I managed to solve the issue, as the SEARCH EVERYTHING plugin has this exact functionality. The issue was not related to WP-REST, but to the standard WordPress Search.
You can look into queues e.g. create a custom database table, and write to it within the rest_post_dispatch or rest_pre_serve_request filter just before it is dispatched. Then you can bulk process the queue (first record in is the first record out) via e.g. wp-cron and the user will not be affected by that potentially heavy … Read more
It turns out this is due to SiteGround caching data, in particular its Dynamic Cache. According to their docs on Dynamic Cache, they will “… monitor whether your browser has these cookies and bypass the cache if they are present”. One of the cookies they check against is wordpress_logged_in_, which explains the behaviour I described. … Read more
Hide custom posts from certain taxonomy in rest api
There’s only 2 real places a locale is defined in a vanilla WordPress install: For the site. For the user account. In the admin the user account’s locale will be used, while on the front end the site’s locale will be used. For REST API requests the user locale can be used by passing _locale=user … Read more
Assuming a private plugin, not available via the repository, there are several search results for ‘wordpress private update’ that might be helpful. In fact, I recall doing it once several (many) years ago, but can’t find how I did it. (And I seem to recall posting the answer here on SO, but can’t find that … Read more
Can’t retrieve user email address with REST API
It appears that the issue lies with the in_array function that is checking if the current post type matches the post types specified in the template header information. The problem seems to be that the REST API is validating the parameters, including the template parameter, before passing it to the WordPress API to update the … Read more
wordpress rest api authentication failed
If you want to use application passwords to authenticate requests to your RESTful endpoints, you can modify your permission_callback function to check for the presence and validity of an application password instead of a user’s credentials. To do this, you can use the wp_check_application_passwords function, which was introduced in WordPress 5.6. This function takes an … Read more