What do you mean by “external users”? If you only want Users, that are logged into your website, to use the API Endpoint, you can filter the “rest_authentication_errors” like described here Add this to your plugin: add_filter( ‘rest_authentication_errors’, function( $result ) { if ( ! empty( $result ) ) { return $result; } if ( … Read more
How to make WordPress use authentication from Parent Site
Login after “Read More” then return to article
How to set up Shibboleth authentication for a MU site
Continuous Login Sessions For Super Admins Across Multi-Site Network of Sites
Login to wordpress by clicking a link and specifying usernaname and password in url
WordPress Multisite logout conflict
wordpress 3.9 remote token auth
Two factor authentication
What is best way to prevent access to Custom Post Types unless authenticated when the post type has an archive and is publicly queryable?