WordPress REST API Basic Auth / Authentication Method involves the REST APIs access on validation against the API token generated based on the user’s username,password and on basis of client credentials. Each time a request to access the API will be made, the authentication will be done against that token, and on the basis of the verification of the API token, the resources for that API request will be allowed to access.
1. By User credentials:
Suppose you have one Android/IOS Blog Application and you have given capabilities to your users to post their personal feeds or blogs using mobile applications. In this case, your mobile application requests should be authenticated. Basic Authentication with username and password method appropriate for this situation where your users will be in Authorization Header. It will authenticate the user's request and assign blogs to them respectively.
2. By Client credentials:
Suppose you have one Android/IOS Blog Application and you want to sign up new users from the client application. Now, In this case, you can use Basic Authentication with username: password but you don't want to send admin users into your header and at each request, there will be two users present. First one Admin user (In Authorization header) and the other one new user which is going to create. In that case, you should use Basic Authentication with a client ID and client secret where your admin user is also safe, and at each request, you don't have to put two users. Hence security is not a concern.
Request: GET https://<domain-name>/wp-json/wp/v2/posts
Header: Authorization : Basic base64encoded <username:password>
Sample request: GET https://<domain-name>/wp-json/wp/v2/posts
Header: Authorization : Basic eGw2UllOdFN6WmxKOlNMRWcwS1ZYdFVrbm5XbVV2cG9RVFNLZw==
Example => username : testuser and password : password@123
base64_encode(‘testuser:password@123’) will result into
‘eGw2UllOdFN6WmxKOlNMRWcwS1ZYdFVrbm5XbVV2cG9RVFNLZw==’ as output.
Request: GET https://<domain-name>/wp-json/wp/v2/posts
Header: Authorization : Basic base64encoded <client-id:client-secret>
Sample request: GET https://<domain-name>/wp-json/wp/v2/posts
Header: Authorization : Basic eGw2UllOdFN6WmxKOlNMRWcwS1ZYdFVrbm5XbVV2cG9RVFNLZw==
Example => Client ID : pSYQsKqTndNVpNKcnoZd and Client Secret = SrYPTViHdCbvkWyTfWrSltavTMeJjaOHCye
base64_encode(‘pSYQsKqTndNVpNKcnoZd:SrYPTViHdCbvkWyTfWrSltavTMeJjaOHCye’) will results into
cFNZUXNLcVRuZE5WcE5LY25vWmQ6U3JZUFRWaUhkQ2J2a1d5VGZXclNsdGF2VE1lSmphT0hDeWU= as output.Follow the steps below to make REST API request using Postman:
Mail us on oauthsupport@xecurify.com for quick guidance(via email/meeting) on your requirement and our team will help you to select the best suitable solution/plan as per your requirement.
Need Help? We are right here!
