What does the WordPress REST API Authentication plugin do?

The WordPress REST API Authentication plugin protects WP REST API endpoints from public access and unauthorized users using various authentication methods such as API Key Authentication, JWT Authentication, Basic Authentication, OAuth 2.0 Authentication, and third-party OAuth 2.0/OIDC/Firebase provider's token authentication methods.

How does the plugin secure WordPress login endpoints?

The plugin secures WordPress login endpoints by allowing only authenticated users, who have successfully passed the authentication process, to access the site's resources.

What are the authentication methods supported by the plugin?

The plugin supports Basic Authentication, API Key Authentication, JWT Authentication, OAuth 2.0 Authentication, and Third-Party Provider Authentication methods.

Can the plugin be used to authenticate third-party plugin API endpoints?

Yes, the plugin can be used to authenticate and secure third-party plugin API endpoints such as WooCommerce, Learndash, Buddypress, Gravity forms, and CoCart.

Does the plugin support integration with external identity providers?

Yes, the plugin supports integration with external OAuth/OIDC providers and allows authentication of WordPress REST API endpoints using the access token or JWT token provided by these providers.

Join Agency Program today.

2x Leads & 50% Cost Savings on Hosting. Join Agency Program today.

WordPress REST API Authentication

Secure and protect your WP REST API endpoints from unauthorized access with our WordPress API Auth using highly secure authentication methods.

Rating:

4.4

Active Installations:

20000+

Last Updated:

Jan 10, 2025

WordPress Version:

3.0.1 or higher

Tested up to:

6.7.2

Features Download’s trend Changelog Reviews

Secure WordPress APIs

Protect your WordPress APIs from unauthorized access.

Rest API Authentication

Authenticate and secure your WordPress endpoints.

Custom REST API Authentication

Secure your custom-built REST API endpoints.

Third-party API Integration

Integrate and secure third-party plugin API endpoints in WordPress.

Author’s Site

3.6.2

Bug fixes for file includes

3.6.1

Bug fixes

3.6.0

Code improvments.
Compatibility with WP 6.7.*

3.5.4

Added analytics logs for logged in user.
Added fix for plugin not getting deactivated after clicking Skip button.

3.5.3

Minor Bug fix

3.5.2

Major bug fix for 401 response on edit, update and delete API requests (Requires saving the “Protected REST APIs” Settings in plugin again for changes to be in effect)
Usability improvements for API Access analytics

3.5.1

Bug fix for file includes

3.5.0

Auditing and analytics for REST API access
Bug fixes for Basic Authentication
UI Updates

3.4.0

Compatibility with WordPress 6.6
UI Updates

3.3.1

Major Release with UI and UX improvements

3.3.0

Major Release with UI and UX improvements

3.2.0

Compatibility with WordPress 6.5
Fix related to the CORS issue

3.1.0

Minor UI Improvements

3.0.0

Compatibility with WordPress 6.4

2.9.1

Quick fix related to permalinks settings

2.9.0

Usability improvements
UI updates

2.8.0

WordPress 6.3 compatibility
Added support for the WordPress.com environment for API authentication
UI Improvements

2.7.0

WordPress 6.2 compatibility
UI Changes

2.6.0

Security Fixes
UI Improvements & Fixes

2.5.1

PHP Warning for incorrect JWT fixed

2.5.0

Security Fixes
UI Improvements

2.4.2

Bug Fixes

2.4.1

WordPress 6.1 compatibility
Added a JWT token endpoint for the JWT authentication method
Security fixes

2.4.0

Minor Bug Fixes

2.3.0

WordPress 6.0 compatibility
Improvised Test Configuration User experience
Minor Bug Fixes

2.2.1

Bug fixes for Test API Configuration
Bug fixes for API key configuration
UI fixes

2.2.0

UI improvements
Introduced feature for Test API Configuration
Added the Third-party plugin integration section
Bug fixes

2.1.0

Major UI updates
Usability improvements and bug fixes
Compatibility with WordPress 5.9.1
Compatibility with PHP 8+

1.6.7

Compatibility with WordPress 5.9

1.6.6

UI Updates

1.6.5

WordPress 5.8.2 compatibility
UI Changes

1.6.4

Security Improvements

1.6.3

WordPress 5.8.1 compatibility
Readme Updates

1.6.2

WordPress 5.8 compatibility
Bug Fixes
Usability Improvements
UI Updates

1.6.1

Bug Fixes
Modifications for Custom API auth capabilities

1.6.0

Minor fixes
UI updates
Usability improvements

1.5.2

Minor fixes
Remove extra code

1.5.1

Minor fixes
Security fixes

1.5.0

Minor fixes
Security fixes

1.4.2

UI updates

1.4.1

UI updates
Minor fixes

1.4.0

WordPress 5.6 compatibility

1.3.10

Allow all REST APIs to authenticate
Added postman samples
Minor Bugfix

1.3.9

Minor Bugfix

1.3.8

Added compatibility for WP 5.5

1.3.7

Bundle plan release
Minor Bugfix

1.3.6

Added compatibility for WP 5.4

1.3.5

Minor Bugfix

1.3.4

Minor Bugfix

1.3.2

Minor Bugfix

1.3.1

Minor Fixes

1.3.0

Added UI Changes
Updated plugin licensing
Added New features
Added compatibility for WP 5.3 & PHP7.4
Minor UI & feature fixes

1.2.1

Added fixes for undefined getallheaders()

1.2.0

Added UI changes for Signing Algorithms and Role-Based Access
Added Signature Validation
Minor fixes

1.1.2

Added JWT Authentication
Fixed role-based access to REST APIs
Fixed common class conflicts

1.1.1

Fixes to Create, Posts, Update Publish Posts

1.1.0

Updated UI and features
Added compatibility for WordPress version 5.2.2
Added support for accessing draft posts as per User’s WordPress Role Capability
Allowed Logged In Users to access posts through /wp-admin Dashboard

1.0.2

Added Bug fixes

1.0.0

Updated UI and features
Added compatibility for WordPress version 5.2.2

Excellent Remote Support from miniOrange

By cavsusainc on February 21, 2025

Excellent support

Horrible promotion banner

By seotaro on February 2, 2025

The plugin works fine, but it keeps showing the horrible promotional banner and doesn't give an option to hide it permanently.

Amazing support from Rohit

By 001122334455 (dkanika) on January 16, 2025

I was experiencing an issue with a 3rd party software, I emailed the team from this plugin, and within 1 day Rohit got on a call with me and was able to resolved it in a couple of minutes. Highly recommended!

Useless

By danielkray on October 28, 2024

Installed and you have to pay 199.00 for the pro.

it does offer redirect to login or selective redirect per the json redirects.

The developer tried to sell me on a pages post when i clearly asked for a method to do a redirect to login then back to origen josn url to view pdfs. So will take a page from matt mullenbergs book and fork theoir plugin and make a Secured advanced version.

Helps protect children of password-protected pages

By mjayas on October 24, 2024

I've used the (now ancient) FT Password Protect Children Pages plugin to automatically password-protect the child pages of a protected page, but that plugin leaves the content of those child pages exposed to the world via the WP REST API. This miniOrange plugin solves the problem nicely by requiring authentication to access the API.

Excellent Renewal Support

By mlgsysad on September 30, 2024

Great product, used across our Production and Dev sites. Rayees was fantastic in his support of ensuring our licences were maintained and migrated from our prior development team to in-house user authentication. We were able to achieve all of this with his wonderful assistance, at very unusual hours, which ensured we could manage changes out of customer hours. Rayees guidance made teh process simple and most importantly, ensured we had no downtime! Thankyou for the great assistance and support!

Great plugin and quality support

By jmwzict on September 17, 2024

The plugin works great and the support was even better. Quick response and quality solutions when troubleshooting an urgent incident.

Best support

By kennypurnomo on June 12, 2024

Rohit has helped me with my setup!! Thank you so much

Great Support Experience

By frankietsea on May 13, 2024

I encountered some problems regarding the third-party provider authentication setup. The response from support is quick and accurate. I love this plugin.

Amazing Support

By Abhijit Goswami (abhigt) on March 28, 2024

I've been utilizing the premium version and encountered a technical hiccup, but Vidushi Gupta from support swiftly resolved it. Despite multiple Google Meet sessions, she remained composed and guided me through the solution. I'm hopeful that my feature request will be considered for inclusion in the upcoming release.

More Reviews