REST API
-
Please make the “Disable REST API” a setting you can turn on and off, updating the plugin broke our REST API because we have REST API’s that you don’t need to be logged in to trigger, there are many other plugins like Disable JSON API that will allow you to manage your REST API in the way you see fit.
Example:
We force ever user to login with your plugin, but then we have a scrapper that gets triggered via the REST API that doesn’t give any information out but that runs a script.
-
I’m having a similar problem.
Gravity Forms 2.2.5.21, Force Login Version 5.1.1 on WordPress 4.9.4.
Wrote a python client that tries to download all the entries for a particular form.
When the python client tries to log in, it gets redirected to the Site’s login page, BUT – pasting the same URL the python client is using into an already authenticated browser window works perfectly.
I first tried the whitelisting, and then I found this thread and replaced the whitelist by adding:
remove_filter( 'rest_authentication_errors', 'v_forcelogin_rest_access', 99 );to the bottom of the functions.php file (for the theme I’m using), and clicking Update.
Still getting the same issue – it’s trying to redirect to the login page. The bypass doesn’t seem to work.
The link I’m using (HTTP GET) is of the form:
http://MYFQDNHERE/gravityformsapi/forms/1/entries?api_key=XXXXXXX&signature=snV3FW7qWyvGfv6vE0j9ycLSfIM%3D&expires=1519029188&paging%5Bpage_size%5D=10000The client I wrote works fine if I disable Force Login.
Ideas? Appreciate any help.
Hello Everyone
Hope you all doing good.
I saw the discussion, Sadly I don’t have any opinion on this but I found an wonderful article which is for REST API.Check it out.
Hope it helps:)What exactly is the error you’re seeing? And/or what does your logs show?
Here is what I’m thinking– the Gravity Forms plugin is not using the WordPress’ built-in cookie authentication method, rest_cookie_check_errors().
If @bryanrego is correct that the Gravity Forms plugin is running at the
template_redirecthook, then you guys might need a combination of both theremove_filter()function and thev_forcelogin_bypassfilter.For example:
remove_filter( 'rest_authentication_errors', 'v_forcelogin_rest_access', 99 );/** * Bypass Force Login to allow for exceptions. * * @return bool Whether to disable Force Login. Default false. */ function my_forcelogin_bypass( $bypass ) { if ( isset($_GET['api_key']) ) { $bypass = true; } return $bypass; } add_filter( 'v_forcelogin_bypass', 'my_forcelogin_bypass', 10 );
The topic ‘REST API’ is closed to new replies.
