JWT Authentication for WP REST APIs

JWT Authentication for WP REST APIs plugin prevents unauthorized access to your WordPress APIs. It reduces potential attack by securing the WP APIs.

This plugin supports 5 methods: i) JWT Token based authentication, ii) authentication through user credentials passed as an encrypted token, iii) API Key authentication, iv) OAuth 2.0 Authentication protocol and v) authentication via JWT token obtained from the external OAuth/OpenId providers which include Google, Facebook, Azure, AWS Cognito, Apple etc and also from Firebase.

You just have to select your WP REST API Authentication Method in the plugin. Based on the method you have selected, you will get the authorization code/token after sending the token request. Access your REST API with the code/token you received in the previous step.

Yes, the plugin provides Basic authentication with the following 2 methods – a.) WP Username & Password b.) Client Credentials. The plugin provides you with more security for Basic auth token validation using a highly secure HMAC algorithm.

Yes, the plugin supports the authentication for custom-built REST endpoints and Third-Party plugin APIs.

Yes, this plugin by default disables all the WP REST APIs, which can only be accessed with allowed authentication and authorization, but it provides a feature where you can choose which particular endpoints you want to disable and which ones to make accessible publicly.

This plugin provides this HTTP POST endpoint wp-json/api/v1/token, also called as WordPress login API endpoint, in which you can pass the user’s WordPress credentials and this endpoint will validate the user and return you with the appropriate response. The plugin also supports the WP REST API authentication and authorization of WordPress users’ register API.

This plugin provides you with an WP REST API Authentication method called the ‘Third Party Provider’ authentication method, in which the JWT token or access token is obtained from external identities(OAuth/OIDC/JWT/JWKS providers) like Firebase, Okta, Azure, Keycloak, ADFS, AWS Cognito, Google, Facebook, Apple, etc., can be passed along with API request in the header, and the plugin validates that JWT / access token directly from these external sources/providers.

This plugin provides a way to bypass Woocommerce security and instead authenticate APIs using the authentication methods, hence improving the security and preventing Woocommerce credentials from getting compromised. The authentication token passed in the API request will validate the user and result in user-specific data only. For more information, please contact us at apisupport@xecurify.com

To achieve the auto-login and session sharing, we have another plugin WordPress Login & Register using JWT

Yes, with the premium plan, the plugin provides the REST API endpoint for the complete forgot password/password reset functionality securely.