Wordpress Restful API Auth

1.0 Why does it not work?

 DELETE | http://127.0.0.1/wordpress.002/wp-json/wp/v2/smokes/20

?

1 2 3 4 5 6 7

{     "code": "rest_cannot_delete",     "message": "Sorry, you are not allowed to delete this post.",     "data": {         "status": 401     } }

　　返回401 rest_cannot_delete

 

2.0 JWT Authentication for WP REST API

 要用JWT做Crosssite的身份驗證。

 

3.0 Config

wp-config.php

define( 'WP_ENVIRONMENT_TYPE', 'local' );
define( 'JWT_AUTH_SECRET_KEY', 'wordpress002' );
define( 'JWT_AUTH_CORS_ENABLE', true );

 

.htaccess

?

1 2 3

RewriteCond %{HTTP:Authorization} ^(.*) RewriteRule ^(.*) - [E=HTTP_AUTHORIZATION:%1] SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1

 

4.0 Get Token

[POST] http://127.0.0.1/wordpress.002/wp-json/jwt-auth/v1/token

params: username | password

 

5.0 Use Token

[Updated: 2025-01-03]

Authorization: Bearer xxxx
Content-Type: application/json

 

完成!