search

wpexpertsio / password-protected

Password protect your WordPress site quickly and simply
https://wordpress.org/plugins/password-protected/
69 stars 63 forks source link

Website protected, REST API Unprotected but images are not accessible. #178

Open faurelia opened 3 years ago

faurelia commented 3 years ago

Hi, we are doing adjustments on the website but we want our mobile app to be still usable. So we password protect the website and enable only access to REST API. However, if we check REST API to be excluded from password protection, we are still unable to access images from the app. I think it's a bug as there is no option in the settings to allow images from REST API access.

Use case: We want the website to not be public yet while we are finalizing some stuff. Mobile app developer works on REST API and finalize their own stuff in the mobile front.

Hope this can be a new option in the future. Regards.

benhuson commented 3 years ago

Do you mean you can't access the REST media endpoint /wp-json/wp/v2/media/ to get image data?

The plugin does not block access to media files URLs in the uploads directory so that should not be an issue?