search

WP-API / OAuth2

Connect applications to your WordPress site without ever giving away your password.
GNU General Public License v2.0
172 stars 42 forks source link

Personal access tokens #43

Closed almirbi closed 7 years ago

almirbi commented 7 years ago

Added a button on the application screen that generate an access token. #11

rmccue commented 7 years ago

I'm going to iterate on this in a PR-on-this-PR.

rmccue commented 7 years ago

Actually, I've just realised that this generates tokens for a specific application. While that might be useful for local testing, it's not what Personal Access Tokens are intended for.

The idea of Personal Access Tokens is that they allow individual users to give credentials out to applications without needing to register applications at all. On a large site for example, users may not have access to register applications, but should be able to generate PATs. There's also the use case where you're working on a small application for your own use (e.g. a CLI helper) and don't need the overhead of all the application flow, since it's a trusted app.

Given that, I don't think this fulfills the need for PATs, so I'm going to close this out to work on an alternative approach instead.