Samuel Aguilera

<p>The WordPress REST API is a great resource, but if you don’t want to use it probably you will want to close this door to your WordPress.</p>
<p>Unlike other popular plugins that aims to disable the REST API but <strong>only return an error, processed by the REST API</strong>, when a request is received, by default, this plugin <strong>removes all filters and actions related to WordPress REST API, and returns a 404 error for requests sent to the REST API URL endpoints, effectively blocking any use of the REST API</strong>.</p>
<p>Optionally you can set the <strong>REST API setting in Settings -> General page</strong> to “Logged In Only” for a less drastical action, to keep REST API access enabled but require the user to be logged in to accept the requests.</p>
<p>If you’re happy with the plugin <a href="https://wordpress.org/plugins/sar-disable-rest-api/reviews/?filter=5" rel="ugc">please don’t forget to give it a good rating</a>, it will motivate me to keep sharing and improving this plugin (and others).</p>
<p><strong>SUPPORT:</strong> If you have any support question, please <a href="https://github.com/samuelaguilera/sar-disable-rest-api/issues" rel="nofollow ugc">create an issue at the Github repository</a>.</p>
<h4>Requirements</h4>
<ul>
<li>WordPress 4.7 or higher.</li>
</ul>
<h4>Features</h4>
<ul>
<li>Disable WordPress core REST API <strong>for real</strong> by removing all filters and actions related to it and returning a 404 error for requests sent to REST API URL endpoints (e.g. https://example.com/wp-json/whatever ).</li>
<li>Option to require user to be logged in to use the REST API instead of completely disable it.</li>
</ul>
<h4>Usage</h4>
<p>To disable the REST API completely simply install the plugin from the Plugins page and enable it.</p>
<p>If you don’t want to disable the REST API but require user to be logged in instead, go to Settings -> General page and set the REST API to option to “Logged In Only”, and click Save Changes.</p>
<p>You can change the option back to “Off” if you want to disable the REST API again.</p>
<p>To return to WordPress default, simply deactivate the plugin.</p>


Disable REST API for Real

A simple way to disable WordPress REST API.



One click plugin

Really prevents the REST API from handling requests (default) or require user to be logged in.

Jonny Harris

<p>A simple plugin to add block data in json format into the rest api. Once installed, there will be two new fields added to the rest api, <code>has_blocks</code> and <code>blocks</code>.<br />
For example output.<br />
    <code>"has_blocks": true,<br />
"block_data": [<br />
  {<br />
    "blockName": "core/image",<br />
    "attrs": {<br />
      "url": "https://www.spacedmonkey.com/wp-content/uploads/2018/12/test-image.jpg",<br />
      "alt": "Terminal de aeropuerto",<br />
      "caption": "fsfsdfdsfdssfd",<br />
      "href": "https://www.spacedmonkey.com/test-image",<br />
      "rel": "noreferrer noopener",<br />
      "linkClass": "jonny-123",<br />
      "linkTarget": "_blank",<br />
      "id": 147355,<br />
      "width": 582,<br />
      "height": 327,<br />
      "linkDestination": "attachment"<br />
    },<br />
    "innerBlocks": [<br />
    ],<br />
    "innerHTML": "\n<figure class=\"wp-block-image is-resized\"><a class=\"jonny-123\" href=\"https://www.spacedmonkey.com/test-image\" target=\"_blank\" rel=\"noreferrer noopener\"><img src=\"https://www.spacedmonkey.com/wp-content/uploads/2018/12/test-image.jpg\" alt=\"Terminal de aeropuerto\" class=\"wp-image-147355\" width=\"582\" height=\"327\"/></a><figcaption>fsfsdfdsfdssfd</figcaption></figure>\n",<br />
    "innerContent": [<br />
      "\n<figure class=\"wp-block-image is-resized\"><a class=\"jonny-123\" href=\"https://www.spacedmonkey.com/test-image\" target=\"_blank\" rel=\"noreferrer noopener\"><img src=\"https://www.spacedmonkey.com/wp-content/uploads/2018/12/test-image.jpg\" alt=\"Terminal de aeropuerto\" class=\"wp-image-147355\" width=\"582\" height=\"327\"/></a><figcaption>fsfsdfdsfdssfd</figcaption></figure>\n"<br />
    ],<br />
    "rendered": "\n<figure class=\"wp-block-image is-resized\"><a class=\"jonny-123\" href=\"https://www.spacedmonkey.com/test-image\" target=\"_blank\" rel=\"noreferrer noopener\"><img src=\"https://www.spacedmonkey.com/wp-content/uploads/2018/12/test-image.jpg\" alt=\"Terminal de aeropuerto\" class=\"wp-image-147355\" width=\"582\" height=\"327\"/></a><figcaption>fsfsdfdsfdssfd</figcaption></figure>\n"<br />
  }<br />
],</code></p>
<h3>Technical Notes</h3>
<ul>
<li>Requires PHP 5.6+.</li>
<li>Requires WordPress 5.5+.</li>
<li>Issues and Pull requests welcome on the GitHub repository: https://github.com/spacedmonkey/wp-rest-blocks</li>
</ul>
<h3>Development</h3>
<p>This plugin uses <code>@wordpress/env</code> for local development and testing.</p>
<h3>Prerequisites</h3>
<ul>
<li>Node.js 20+ and npm</li>
<li>Docker Desktop (must be installed and running)</li>
</ul>
<h3>Setup</h3>
<ol>
<li>Clone the repository</li>
<li>
<p>Install dependencies:<br />
   <code>bash<br />
npm install<br />
composer install</code></p>
</li>
<li>
<p>Start the WordPress environment:<br />
   <code>bash<br />
npm run env:start</code></p>
<p>This will start a local WordPress instance at <code>http://localhost:8888</code> (admin: <code>http://localhost:8888/wp-admin</code> with username <code>admin</code> and password <code>password</code>)</p>
<p><strong>Note:</strong> Docker must be running for this to work. The first time you run this, it will download WordPress and set up the database, which may take a few minutes.</p>
</li>
</ol>
<h3>Available Commands</h3>
<ul>
<li><code>npm run env:start</code> – Start the WordPress environment</li>
<li><code>npm run env:stop</code> – Stop the WordPress environment</li>
<li><code>npm run env:reset</code> – Reset the environment (clean database)</li>
<li><code>npm run env:destroy</code> – Destroy the environment completely</li>
<li><code>npm run test:php</code> – Run PHPUnit tests</li>
<li><code>npm run test:php:multisite</code> – Run PHPUnit tests in multisite mode</li>
<li><code>npm run lint:php</code> – Run PHP CodeSniffer</li>
<li><code>npm run lint:php:fix</code> – Fix PHP coding standards issues automatically</li>
</ul>
<h3>Running Tests</h3>
<p>After starting the environment with <code>npm run env:start</code>, you can run the tests:</p>
<pre><code>`bash
</code></pre>
<p>npm run test:php<br />
    `</p>
<p>For multisite tests:</p>
<pre><code>`bash
</code></pre>
<p>npm run test:php:multisite<br />
    `</p>
<h3>Accessing the Site</h3>
<ul>
<li><strong>Development site</strong>: http://localhost:8888</li>
<li><strong>Admin dashboard</strong>: http://localhost:8888/wp-admin (admin/password)</li>
<li><strong>Test site</strong>: http://localhost:8889</li>
<li><strong>Test admin</strong>: http://localhost:8889/wp-admin (admin/password)</li>
</ul>


REST API blocks

Add gutenberg blocks data into the post / page REST API endpoints.

Disable REST API for Real vs REST API blocks