Create Session with JWT
Create Session with JWT
authentication
Limit REST API output to current logged in user that is also author of the content
Limit REST API output to current logged in user that is also author of the content
WordPress SSO with MemberPress
WordPress SSO with MemberPress
Registered but Anonymous comments
if you want the comments anonymous to the site’s visitors, you could handle this in your comments template by simply not outputting any identifying information. display a name derived from their id, and only show the nickname if they enter one.
Is it possible a one click user registration with Facebook or Twitter (or other Social Networks)?
There is a plugin ‘Social Login for WordPress’ which serves the functions you are looking for. This plugin not only allows users to log in but also creates users on your website and auto-fill various fields in registration form. The plugin is FREE but there are white label and customized solutions available from LoginRadius.
WP-API and Basic Auth returning 403 on POST but not GET
I’ve met the same issue. …the recommended Basic Auth… I found that the problem is in the Basic Auth plugin. WP-API guys recommend using their own plugin and this solution works for me. Deactivate all activated basic auth plugins in your WordPress dashboard On the machine your WordPress is running go to the plugin folder … Read more
How to implement Google reCaptcha without installing a plugin?
you can use this function i think it works properly. add_filter( ‘wp_authenticate_user’, ‘verify_recaptcha_on_login’, 10, 3 ); function verify_recaptcha_on_login($user, $password) { $secretkey = “your secret key”; if (isset($_POST[‘g-recaptcha-response’])) { $response = wp_remote_get( ‘https://www.google.com/recaptcha/api/siteverify?secret=”.$secretkey.”&response=” . $_POST[“g-recaptcha-response’] ); $response = json_decode($response[‘body’], true); if (true == $response[‘success’]) { return $user; } else { // FIXME: This one fires if … Read more
Outgoing proxy connection problem
Not sure if this helps, but you can try.. So WordPress’ default HTTP transport is using cURL, and the HTTP class sets the proxy authorization method to CURLAUTH_ANY (see source), which might explain why the Proxy-Authorization: Basic xxxxx… header is missing from the request. And there’s a hook you can try to change the proxy … Read more
Can’t GET draft posts via REST API from headless frontend
Ok, so technically I didn’t solve the issue that prevented me from accessing posts in draft status from an external domain where the frontend is hosted using only nonce values. My guess is that the logged_in cookie was not set/could not be read on the frontend side to verify the nonce value during an external … Read more
Restricting access to content
The easiest way is to use if ( current_user_can( ‘capability’ ) ) // do stuff. You’ll find more about capabilities in the codex. You can also inspect the data some user has attached with normal var_dump() and else. I also got a pretty old plugin for that. But I’m not sure if it still works … Read more