Carawebs Secure REST API Plugin
Simple plugin that disallows access to REST endpoints for users that are not logged in. Stops the REST API from being used to enumerate users.
by David Egan · github.com/carawebs/wp-secure-rest-api · website
★ 1stars
33composer installs
1forks
Install
No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:
wp plugin install https://github.com/carawebs/wp-secure-rest-api/archive/refs/heads/master.zipAlso on Packagist as carawebs/wp-secure-rest-api:
composer require carawebs/wp-secure-rest-apiFrom the readme
Secure WordPress REST API
A super-simple plugin that disallows access to REST endpoints for users that are not logged in.
Stops the REST API from being used to enumerate users.
Usage
- Clone this repo to mu-plugins - you may need to create this directory in the designated WordPress content directory (wp-content in a standard install)
- Make sure the file is loaded
If you're using Bedrock, the built in mu-plugins autoloader will take care of loading for you.
Check it's working:
https://example.com/wp-json/wp/v2/users should return a 401 response if the user is not logged in.
Non Bedrock Loader
Add this line to a loader in the root mu-plugins directory:
~~~php
<?php
// path/mu-plugins/load.php
require WPMUPLUGINDIR.'/secure-rest-api/secure-rest-api.php';
~~~