usefulteam / jwt-auth

WordPress JSON Web Token Authentication
https://wordpress.org/plugins/jwt-auth/
122 stars 48 forks source link

Not able to use wp_verify_nonce in jwt_auth_whitelist filter #48

Open przemekhernik opened 2 years ago

przemekhernik commented 2 years ago

Trying to use wp_verify_nonce in jwt_auth_whitelist filter results in infinite loop in function calls. The plugin adds determine_current_user filter, and wp_verify_nonce also uses this.

PHP Fatal error:  Uncaught Error: Maximum function nesting level of '256' reached, aborting! in /Project/wp-includes/class-wp-hook.php:287
Stack trace:
#0 /Project/wp-includes/class-wp-hook.php(287): array_keys(Array)
#1 /Project/wp-includes/plugin.php(189): WP_Hook->apply_filters('user', Array)
#2 /Project/wp-includes/formatting.php(2124): apply_filters('sanitize_user', 'user', 'user', false)
#3 /Project/wp-includes/class-wp-user.php(231): sanitize_user('user')
#4 /Project/wp-includes/pluggable.php(105): WP_User::get_data_by('login', 'user')
#5 /Project/wp-includes/pluggable.php(707): get_user_by('login', 'user')
#6 /Project/wp-includes/class-wp-hook.php(303): wp_validate_auth_cookie(false)
#7 /Project/wp in /Project/wp-includes/class-wp-hook.php on line 287