Sal Ferrarello

<p>This plugin modifies the <code>/wp-json/wp/v2/users</code> endpoint to require authentication.</p>
<p>By default on a WordPress site you can list the users that have posted content on the site by visiting this endpoint.</p>
<p>This plugin requires the user to be authenticated to view the list of users.</p>
<h3>What this means</h3>
<p>If you go directly to the URL <code>/wp-json/wp/v2/users</code> you will get a <code>401 Unauthorized</code> response.</p>
<p>But if you open a block editor page and run the following from the browser console,</p>
<pre><code>await wp.apiFetch({path: 'wp/v2/users'});
</code></pre>
<p>you will get a list of users (because the <code>wp.apiFetch()</code> function authenticates the user’s call to the WordPress REST API).</p>
<h3>Author</h3>
<p>Sal Ferrarello / <a href="https://salferrarello.com" rel="nofollow ugc">salferrarello.com</a></p>


Require Auth Users REST Endpoint

Require authentication when accessing the /wp-json/wp/v2/users REST API endpoint.

Require Auth Users REST Endpoint vs Rewrite Endpoint Master