Sal Ferrarello

<p>This plugin modifies the <code>/wp-json/wp/v2/users</code> endpoint to require authentication.</p>
<p>By default on a WordPress site you can list the users that have posted content on the site by visiting this endpoint.</p>
<p>This plugin requires the user to be authenticated to view the list of users.</p>
<h3>What this means</h3>
<p>If you go directly to the URL <code>/wp-json/wp/v2/users</code> you will get a <code>401 Unauthorized</code> response.</p>
<p>But if you open a block editor page and run the following from the browser console,</p>
<pre><code>await wp.apiFetch({path: 'wp/v2/users'});
</code></pre>
<p>you will get a list of users (because the <code>wp.apiFetch()</code> function authenticates the user’s call to the WordPress REST API).</p>
<h3>Author</h3>
<p>Sal Ferrarello / <a href="https://salferrarello.com" rel="nofollow ugc">salferrarello.com</a></p>


Require Auth Users REST Endpoint

Require authentication when accessing the /wp-json/wp/v2/users REST API endpoint.

Jon Otaegi

<p>This simple plugin creates a <code>/health</code> endpoint to let you monitor the status of your WordPress website. The endpoint tests the status of your database connection and returns a <code>200 OK</code> HTTP status code while your page is healthy. You can read more on HTTP status codes at the <a href="https://en.wikipedia.org/wiki/List_of_HTTP_status_codes" rel="nofollow ugc">Wikipedia article</a>.</p>
<p>External tools such as website monitoring services can access the exposed endpoint at regular intervals. This can help you verify that your WordPress website is performing correctly.</p>
<p>You can find more information about the <a href="https://docs.microsoft.com/en-us/azure/architecture/patterns/health-endpoint-monitoring" rel="nofollow ugc">Health Endpoint Monitoring Pattern</a> at the <a href="https://docs.microsoft.com/en-us/azure/architecture/patterns/" rel="nofollow ugc">Microsoft Azure Documentation</a> website.</p>
<h4>Development</h4>
<p>This plugin is being developed on <a href="https://github.com/jonotaegi/wordpress-health-endpoint" rel="nofollow ugc">GitHub</a>. If you want to collaborate, feel free to submit pull requests or report bugs on the issue tracker.</p>


Health Endpoint


Security utilities complain the plugin is abandoned.


Update the version number!

Creates a /health endpoint that returns a 200 OK HTTP status code while WordPress is performing correctly.

Require Auth Users REST Endpoint vs Health Endpoint