oEmbed Discovery Endpoints

[rickalee]

Hi team,

This appears to be too strict and I believe we need to whitelist /wp-json/oembed/* for post embeds to work.

https://github.com/10up/10up-experience/blob/26db50fe6aeecd9b5ff6d630482c572aa3666567/includes/rest-api.php#L26

This snippet seems like a good opportunity to add filterable whitelist of paths as well. https://snippets.khromov.se/disable-rest-api-for-anonymous-users/