Benjamin Intal

gambitph

When you activate this plugin, all REST API endpoints will be disabled for non-authorized requests.
Best used with any of these plugins:
<ul>
<li><a href="https://wordpress.org/plugins/jwt-authentication-for-wp-rest-api/" rel="ugc">JWT Authentication for WP REST API</a></li>
<li><a href="https://wordpress.org/plugins/oauth2-provider/" rel="ugc">WP OAuth Server</a></li>
</ul>
Blocks ALL REST API endpoints except for:
<ul>
<li>/jwt-auth/v1/token/validate</li>
<li>/jwt-auth/v1/token</li>
<li>/oauth/authorize</li>
<li>/oauth/token</li>
<li>/oauth/me</li>
</ul>
Allows all REST API endpoints if they come with a valid Bearer Token Authentication (authentication via GET URL variables are still blocked)
When used alone in your site, your REST API will essentially be disabled.
<blockquote>
Note that this plugin itself doesn’t provide JWT or OAuth authentication, it only whitelists them.
</blockquote>
<h4>Features</h4>
<ul>
<li>No settings page</li>
<li>You can whitelist other REST API endpoint via a filter hook (see FAQs below)</li>
<li>Blocks all REST API endpoints.. but</li>
<li>Allows requests with Bearer Token Authentication.. and</li>
<li>Allows <a href="https://wordpress.org/plugins/jwt-authentication-for-wp-rest-api/" rel="ugc">JWT Authentication for WP REST API</a> & <a href="https://wordpress.org/plugins/oauth2-provider/" rel="ugc">WP OAuth Server</a> authentication endpoints</li>
</ul>

Disable REST API and Require JWT / OAuth Authentication

Disables all REST API endpoints and requires JWT or OAuth Authentication.

WordPress REST API (Version 2) vs Disable REST API and Require JWT / OAuth Authentication