The answer is most likely XML-RPC which is used to communicate with the mobile wordpress apps and is always on in newer versions. If you don’t use mobile apps to admin your WP you can use my plugin – http://wordpress.org/plugins/control-xml-rpc-publishing/ to disable it.
Basically, they’re hashing salts. They’re used to make the results of hashing much less predictable. See https://en.wikipedia.org/wiki/Salt_(cryptography) for info on salts. AUTH is used for the /wp-admin authentication cookie, SECURE_AUTH is for the same when using SSL, LOGGED_IN is used for identification to the “front-end” of the site. NONCE is used for the nonces that … Read more
After some fiddling and sparring with @t-todua I found the issue: With the Fetch API fetch call you must manually set to send cookies with a request. After setting the credentials option properly the cookies were sent and the AJAX endpoint recognized the current user. So the JS becomes: var msg = ”; // I’m … Read more
Easiest Way to Authenticate WP Users Using an External DB?
I’m currently working on a plugin to do this on a large scale, since I have multiple sites that I want to sync; but I don’t mind sharing the info with you. I understood [from what you said] that the user’s credentials have already been verified on site2 – so there’s no need to use … Read more
Authenticated request to WP REST API V2 returning 403 error on /users/me [closed]
Authenticate with a Rails app?
Use WordPress with a custom OAuth2 provider
Note that you’re not adding any filter callback with: apply_filters( ‘auth_cookie_expiration’, $expiration ); Instead use: add_filter( ‘auth_cookie_expiration’, $callback, 10, 3 ); where $callback is the appropriate filter callback that modifies the expiration. Here’s an example add_filter( ‘auth_cookie_expiration’, function( $length, $user_id, $remember ) { return $length; // adjust this to your needs. }, 10, 3 ); … Read more
How to extend expiry time of jwt wordpress token?