WordPress-iOS icon indicating copy to clipboard operation
WordPress-iOS copied to clipboard

WordPress app: Enable REST API

Open fluiddot opened this issue 1 year ago • 2 comments

The WP app only supports communicating with the site using XMLRPC. Following a negative app review seems that XMLRPC could be a concerning point when using the app due to security reasons.

Cool app, and useful functionality for doing limited editing on the run, but XMLRPC is wildly insecure and this app needs two factor authentication for me to use it securely. Will upgrade this review when it has this functionality!

Expected behavior

The WP app connects to sites using REST API.

Actual behavior

The WP app connects to sites using XMLRPC.

Steps to reproduce the behavior

N/A

Tested on iPhone 11, iOS 17.0.2, WordPress iOS 25.0

fluiddot avatar May 28 '24 10:05 fluiddot

Thanks for reporting! 👍

dangermattic avatar May 28 '24 10:05 dangermattic

can you tell me where are the api endpoints to be updated?

av-feaster avatar Jul 10 '24 13:07 av-feaster