search

wpexpertsio / password-protected

Password protect your WordPress site quickly and simply
https://wordpress.org/plugins/password-protected/
69 stars 63 forks source link

HTML REST blocked #147

Open TheMightyPope opened 5 years ago

TheMightyPope commented 5 years ago

I'm not sure if it was the recent Wordpress update, or the recent Passworde-protected update, but with WP version 5.2.3 and password-protected version 2.2.5, it appears REST HTML access is also protected, ignoring the checkbox which disabled this.

A specific request that fails is: POST url: Header: Authorization Basic: .,... Body (JSON): {"grant_type":"refresh_token","refresh_token":"...."}

This happens for all my sites. IF I disable password-protected on any of my site, that site starts working again. When I re-enable password-protected it fails.

Note: To be clear I have the checkbox Allow REST API Access checked.