WP Manifestindependent plugin directory
manifest / developer / wp-api-remove-auth-header

WP API Remove Authorization Header

WordPress plugin that simulates how CGI removes the "Authorization" header, useful for debugging WP API Authentication

by Event Espresso (Mike Nelson) · github.com/eventespresso/wp-api-remove-auth-header

★ 1stars

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/eventespresso/wp-api-remove-auth-header/archive/refs/heads/master.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/eventespresso/wp-api-remove-auth-header ↗

Plugin which simulates how CGI and Fast-CGI remove the "Authorization" HTTP header on requests. This helps test if your WP API authentication method can handle that header being removed.

Currently, activating this plugin should cause the OAuth plugin, Application Passwords, and Basic Auth plugins to not authenticate the user properly, unless they use a workaround that places the authentication data into a separate PHP global (eg by modifying the .htaccess file); or unless they send the authentization data in a different manner.

Installing

  1. Download the plugin into your plugins directory
  2. Enable in the WordPress admin