If you want to use application passwords to authenticate requests to your RESTful endpoints, you can modify your permission_callback function to check for the presence and validity of an application password instead of a user’s credentials. To do this, you can use the wp_check_application_passwords function, which was introduced in WordPress 5.6. This function takes an … Read more
/* Add code below wp_set_auth_cookie( $user->ID, true, false ); */ $current_user = wp_get_current_user(); if($current_user->roles[0]==’personal_account’){ wp_redirect(site_url(‘/profile’)); }else if($current_user->roles[0]==’corporate_user’){ wp_redirect(site_url(‘/corporate-profile’)); }
Q1. How can we do this login event? Can we login via API or do we need something different? I’m asking because I’ve seen ways to log in with a cookie. The WP REST API provides no session management functionality. There is no way to login, register, or logout via the REST API. If it … Read more
Not able to set userId and email at wp_set_current_user in Worpdress
WordPress Network / Multisite login to one site allow access to all
You could do this with a low-priority authenticate filter. I’m surprised there aren’t more appropriate hooks in the login process, but I can’t see one. (There is already an example of a filter like this though: wp_authenticate_spam_check.) If the value the filter is given is a user, that means a previous filter has accepted the … Read more
Check caching/plugins interference Try using: jQuery.ajax({ type: ‘POST’, url : obj_php.ajax_url_login, beforeSend: function (xhr) { xhr.setRequestHeader(‘X-WP-Nonce’, obj_php.nonce); }, Check that nonce is actually set correctly in the hidden form field and when submitting check the payload in dev console, make sure the key/value match i.e, nonce_check: e7chadas0d Lastly, double check you have it setup according … Read more
Alright, guess I figured it all out: Has WP Core been updated to do JSON Schema – based request argument validation automatically now? It seems that that’s the case, yes. If you provide a proper JSON schema, as shown in the example, when using register_rest_route, payload validation is executed automatically, without the provision of a … Read more
REST API – Authentication/Logon security
How to track all users logged into a site?