Andrew Wilkinson

<p>A lightweight plugin that <strong>forces login for backend access</strong> in a headless WordPress setup. Keeps your WordPress dashboard private while allowing your front end (e.g. Astro, Next.js) to pull content via GraphQL/REST.</p>
<h4>What it does</h4>
<ul>
<li>Requires authentication for <code>/wp-admin/</code> and other backend pages</li>
<li>Always allows the login page to avoid redirect loops</li>
<li>Leaves key endpoints open for headless use:
<ul>
<li><code>/wp-json/</code> (REST API)</li>
<li><code>/graphql</code> (WPGraphQL)</li>
<li><code>/wp-admin/admin-ajax.php</code> (AJAX)</li>
<li><code>/wp-cron.php</code> (cron)</li>
<li><code>/robots.txt</code></li>
<li><code>/sitemap*.xml</code> (sitemaps and indexes)</li>
<li><code>/wp-content/uploads/*</code> (media)</li>
<li><code>/favicon.ico</code></li>
<li><code>/newrelic</code> (New Relic monitoring)</li>
</ul>
</li>
<li>Logged-in users visiting the backend root get redirected to the dashboard</li>
<li>Works with Bedrock layouts (handles root path vs <code>/wp/</code>)</li>
</ul>
<h4>Use case</h4>
<ul>
<li>WordPress is the content backend</li>
<li>Public site is built with Astro/Next.js/etc</li>
<li>Editors log in to WordPress. Visitors never see the backend</li>
<li>Front end builds and live pages can still query GraphQL/REST without authentication</li>
</ul>
<h4>Customization</h4>
<p>Developers can customize allowed endpoints using the <code>force_login_allowed_patterns</code> filter:</p>
<pre><code>add_filter('force_login_allowed_patterns', function($patterns) {
    $patterns[] = '#^/healthz$#';           // custom health check
    $patterns[] = '#^/status$#';            // uptime checks
    $patterns[] = '#^/wp-json/acf/v3/.*#';  // specific REST namespace
    return $patterns;
});
</code></pre>


Headless Login Guard

Forces login for backend access in headless WordPress setups while allowing GraphQL/REST API endpoints and essential paths.

ash_hitch

<p>This plugin enables Yoast SEO Support for WPGraphQL</p>
<p>This is an extension to the WPGraphQL plugin (https://github.com/wp-graphql/wp-graphql) that returns Yoast SEO data.</p>
<p><strong>Currently returning SEO data for:</strong></p>
<ul>
<li>Pages</li>
<li>Posts</li>
<li>Custom post types</li>
<li>Products (WooCommerce)</li>
<li>Categories</li>
<li>Custom taxonomies</li>
<li>WooCommerce Products</li>
<li>
<p>Yoast Configuration</p>
<ul>
<li>Webmaster verification</li>
<li>Social profiles</li>
<li>Schemas</li>
<li>Breadcrumbs</li>
</ul>
<blockquote>
<p>Please Note: Yoast and WPGraphQL and their logos are copyright to their respective owners.</p>
</blockquote>
</li>
</ul>


WPGraphQL Yoast SEO Addon

WordPress SEO by Yoast is a must-have plugin for most WordPress sites, and if you're taking your WordPress site headless with Gatsby or another JavaScript framework, but still want your site to be SEO friendly, this is a must-have plugin!

Ash does a great job maintaining it, adding new features, and making sure it's useful for users of WPGraphQL and Yoast.

Must have for Headless WordPress sites

Well-maintained and does exactly what you'd hope for -- integrate Yoast data into WP-GraphQL Types!

Great Yoast SEO Integration

This plugin enables Yoast SEO Support for WPGraphQL.

Headless Login Guard vs WPGraphQL Yoast SEO Addon