Use the XMLRPC API. *All these tips are for a self-hosted blog. Not sure if they are relevant to a wordpress.com blog Don’t forget to include /wp-admin after your sites name in the URL box. This may seem like a no brainer but I was not putting this in at first. 🙂 eg. http://www.yoursitesname.com/wp-admin XML-RPC … Read more
I’m not an expert of mobile apps, but as far as I know cookies don’t play well with mobile apps. I’m working on a similar project (Angular Frontend – WordPress Backend). Outh is by far the most secure way to go, but it’s rather complicated. I’m using the wp-api-jwt-auth plugin instead. If you configure it … Read more
Authenticate user using Hashed Password in MySQL Query and C#
The things you can change in there are: $secure_cookie = apply_filters(‘secure_signon_cookie’, $secure_cookie, $credentials); Cookie The $credentials for the user_login and user_password1) Example add_action( ‘wp_authenticate’, ‘wpse119273UserCredentials’ ); function wpse119273UserCredentials( $credentials ) { // Make sure to secure that value $credentials[‘user_password’] = ‘foo’; } To generate a secure password, take a look at the function wp_generate_password() and … Read more
Yes this is possible by structuring your requests appropriately. For system requests use OAuth 1.0 (consumer key as before), but encode it to include the OAuth credentials in the URL not in the headers. Having the OAuth credentials in the Authorisation header triggers the JWT error. GET https://DOMAIN/wp-json/wc/v1/subscriptions * Authorization: `OAuth 1.0` * Consumer key: … Read more
The way I think this needs to be done: Examine how an existing integration allows a particular CMS to authenticate using wordpress. Possibly this MediaWiki integration. Work out how this authenticates a wordpress user. Examine an existing friendica authentication plugin, such as the LDAP one that comes with the CMS, and update this to use … Read more
Hopefully this is a temporary fix for you. The idea is to override the nonce. Add the following in a functions.php file or in the plugin itself function wp_verify_nonce($nonce, $action = -1) { return 1; } For now, this works on the bridge I use on my site (A different bridge for a different forum … Read more
This answer may help. To quote: The basic code you need here is this in the wp-config file: define(‘LOGGED_IN_COOKIE’, ‘login_cookie_name’); define(‘AUTH_COOKIE’,’auth_cookie_name’); define(‘COOKIE_DOMAIN’, ‘.example.com’); define(‘COOKIEHASH’, ‘random_hash_here’); Put that in the config across multiple sites, set the keys and salts to be the same, and you’ll have login cookies that work across the domain and subdomains.
Why don’t you write a quick plugin … called “is user logged in” that registers a URL call. So the user hits the page, then the Flash or Java could just hit: http://mysite.com/customurl?hash=wordpress_logged_in_[hash] Then the plugin would run and return true or false. References: http://codex.wordpress.org/WordPress_Cookies#WP_.3E_3 This way you keep everything within reach of the WordPress … Read more
There is a premium plugin from wpmudev.org called Comments Plus for, I think, $17 that does include support. I’m not sure if it will add the user to WordPress but with support included they might help suss out a solution for you.