Login form does not report any issue even it is unable to connect WordPress REST API?

Bug Reports
1

Add Wordpress plugin The Off Switch, go to /wp-admin/options-general.php?page=wp-avoid-slow

Toggle On the switch “Restrict REST API to Logged-In Users”

The WordPress REST API is publicly accessible by default. Restricting it to authenticated users prevents unauthenticated enumeration of posts, users, and other data. Third-party authentication methods (OAuth, JWT, Application Passwords) are not affected.

:high_voltage: Closes unauthenticated REST API access
:warning: Off by default. Will break public REST consumers such as headless frontends, mobile apps, or any plugin that queries the REST API without authentication.

reload HivePress site (F5) and try to login (front-end link) The web form just reloads upon submission. I have not seen any error/warning inside admin area or in the log (enabled DEBUG in wp-config.php

Maybe this is not much important, maybe the code can be edit to tell user what is wrong.

3

Thanks for reporting, yes the issue is not critial but we’ll probably add some kind of front-end message for this case, currently the form renders only errors received with the back-end responses. Please consider blocking only WordPress-specific REST API endpoints if this third-party plugin has settings for blocklisting endpoints.

1 Like