Custom API for WP vs API Bearer Auth

The API Bearer Auth plugin enables authentication for the REST API by using JWT access an refresh tokens. After the user logs in, the access and refresh tokens are returned and can be used for the next requests. Issued tokens can be revoked from within the users admin screen. See below for the endpoints. Note that after activating this plugin, all REST API endpoints will need to be authenticated, unless the endpoint is whitelisted in the api_bearer_auth_unauthenticated_urls filter (see FAQ for how to use this filter). JWT Access tokens can be formatted as JWT tokens. For this to work, you first have to create a secret and add it to the wp-config.php file. If you don’t do this, access tokens will work also, but are just random strings. To create a random secret key, you can do for example: base64_encode(openssl_random_pseudo_bytes(64)); And then add the result to wp-config: define('API_BEARER_JWT_SECRET', 'mysecretkey'); If you have problems, you can verify your JWT tokens at: https://jwt.io/ Revoke tokens This plugin adds a column to the users table in de admin where you can see when a token expires. You can also revoke tokens by selection the “Revoke API tokens” from the bulk actions select box. API endpoints Note that all endpoints expect JSON in the POST body. Login Endpoint: POST /api-bearer-auth/v1/login Request body: Note: client_name is optional. But if you use it, make sure to use it as well for the refresh call! {"username": "my_username", "password": "my_password", "client_name": "my_app"} Response: { "wp_user": { "data": { "ID": 1, "user_login": "your_user_login", // other default WordPress user fields } }, "access_token": "your_access_token", "expires_in": 86400, // number of seconds "refresh_token": "your_refresh_token" } Make sure to save the access and refresh token! Refresh access token Endpoint: POST /api-bearer-auth/v1/tokens/refresh Request body: Note: client_name is optional. But if you did use it for the login call, make sure to use it here as well! {"token": "your_refresh_token", "client_name": "my_app"} Response success: { "access_token": "your_new_access_token", "expires_in": 86400 } Response when sending a wrong refresh token is a 401: { "code": "api_api_bearer_auth_error_invalid_token", "message": "Invalid token.", "data": { "status": 401 } } Do a request After you have the access token, you can make requests to authenticated endpoints with an Authorization header like this: Authorization: Bearer Note that Apache sometimes strips out the Authorization header. If this is the case, make sure to add this to the .htaccess file: RewriteCond %{HTTP:Authorization} ^(.*) # Don't know why, but some need the line below instead of the RewriteRule line # SetEnvIf Authorization .+ HTTP_AUTHORIZATION=$0 RewriteRule ^(.*) - [E=HTTP_AUTHORIZATION:%1] If you are not logged in or you send an invalid access token, you get a 401 response: { "code": "api_bearer_auth_not_logged_in", "message": "You are not logged in.", "data": { "status": 401 } } Important update Update immediately if you’re using a version below 20200807. Before this version all access tokens were updated when calling the refresh callback. If you are affected by this the fastest solution is to execute this query: update wp_user_tokens set access_token_valid = NOW(); This will invalidate all access tokens. This means that all users need to refresh their access token and will get a new access token and a unique one this time. A big thank to @harchvertelol for reporting this and suggesting the fix as well!

Custom API for WP plugin plugin allows you to create no code custom REST endpoints / Custom APIs in WordPress. With interactive Graphical User Interface (GUI) fetch any data from WordPress database tables like users, posts, custom tables or any 3rd-party plugin’s table. You can also use HTTP request methods like POST, PUT, DELETE (Insert, Update, Delete) data with these created Custom endpoint / Custom REST routes. You can also connect any external APIs and platforms to fetch the data and display data on WordPress frontend . You can use your design (custom HTML, CSS and JS), post data on third-party platforms on any WordPress events (user creation, Woocommerce events, form submission, membership purchase etc) via WordPress hooks. You can easily interact with the WordPress database to perform CRUD operations on data using the custom endpoints created (generated) using Connect to external APIs | Custom endpoints for WP. Custom API for WP plugin takes care of writing the complex SQL queries to fetch/update data and provide you with a very simple User Interface to create or generate custom REST endpoints. This plugin also provides the filter operations in which you can filter the data you want to show in the API endpoint response. 🆓FREE Plan Features Unlimited GET APIs: Create as many GET APIs as you need to fetch data from WordPress tables. One Advanced API using SQL: Build a single advanced API with custom SQL queries to perform CRUD (GET, POST, PUT, DELETE) operations. External API Integration (JSON Only): Connect to third-party APIs that return JSON data. Hooks Support for External APIs: Use hooks to trigger and execute connected external APIs. 💲PREMIUM Plan Features Unlimited RESTful APIs: Create APIs with all HTTP methods – GET, POST, PUT, DELETE. Custom Filters on API Data: Apply filters to refine data retrieved in Custom APIs. Customizable API Response: Format API responses to match your exact requirements in custom APIs. Role-Based Access Control: Restrict access to custom APIs based on user roles. Conditional Logic & Filters: Add logic-based rules and conditions to custom APIs. Use query parameters to filter API responses on the go. Unlimited Advanced APIs with SQL: Build complex and fully customized APIs using SQL queries to perform CRUD (GET, POST, PUT, DELETE) operations. Customizable API Response: Format API responses to match your exact requirements in custom APIs. Role-Based Access Control: Restrict access to custom APIs based on user roles. Unlimited External API Integrations: Connect to as many third-party APIs as needed that return JSON, XML, GRAPHQL or SOAP responses. Hooks Support for External APIs: Use hooks to trigger and execute connected external APIs. Shortcode & Template Tag Display: Easily display data from external API on your frontend using shortcodes or template tags. Secure Authentication for External APIs: Supports OAuth2, Bearer Tokens, and API Key authentication methods. Dependent API: Dynamically retrieve a token from an external API to authenticate requests to the data API. Third-party/External API Integration into WordPress This plugin allows you to integrate any external or third-party REST API endpoints into WordPress very easily with the help of our interactive and simple GUI within seconds. With this function of our plugin, you can fetch data to your WordPress (WooCommerce) site or you can use it to fetch data and process it according to your needs. These integrations can also be done on third-party plugin events like form submission using Elementor, Wpforms, Gravityforms etc. and also payment status or subscription status based on transactions done via payment gateways like that provided by WooCommerce, Wpforms, Gravityforms or any other services. External API integrations can be done on any event of WordPress like user registration, user membership level change or any other using plugin hooks. WooCommerce product data can be synced with any external/third-party API provider(Supplier) on a real-time basis with our plugin. This feature also provides the capability to register or login users to third-party platforms by making an API request to the third-party platforms. Data display on front end using shortcode or template tag fetched from external API endpoints. Any kind of external APIs supporting JSON, XML, SOAP, GraphQL can be connected with authentication methods like OAuth, JWT, Bearer, API Key or even custom API authentication. Use Cases Access custom data of the WordPress site into your mobile application or web clients via custom REST API Endpoints. Create easy Custom REST Routes to Create, Read, Update and Delete (CRUD) WordPress content from client-side JavaScript or external applications. Interact with any standard database schema/ table or your custom-built schema/ table to fetch/ update/ delete data using the custom API endpoints. Connect two WordPress sites or connect your WordPress site with a website built in any framework and Get/Update/Insert/Delete (CRUD) data of one website to another website with the help of Custom API and feasibility of connection with External APIs / Custom Endpoints developed in the external Website. Connect with External Rest API Routes to display data on your website or process the data received from External Endpoint. Integrate External/third-party REST API endpoints with third-party plugin’s payment gateways like that of WooCommerce, Wpformsor any other custom gateway such that the API can be called automatically based on the payment status. Integrate External/ third-party REST API endpoints with custom/ third-party plugins’ forms like that of Wpforms, Elementor, Gravityforms etc such that the external APIs can be called on these forms submission or any related events to perform fetch/update/delete operation based on API endpoints. Sync third-party/external API provider’s (Supplier’s) API Inventory data into WooCommerce and display them in the product feed on a real-time basis. [More detials] Integrate external APIs into WooCommerce – If you have a Woocommerce store and want to update the data like order creation, order status, and user profile update on a third-party platform in real-time, then a solution can be provided using our plugin. Data display using shortcode – Fetch data from external API with security and display that on WordPress front-end pages using the shortcodes with customized design. Add-Ons WooCommerce Products sync via External API | Import products in WooCommerce using Supplier APIs If you have a WooCommerce store and want to sync (add/update/delete) the products from the external inventory warehouse/ store’s platform via APIs then it can be using the CUSTOM API plugin along with our Woocommerce products sync from external APIs. Following are the key features – Data can be synced automatically after a certain specified period. (For example, every 4 hours a day). All the product details like SKU, name, description, price, stock status, images, custom attributes and variant productions can be updated along with other custom attributes as well. Sync can be done in the background such that customers using your WP site are not affected. Data syncing can also be done by clicking on the sync button manually in the User Interface. WooCommerce product images can also be added or updated with ease based on external API data. No extra work to import and export CSV/ TXT files manually. API Integration will do the job automatically. This plugin supports complete integrations for the following – Sync Amrod catalogue to WooCommerce Sync S&S Activewear products to WooCommerce Sync products and orders from Shopify to WooCommerce Import products from Parts Unlimited to WooCommerce Import products from Parts Canada to WooCommerce Import products from Barron to WooCommerce Zoho Integration with WordPress If you have a WordPress site and want to connect it to your Zoho applications like Zoho CRM, Zoho connect, Zoho Subscription, Zoho Inventory etc to perform operations like sync real-time data between these platforms, which involves user profile sync, operate on WordPress or assign membership to the user based on his Zoho subscription etc. With this integration, any Zoho APIs and webhooks can be integrated to perform real-time sync. WordPress Automate using Webhooks This plugin can be made compatible to automate WordPress events with external API and webhook to synchronize data between WordPress and external applications. For example – If you have a WordPress/Woocommerce site and want to sync the user data, product data, posts, and membership data with external platforms, inventories and CRM like Zoho, Hubspot etc., then this plugin can be extended with an add-on to achieve this. These solutions can be used additionally along with the plugin. To know more details, contact us at [email protected] and let us know your requirements. Type of Data which you can retrieve with Custom Endpoints WP Users and User Meta. WP Roles and Capabilities. WP Posts, Pages and custom post types. WP Options. WP Taxonomy. WooCommerceproducts, WordPress Membership plugins data. Custom data, Custom posts, Custom parameters, Custom fields and many more. Any third-party plugins or custom table data can be fetched/updated using these custom API endpoints. External Service This plugin may call login.xecurify.com (our own service) in case user wants to register or share any queries or feedback with us and this is completely optional. Privacy Policy This plugin does not store any user data, and all the data remains on the user’s end only.