API Bearer Auth vs Contact Form to Any API

The API Bearer Auth plugin enables authentication for the REST API by using JWT access an refresh tokens. After the user logs in, the access and refresh tokens are returned and can be used for the next requests. Issued tokens can be revoked from within the users admin screen. See below for the endpoints. Note that after activating this plugin, all REST API endpoints will need to be authenticated, unless the endpoint is whitelisted in the api_bearer_auth_unauthenticated_urls filter (see FAQ for how to use this filter). JWT Access tokens can be formatted as JWT tokens. For this to work, you first have to create a secret and add it to the wp-config.php file. If you don’t do this, access tokens will work also, but are just random strings. To create a random secret key, you can do for example: base64_encode(openssl_random_pseudo_bytes(64)); And then add the result to wp-config: define('API_BEARER_JWT_SECRET', 'mysecretkey'); If you have problems, you can verify your JWT tokens at: https://jwt.io/ Revoke tokens This plugin adds a column to the users table in de admin where you can see when a token expires. You can also revoke tokens by selection the “Revoke API tokens” from the bulk actions select box. API endpoints Note that all endpoints expect JSON in the POST body. Login Endpoint: POST /api-bearer-auth/v1/login Request body: Note: client_name is optional. But if you use it, make sure to use it as well for the refresh call! {"username": "my_username", "password": "my_password", "client_name": "my_app"} Response: { "wp_user": { "data": { "ID": 1, "user_login": "your_user_login", // other default WordPress user fields } }, "access_token": "your_access_token", "expires_in": 86400, // number of seconds "refresh_token": "your_refresh_token" } Make sure to save the access and refresh token! Refresh access token Endpoint: POST /api-bearer-auth/v1/tokens/refresh Request body: Note: client_name is optional. But if you did use it for the login call, make sure to use it here as well! {"token": "your_refresh_token", "client_name": "my_app"} Response success: { "access_token": "your_new_access_token", "expires_in": 86400 } Response when sending a wrong refresh token is a 401: { "code": "api_api_bearer_auth_error_invalid_token", "message": "Invalid token.", "data": { "status": 401 } } Do a request After you have the access token, you can make requests to authenticated endpoints with an Authorization header like this: Authorization: Bearer Note that Apache sometimes strips out the Authorization header. If this is the case, make sure to add this to the .htaccess file: RewriteCond %{HTTP:Authorization} ^(.*) # Don't know why, but some need the line below instead of the RewriteRule line # SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0 RewriteRule ^(.*) - [E=HTTP_AUTHORIZATION:%1] If you are not logged in or you send an invalid access token, you get a 401 response: { "code": "api_bearer_auth_not_logged_in", "message": "You are not logged in.", "data": { "status": 401 } } Important update Update immediately if you’re using a version below 20200807. Before this version all access tokens were updated when calling the refresh callback. If you are affected by this the fastest solution is to execute this query: update wp_user_tokens set access_token_valid = NOW(); This will invalidate all access tokens. This means that all users need to refresh their access token and will get a new access token and a unique one this time. A big thank to @harchvertelol for reporting this and suggesting the fix as well!

Contact Form 7 to Any API lets you send form submissions directly to any CRM, Webhook, marketing platform or REST API with complete control over payloads, endpoints, headers and authentication. Built for developers, agencies, and technical teams who need flexible, secure WordPress API and Webhook integrations without extra middleware. All data stays private within WordPress until it’s successfully sent to your chosen API. Video Demo: Key Features Send CF7 Leads to Remote API’s such as CRM and other External API using POST/GET Create up to 5 API Connections Supports Simple & Fixed Format of JSON Supports Basic Auth Supports Bearer Auth API Logs Management with submitted data and API response Auto Delete Logs (purge logs older than configurable number of days) Email Notifications on API Failure Save Contact Form 7 form submitted data to the database Export Contact Form 7 Data in CSV, EXCEL, PDF, Print Single Or Multiple delete CF7 entries Conditional Field Support (Equals / Not Equals) File input supported – Uploaded file will convert into BASE64 and send to API Multisite Compatible WPML Compatible Predefined Tags support Send data to multiple API (PRO) Support Multi Level or Any Format of JSON (PRO) Send attachments to any API (PRO) Option to Choose when to send data to API – Before CF7 mail sent OR After mail sent (PRO) Multi File Upload Support (PRO) Compatible with Multiline files upload for contact form 7 Plugin (PRO) Option to choose Numerical Fields / Integer Fields (PRO) Option to choose Multiple File upload fields (PRO) Retry Failed API Logs (Auto and Manual Retry) (PRO) Bulk Retry failed API calls (PRO) Advanced Email Notifications on API Failure (PRO) Priority Support (PRO) Paid plugin customization support for JWT Token Integration with Any API (Contact us) Paid plugin customization support for OAuth 2.0 API Integration (Contact us) Paid Plugin customization support for any API (Contact us) WPForms to Any API Plugin – (Plugin for WPForm Users – Connect WPForm to Any API) Upgrade to PRO for Advanced Integrations Unlock advanced flexibility and full control with Contact Form 7 to Any API PRO Unlimited API Connections per site Multi-level / Any JSON Structure support Multiple File Upload Field Support Define Integer Fields – map numeric fields precisely Retry Failed API Logs – auto and manually retry any failed API call directly from the log screen Bulk Retry – re-send multiple failed API calls at once with a single click Advanced Email Notifications on API Failure – send failure alerts to multiple recipients Priority Support for faster assistance Price: $29.99/year Upgrade to PRO Optional OAuth 2.0 and JWT PRO Add-On For APIs that require advanced authorization, our PRO Add-On ($99.99) provides: OAuth 2.0 and JWT token authentication Automatic access/refresh token management JWT Token Integration with Any API Perfect for enterprise or expiring token setups Get the Add-On Set Your Own Header Request Parameters Define custom header parameters to match your integration requirements. Examples: Authorization: MY_API_KEY Authorization: Bearer xxxxxxx Authorization: Basic xxxxxxx Content-Type: application/json Basic and Bearer authentication can be configured directly in the header input fields. Supported CRMs and APIs Connect Contact Form 7 with 200+ CRM and marketing platforms: Twilio WhatsApp — Watch Video Brevo — Watch Video Mailcoach — Watch Video Pipeline CRM — Watch Video Mailchimp — Watch Video Mailbluster — Watch Video Zapier — Watch Video HubSpot CRM — Watch Video Salesforce CRM Pipedrive — Watch Video Freshsales — Watch Video Airtable — Watch Video Capsule — Watch Video EngageBay — Watch Video OnePage CRM Clio Grow — Watch Video Close CRM — Watch Video Systeme CRM — Watch Video Insightly CRM — Watch Video Twenty CRM — Watch Video Agile CRM — Watch Video Sage CRM Odoo CRM/ERP System Fluent CRM Lead Post API Virtuagym API Pilotsolution OS Ticket Samdock CRM Mikrowisp Bats CRM FRS Labs API Get Cobra by ArcaMax Network Worldfilia SingleOps GorillaDesk API Sembark API Superoffice CRM Flowdesk JobAdder Unlatch CRM Mail2many Workato Jetbrains / Intellij Space API Fincenfetch Lead Docket Agendor API Lead IM Israel Personio Kala CRM Israel Pixxicrm easybizy sell.do Events500 SendPulse CRM And many more Browse all integration guides: Blog | Video Tutorials Our Other Plugins WPForm to Any API WPForm to Any API is most powerful plugin to send WPForm data to any third party services. It can be use to send data to CRM Or any REST API. Easy to use and User friendly settings Support Contact Form 7 to Any API is developed and supported by IT Path Solutions. If you have questions or encounter issues, visit our Support Forum or contact [email protected]. Your feedback helps us improve and expand this plugin for the entire WordPress community. We also welcome: Bug and documentation reports Feature suggestions Translation contributions How You Can Support WordPress grows through community, and your help makes a difference. Report Bugs or Issues: Found a problem? Report it using the official guide. Fix or Suggest Docs Updates: Share corrections or suggestions on the Support Forum. Report Security Concerns: Follow the WordPress Security Reporting Guide. Suggest Features or Improvements: Have ideas? Submit them here. Contribute to Translations: Help translate the plugin on WordPress Translate. Explore our other plugins or visit WordPress Gems to check out what we do. License This plugin is licensed under the GNU General Public License v2 or later. https://www.gnu.org/licenses/gpl-2.0.html