wordpress-mobile / WordPress-Android

WordPress for Android
http://android.wordpress.org
GNU General Public License v2.0
2.96k stars 1.31k forks source link

WordPress app: Enable REST API #20896

Open fluiddot opened 4 months ago

fluiddot commented 4 months ago

The WP app only supports communicating with the site using XMLRPC. Following a negative app review seems that XMLRPC could be a concerning point when using the app due to security reasons.

Cool app, and useful functionality for doing limited editing on the run, but XMLRPC is wildly insecure and this app needs two factor authentication for me to use it securely. Will upgrade this review when it has this functionality!

Expected behavior

The WP app connects to sites using REST API.

Actual behavior

The WP app connects to sites using XMLRPC.

Steps to reproduce the behavior

N/A

Tested on Samsung Galaxy S20 FE 5G, Android 13, WordPressAndroid 25.0
dangermattic commented 4 months ago

Thanks for reporting! 👍