Daniel Bachhuber

Ryan McCue

Joe Hoyle

Rachel Baker

<a href="https://travis-ci.org/WP-API/wp-api-meta-endpoints" rel="nofollow ugc"></a>
WP REST API companion plugin for post meta endpoints.

WP REST API Meta Endpoints

WP REST API companion plugin for post meta endpoints.

Benjamin Intal

gambitph

When you activate this plugin, all REST API endpoints will be disabled for non-authorized requests.
Best used with any of these plugins:
<ul>
<li><a href="https://wordpress.org/plugins/jwt-authentication-for-wp-rest-api/" rel="ugc">JWT Authentication for WP REST API</a></li>
<li><a href="https://wordpress.org/plugins/oauth2-provider/" rel="ugc">WP OAuth Server</a></li>
</ul>
Blocks ALL REST API endpoints except for:
<ul>
<li>/jwt-auth/v1/token/validate</li>
<li>/jwt-auth/v1/token</li>
<li>/oauth/authorize</li>
<li>/oauth/token</li>
<li>/oauth/me</li>
</ul>
Allows all REST API endpoints if they come with a valid Bearer Token Authentication (authentication via GET URL variables are still blocked)
When used alone in your site, your REST API will essentially be disabled.
<blockquote>
Note that this plugin itself doesn’t provide JWT or OAuth authentication, it only whitelists them.
</blockquote>
<h4>Features</h4>
<ul>
<li>No settings page</li>
<li>You can whitelist other REST API endpoint via a filter hook (see FAQs below)</li>
<li>Blocks all REST API endpoints.. but</li>
<li>Allows requests with Bearer Token Authentication.. and</li>
<li>Allows <a href="https://wordpress.org/plugins/jwt-authentication-for-wp-rest-api/" rel="ugc">JWT Authentication for WP REST API</a> & <a href="https://wordpress.org/plugins/oauth2-provider/" rel="ugc">WP OAuth Server</a> authentication endpoints</li>
</ul>

Disable REST API and Require JWT / OAuth Authentication

Disables all REST API endpoints and requires JWT or OAuth Authentication.

WP REST API Meta Endpoints vs Disable REST API and Require JWT / OAuth Authentication