Title: API Authorisation Issue:
Last modified: March 26, 2026

---

# API Authorisation Issue:

 *  [matteocuellar](https://wordpress.org/support/users/matteocuellar/)
 * (@matteocuellar)
 * [2 months ago](https://wordpress.org/support/topic/api-authorisation-issue/)
 * There appears to be an issue in the plugin within src/API/Client.php relating
   to how authentication is determined.
 * The current implementation assumes that a global API key will always be in hexadecimal
   format. However, both global API keys and API Tokens are not hexadecimal. As 
   a result, valid API credentials are not accepted as it uses the Bearer auth header.
 * In my case, this caused authentication to fail unless I bypassed the format check
   entirely and forced the use of the X_AUTH_EMAIL and X_AUTH_KEY headers. Doing
   so resolved the issue immediately.
 * It is possible that the format of API keys has changed since the plugin was last
   updated, which may also explain similar authentication issues reported by others.
 * The page I need help with: _[[log in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fapi-authorisation-issue%2F%3Foutput_format%3Dmd&locale=en_US)
   to see the link]_

Viewing 1 replies (of 1 total)

 *  Plugin Contributor [Remkus de Vries](https://wordpress.org/support/users/defries/)
 * (@defries)
 * [3 weeks, 1 day ago](https://wordpress.org/support/topic/api-authorisation-issue/#post-18899243)
 * [@matteocuellar](https://wordpress.org/support/users/matteocuellar/) This will
   be fixed in the next release which is slated for next week.

Viewing 1 replies (of 1 total)

You must be [logged in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fapi-authorisation-issue%2F%3Foutput_format%3Dmd&locale=en_US)
to reply to this topic.

 * ![](https://ps.w.org/cloudflare/assets/icon-256x256.png?rev=2471183)
 * [Cloudflare](https://wordpress.org/plugins/cloudflare/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/cloudflare/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/cloudflare/)
 * [Active Topics](https://wordpress.org/support/plugin/cloudflare/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/cloudflare/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/cloudflare/reviews/)

## Tags

 * [authorisation](https://wordpress.org/support/topic-tag/authorisation/)
 * [plugin setup](https://wordpress.org/support/topic-tag/plugin-setup/)

 * 1 reply
 * 2 participants
 * Last reply from: [Remkus de Vries](https://wordpress.org/support/users/defries/)
 * Last activity: [3 weeks, 1 day ago](https://wordpress.org/support/topic/api-authorisation-issue/#post-18899243)
 * Status: not resolved