Sal Ferrarello

<p>This plugin modifies the <code>/wp-json/wp/v2/users</code> endpoint to require authentication.</p>
<p>By default on a WordPress site you can list the users that have posted content on the site by visiting this endpoint.</p>
<p>This plugin requires the user to be authenticated to view the list of users.</p>
<h3>What this means</h3>
<p>If you go directly to the URL <code>/wp-json/wp/v2/users</code> you will get a <code>401 Unauthorized</code> response.</p>
<p>But if you open a block editor page and run the following from the browser console,</p>
<pre><code>await wp.apiFetch({path: 'wp/v2/users'});
</code></pre>
<p>you will get a list of users (because the <code>wp.apiFetch()</code> function authenticates the user’s call to the WordPress REST API).</p>
<h3>Author</h3>
<p>Sal Ferrarello / <a href="https://salferrarello.com" rel="nofollow ugc">salferrarello.com</a></p>


Require Auth Users REST Endpoint

Require authentication when accessing the /wp-json/wp/v2/users REST API endpoint.

Atte Liimatainen

<p>WordPress plugin that helps to serve content through REST routes and gives<br />
customizability to developers through filters.</p>
<h3>Available Routes</h3>
<ul>
<li><code>/wp-json/arha/v1/post</code></li>
<li><code>/wp-json/arha/v1/page</code></li>
<li><code>/wp-json/arha/v1/options</code></li>
<li><code>/wp-json/arha/v1/archive</code></li>
</ul>
<h3>Example queries</h3>
<ul>
<li><code>/wp-json/arha/v1/post?post_type=POST_TYPE&slug=SLUG</code></li>
<li><code>/wp-json/arha/v1/page?path=PATH</code></li>
<li><code>/wp-json/arha/v1/options</code></li>
<li><code>/wp-json/arha/v1/archive?post_type=POST_TYPE&posts_per_page=POSTS_PER_PAGE&paged=PAGED&orderby=ORDERBY&order=ORDER</code></li>
</ul>
<h3>tax_query and meta_query in archive-route</h3>
<ul>
<li><code>tax_query</code> and <code>meta_query</code> are supported and they work how the query is built for it in <code>new WP_Query()</code></li>
<li>both needs their values to bes passed in as stringified json</li>
</ul>
<h3>Multiple post_types in archive-route</h3>
<ul>
<li>To pass multiple post_types in archive-route, use syntax that lets PHP read GET-param as an array. https://stackoverflow.com/a/9547490</li>
</ul>
<h3>Filters</h3>
<ul>
<li>
<p>To exclude querying specific post types from <code>post</code>– and <code>archive</code>-routes, you<br />
can use following filters:</p>
<p>`<br />
add_filter(‘arha_routes/archive_excluded_post_types’, ‘exclude_post_types’);<br />
add_filter(‘arha_routes/post_excluded_post_types’, ‘exclude_post_types’);</p>
</li>
</ul>
<p>function exclude_post_types($excluded_post_types) {<br />
  $excluded_post_types = [‘post’];<br />
  return $excluded_post_types;<br />
}<br />
    `</p>
<ul>
<li>To format <code>post</code>-route’s post before it’s served to client, use <code>arha_routes/format_post</code>-filter<br />
`<br />
add_filter(‘arha_routes/format_post’, ‘format_post’);</li>
</ul>
<p>function format_post($post) {<br />
  return $post;<br />
}<br />
    `</p>
<ul>
<li>To format <code>page</code>-route’s post before it’s served to client, use <code>arha_routes/format_page</code>-filter<br />
`<br />
add_filter(‘arha_routes/format_page’, ‘format_page’);</li>
</ul>
<p>function format_page($page) {<br />
  return $page;<br />
}<br />
    `</p>
<ul>
<li>
<p>To format <code>archive</code>-route’s posts before they are served to client, use <code>arha_routes/format_archive_post</code>-filter</p>
<p><code>add_filter('arha_routes/format_archive_post', 'format_archive_post');<br />
function format_archive_post($post) {<br />
return $post;<br />
}</code></p>
</li>
<li>
<p><code>options</code>-route returns empty result by default. To add content to it, use <code>arha_routes/format_options</code>-filter<br />
`<br />
add_filter(‘arha_routes/format_options’, ‘format_options’);</p>
</li>
</ul>
<p>function format_options($options) {<br />
  return $options;<br />
}<br />
    `</p>
<ul>
<li>
<p>By default Arha Routes returns only published content with post-, page- and archive-route, this can be modified by adding following filters.<br />
`<br />
// for archive route<br />
add_filter(‘arha_routes/allowed_post_statuses_archive’, ‘allowed_post_statuses’);<br />
// for post route<br />
add_filter(‘arha_routes/allowed_post_statuses_post’, ‘allowed_post_statuses’);<br />
// for page route<br />
add_filter(‘arha_routes/allowed_post_statuses_page’, ‘allowed_post_statuses’);<br />
function allowed_post_statuses($post_statuses) {<br />
// … change post_statuses array</p>
<p>return $post_statuses;<br />
}<br />
`<br />
After adding setting up these filters, request can include “post_status” parameter and it will be compared to $post_statuses array.</p>
</li>
</ul>
<h3>SearchWP</h3>
<p>Arha Routes supports SearchWP-plugin, which lets WP users to make keyword search engine for their content.</p>
<p>Activating SearchWP-plugin adds optional keyword-search functionality to <code>archive</code>-route. This is done by adding <code>s=KEYWORD</code> to the route<br />
– Example: <code>/wp-json/arha/v1/archive?post_type=products&posts_per_page=10&paged=1&orderby=date&order=ASC&s=monitor</code></p>
<h3>Polylang</h3>
<p>Arha Routes supports Polylang-plugin, which allows users to create content in multiple languages.</p>
<p>Activating Polylang changes how endpoints work:</p>
<ul>
<li>All routes require additional <code>lang</code>-param
<ul>
<li>Example: <code>/wp-json/arha/v1/archive?post_type=products&posts_per_page=10&paged=1&orderby=date&order=ASC&lang=en</code></li>
</ul>
</li>
<li><code>page</code>-route doesn’t support language prefix in path
<ul>
<li>Example: Permalink <code>/zh/info</code>, use like this <code>/wp-json/arha/v1/page?path=/info&lang=zh</code></li>
<li>Example: Permalink <code>/en/info/test</code>, use like this <code>/wp-json/arha/v1/page?path=/info/test&lang=zh</code></li>
</ul>
</li>
<li><code>options</code>-route passes <code>lang</code>-param forward to <code>arha_routes/format_options</code>-filter<br />
<code>add_filter('arha_routes/format_options', 'format_options', 10, 2);<br />
function format_options($options, $lang) {<br />
return $options;<br />
}</code></li>
</ul>
<h3>Polylang + SearchWP</h3>
<p>In order to make these two plugins work together, you need to add extra plugin to WP installation.</p>
<p>https://searchwp.com/extensions/polylang-integration/</p>


Arha Routes

Wordpress plugin that helps to serve content through REST routes and gives customizability to developers through filters.

Require Auth Users REST Endpoint vs Arha Routes