WordPress/wp-includes/rest-api/endpoints
TimothyBlynJacobs d5ebe12f11 REST API: Introduce Application Passwords for API authentication.
In WordPress 4.4 the REST API was first introduced. A few releases later in WordPress 4.7, the Content API endpoints were added, paving the way for Gutenberg and countless in-site experiences. In the intervening years, numerous plugins have built on top of the REST API. Many developers shared a common frustration, the lack of external authentication to the REST API.

This commit introduces Application Passwords to allow users to connect to external applications to their WordPress website. Users can generate individual passwords for each application, allowing for easy revocation and activity monitoring. An authorization flow is introduced to make the connection flow simple for users and application developers.

Application Passwords uses Basic Authentication, and by default is only available over an SSL connection.

Props georgestephanis, kasparsd, timothyblynjacobs, afercia, akkspro, andraganescu, arippberger, aristath, austyfrosty, ayesh, batmoo, bradyvercher, brianhenryie, helen, ipstenu, jeffmatson, jeffpaul, joostdevalk, joshlevinson, kadamwhite, kjbenk, koke, michael-arestad, Otto42, pekz0r, salzano, spacedmonkey, valendesigns.
Fixes #42790.

Built from https://develop.svn.wordpress.org/trunk@49109


git-svn-id: http://core.svn.wordpress.org/trunk@48871 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2020-10-08 22:14:06 +00:00
..
class-wp-rest-application-passwords-controller.php REST API: Introduce Application Passwords for API authentication. 2020-10-08 22:14:06 +00:00
class-wp-rest-attachments-controller.php General: Replace older-style PHP type conversion functions with type casts. 2020-10-08 21:15:13 +00:00
class-wp-rest-autosaves-controller.php Docs: Remove an empty line between `@param` and `@return` tags, per the documentation standards. 2020-06-20 11:18:09 +00:00
class-wp-rest-block-directory-controller.php General: Replace older-style PHP type conversion functions with type casts. 2020-10-08 21:15:13 +00:00
class-wp-rest-block-renderer-controller.php General: Replace older-style PHP type conversion functions with type casts. 2020-10-08 21:15:13 +00:00
class-wp-rest-block-types-controller.php i18n: Ensure block type strings in the REST API end with a full stop. 2020-09-16 19:23:07 +00:00
class-wp-rest-blocks-controller.php Role/Capability: Use meta caps `edit_post`, `read_post`, and `delete_post` directly. 2020-05-23 15:24:07 +00:00
class-wp-rest-comments-controller.php Docs: Consistently use third-person singular verbs for various filter descriptions, per the documentation standards. 2020-08-11 00:34:08 +00:00
class-wp-rest-controller.php REST API: Extract `WP_REST_Controller::get_endpoint_args_for_item_schema()` to a standalone function. 2020-09-07 02:37:07 +00:00
class-wp-rest-plugins-controller.php REST API: Install plugin translations after the plugin install. This only installs for the plugin in question, not all plugins. 2020-07-27 18:31:06 +00:00
class-wp-rest-post-statuses-controller.php Docs: Improve inline comments per the documentation standards. 2020-01-29 00:45:18 +00:00
class-wp-rest-post-types-controller.php REST API: Issue a _doing_it_wrong when registering a route without a permission callback. 2020-07-21 12:03:05 +00:00
class-wp-rest-posts-controller.php Docs: Consistently use third-person singular verbs for various filter descriptions, per the documentation standards. 2020-08-11 00:34:08 +00:00
class-wp-rest-revisions-controller.php Role/Capability: Use meta caps `edit_post`, `read_post`, and `delete_post` directly. 2020-05-23 15:24:07 +00:00
class-wp-rest-search-controller.php Docs: Add `@since` notes for the `$id` parameter of REST API search controller accepting a string. 2020-10-03 01:22:11 +00:00
class-wp-rest-settings-controller.php General: Remove “whitelist” and “blacklist” in favor of more clear and inclusive language. 2020-06-22 17:26:13 +00:00
class-wp-rest-taxonomies-controller.php Docs: Improve inline comments per the documentation standards. 2020-01-29 00:45:18 +00:00
class-wp-rest-terms-controller.php Taxonomy: Allow for `wp_count_terms( $args )` signature, making passing a taxonomy optional. 2020-08-21 22:32:06 +00:00
class-wp-rest-themes-controller.php Docs: Consistently use third-person singular verbs for various filter descriptions, per the documentation standards. 2020-08-11 00:34:08 +00:00
class-wp-rest-users-controller.php Docs: Consistently use third-person singular verbs for various filter descriptions, per the documentation standards. 2020-08-11 00:34:08 +00:00