OAuth2
OAuth2 copied to clipboard
WP-API
Connect applications to your WordPress site without ever giving away your password.
As of [WordPress 5.5](https://core.trac.wordpress.org/changeset/48526), if a permission_callback is not provided, the REST API will issue a _doing_it_wrong notice. This is a function that checks if the user can perform the...
To follow coding standards, change filter names and deprecate current filters.
In cases where a given oauth application is a first party client, it may be that one wants to disable the Authorization form (as it wants to be auto-allowed). This...
https://tools.ietf.org/html/rfc6749#section-4.1.3 Check whether redirect_uri matches the one in the initial request; ```validate_redirect_uri``` function does not return a registered callback from the DB anymore, if no redirect_uri has been given, as...
Clients marked as confidential need their secrets checked. Not yet complete, need to read the spec and ensure this covers all bases. Fixes #27.
The documentation needs updating for OAuth2 https://github.com/WP-API/OAuth2/blob/master/docs/basics/Signing.md
Personal tokens are enabled by default. There should be a way for site admins to toggle this on or off.
