Yes this is possible by structuring your requests appropriately. For system requests use OAuth 1.0 (consumer key as before), but encode it to include the OAuth credentials in the URL not in the headers. Having the OAuth credentials in the Authorisation header triggers the JWT error. GET https://DOMAIN/wp-json/wc/v1/subscriptions * Authorization: `OAuth 1.0` * Consumer key: … Read more
The way I think this needs to be done: Examine how an existing integration allows a particular CMS to authenticate using wordpress. Possibly this MediaWiki integration. Work out how this authenticates a wordpress user. Examine an existing friendica authentication plugin, such as the LDAP one that comes with the CMS, and update this to use … Read more
Hopefully this is a temporary fix for you. The idea is to override the nonce. Add the following in a functions.php file or in the plugin itself function wp_verify_nonce($nonce, $action = -1) { return 1; } For now, this works on the bridge I use on my site (A different bridge for a different forum … Read more
This answer may help. To quote: The basic code you need here is this in the wp-config file: define(‘LOGGED_IN_COOKIE’, ‘login_cookie_name’); define(‘AUTH_COOKIE’,’auth_cookie_name’); define(‘COOKIE_DOMAIN’, ‘.example.com’); define(‘COOKIEHASH’, ‘random_hash_here’); Put that in the config across multiple sites, set the keys and salts to be the same, and you’ll have login cookies that work across the domain and subdomains.
Why don’t you write a quick plugin … called “is user logged in” that registers a URL call. So the user hits the page, then the Flash or Java could just hit: http://mysite.com/customurl?hash=wordpress_logged_in_[hash] Then the plugin would run and return true or false. References: http://codex.wordpress.org/WordPress_Cookies#WP_.3E_3 This way you keep everything within reach of the WordPress … Read more
There is a premium plugin from wpmudev.org called Comments Plus for, I think, $17 that does include support. I’m not sure if it will add the user to WordPress but with support included they might help suss out a solution for you.
Okay, after your comments, I think I see what you’re asking but I’m not sure, so I’ll make it as generic as possible. WordPress uses the authenticate filter hook to perform authentication. You can add additional authentication methods by connecting your own functions to this filter. This is an example of an authentication function. This … Read more
if you do not want to (or you cannot) change permissions on wp-content so your web server has write permissions, then add this to your wp-config.php file: define(‘FS_METHOD’, ‘direct’);
You couldn’t have a more perfect solution, since this is precisely what WordPress core itself has to handle. See, in early years WP used just one pass MD5 for passwords. Then they went to better hashing, but obviously it should have kept working with old hashes. Now if you take a look at wp_check_password(), what … Read more
I believe the reason it is overriding all users is how you are evaluating the user role (and when you are doing it). You’re running your check of the user role in mb_current_user_role() and that function assumes the user is logged in, otherwise it sets $user (initially) to null. But when that function is run … Read more