Rest API security without authentication on external requests

Question

I'm working with the WordPress REST API for the first time.

The idea behind the project is that once a POST request has been made to a custom endpoint, the data is escaped/cleaned up and then saved into the database through WP's own functions. I'm basically just collecting feedback submitted through a form on a site ( plus many other sites ) and send the data to another site (my own one).

How would you handle security in this case? I can't use oauth. What I'd like to do is just make sure the request has been genuinely made from that form.

Any ideas?

Erick Jimenez · Accepted Answer · 2016-07-14 17:14:56Z

1

I recommend you use token authentication, use a signed token to validate the identity of the user who make a request. In this case JWT, you can choose the PHP JWT library you feel better using.

answered Jul 14, 2016 at 17:14

Erick Jimenez

3682 silver badges13 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Rest API security without authentication on external requests

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related