The best way to authenticate an app with the REST API would be to use OAuth. There’s a good section on OAuth Authentication the REST API documentation site. You will need to install the OAuth1 plugin on your site as well. There are some gotchas with implementing the OAuth plugin on WordPress. I found this … Read more
Try hooking in as soon as the user is created or updated. <?php function wpse_250785_sync_user_login_with_email($user_id) { $user = new WP_User($user_id); if ($user->user_login != $user->user_email) { $user->user_login = $user->user_email; wp_update_user($user); } } add_action(‘user_register’, ‘wpse_250785_sync_user_login_with_email’); add_action(‘profile_update’, ‘wpse_250785_sync_user_login_with_email’); Disclaimer: Untested, but should work 😉
How do I execute a wp_remote_get call using NTLM authentication?
How do I authenticate WP users from a chrome extension?
You shouldn’t pass your nonce to your JavaScript to verify it, since client side scripts can be easily manipulated. Instead, you should get the nonce from your front-end content, and then pass it to server to verify it. After verification, you should decide to output content by server, not by your JavaScript file. Something like … Read more
Yes it’s possible. But I prefer not to give a beginner lesson in brute force attacks. I recommend you take a look at wp-api it uses OAuth Authentication for remote apps. It’s the way to go by all means.
Use the XMLRPC API. *All these tips are for a self-hosted blog. Not sure if they are relevant to a wordpress.com blog Don’t forget to include /wp-admin after your sites name in the URL box. This may seem like a no brainer but I was not putting this in at first. 🙂 eg. http://www.yoursitesname.com/wp-admin XML-RPC … Read more
I’m not an expert of mobile apps, but as far as I know cookies don’t play well with mobile apps. I’m working on a similar project (Angular Frontend – WordPress Backend). Outh is by far the most secure way to go, but it’s rather complicated. I’m using the wp-api-jwt-auth plugin instead. If you configure it … Read more
Authenticate user using Hashed Password in MySQL Query and C#
The things you can change in there are: $secure_cookie = apply_filters(‘secure_signon_cookie’, $secure_cookie, $credentials); Cookie The $credentials for the user_login and user_password1) Example add_action( ‘wp_authenticate’, ‘wpse119273UserCredentials’ ); function wpse119273UserCredentials( $credentials ) { // Make sure to secure that value $credentials[‘user_password’] = ‘foo’; } To generate a secure password, take a look at the function wp_generate_password() and … Read more