wordpress-mobile / WordPress-iOS

WordPress for iOS - Official repository
http://ios.wordpress.org/
GNU General Public License v2.0
3.66k stars 1.11k forks source link

WordPress app: Enable REST API #23264

Open fluiddot opened 4 months ago

fluiddot commented 4 months ago

The WP app only supports communicating with the site using XMLRPC. Following a negative app review seems that XMLRPC could be a concerning point when using the app due to security reasons.

Cool app, and useful functionality for doing limited editing on the run, but XMLRPC is wildly insecure and this app needs two factor authentication for me to use it securely. Will upgrade this review when it has this functionality!

Expected behavior

The WP app connects to sites using REST API.

Actual behavior

The WP app connects to sites using XMLRPC.

Steps to reproduce the behavior

N/A

Tested on iPhone 11, iOS 17.0.2, WordPress iOS 25.0
dangermattic commented 4 months ago

Thanks for reporting! 👍

av-feaster commented 2 months ago

can you tell me where are the api endpoints to be updated?