4 articles
Every article tagged REST API, newest first. Search all articles
Security7 min read
Secure WordPress REST API endpoints: permission callbacks that hold up
A WordPress REST API permission_callback should answer one question: can this authenticated user perform this specific action on this specific object? Pair that check with the right authentication method, strict argument validation, a narrow response shape, and limits on expensive or sensitive requests.
Security7 min read
Application passwords for safer WordPress integrations
WordPress application passwords let an external system authenticate without storing a user's main login password. Use a dedicated low-privilege user, send the credential only over HTTPS, and give each integration its own password so you can revoke it without affecting the others.
Performance8 min read
WordPress REST API performance: find slow endpoints and make them fast
WordPress REST API performance improves when you measure the request first, reduce the work each endpoint does, and cache only responses that are safe to share. Start with time to first byte, then trace database queries, remote HTTP calls, response building, authentication and cache behavior before changing code.
Development6 min read
Headless WordPress examples and architectural patterns
Practical headless WordPress examples divide the platform into two separate systems: WordPress acting solely as a structured content repository, and an external frontend framework rendering the user interface.