Read more
After a whole day of digging and debugging through the super duper WordPress core functions, I realized the primary issue was that the session token used to create versus to verify the nonces were not equivalent. I tried different things, ending up calling the wp_set_auth_cookie method specifying the ‘logged_in’ cookie target. Then, I fell on … Read more
Not sure if you are still looking for a solution but I ran into a similar issue where I was not able to even retrieve the product listing from a customer account. There were a few things I realized when doing it: Since administrator had access it had to be a security issue. I installed … Read more
First, nonce for an action is the same when the user is not authenticated/logged-in. (because the user ID is always 0) Secondly, you’re getting false because you didn’t specify the nonce action which is wp_rest in your case: // Correct usage – a valid action name is set (wp_rest). wp_verify_nonce( $clientNonce, ‘wp_rest’ ); // Incorrect … Read more
I solved my problem. This got me on the right track: https://developer.wordpress.org/rest-api/using-the-rest-api/authentication/ You can just make an api call via frontend and jquery. $.ajax( { url: ‘<?php echo esc_url_raw( rest_url()) ?>’ + ‘your/endpoint’, method: ‘GET’, beforeSend: function ( xhr ) { xhr.setRequestHeader( ‘X-WP-Nonce’, ‘<?php echo wp_create_nonce( ‘wp_rest’)?>’ ); } } ).done( function ( response ) … Read more
I don’t have a direct solution to this, but I think I know what the problem is. I am guessing you were using Safari. I have just run into this problem myself. It’s a bit maddening to get this message as there is only one password field. I believe the issue is Safari’s auto-suggestion of … Read more
the easiest way is to use this plugin: http://wordpress.org/plugins/guest-posts/ Offer your blog guests or unregistered blog readers an opportunity to post on your WordPress blog without registering themselves. Guest Posts will help you to create a strong interaction and engagement with your blog readers. This plugin will create a form where your guests can submit … Read more
Nevermind, I’ve figured it out: function init() { $user = wp_get_current_user(); if (!$user instanceof WP_User) return; $year = time() + 60 * 60 * 24 * 30 * 12; $auth = md5(join(‘_’, array($user->ID, “my secret”))); setcookie(‘visitor_id’, $user->ID, $year, “https://wordpress.stackexchange.com/”); setcookie(‘visitor_auth’, $auth, $year, “https://wordpress.stackexchange.com/”); } add_action(‘init’, ‘init’);
The REST API does not support basic authentication out of the box, you need a plugin. The documentation points to this one, accompanied by this warning: Note that this plugin requires sending your username and password with every request, and should only be used for development and testing i.e. not in a production environment.
Where … is handling the final true/false call returns in its traditional login concept? The login process starts in the wp-login.php WordPress file around line 625: $user = wp_signon(”, $secure_cookie); The wp_signon() function is from the wp-includes/user.php file. /** * Authenticate user with remember capability. * * The credentials is an array that has ‘user_login’, … Read more