feature: Expect Protect endpoints to support configuration request methods (all / get / post / put / delete / ...)

[ZhongxuYang]

This plugin is awesome! But I have a little suggestion:

Expect Protect endpoints to support configuration request methods (all / get / post / put / delete / ...), because some wordpress plugins use request methods to distinguish different services, not just paths. 😊

---

Usage Scenario:

• The get method of /wp-json/forum does not validate the user, but needs to validate the user for put/post/delete.

[nicumicle]

@ZhongxuYang this is a really cool feature. Thanks for suggesting it!

[ZhongxuYang]

@nicumicle Hi there! I just uploaded the Zip file to test configuring request methods on Protect endpoints. Here are my test results:

1. After configuring request methods, validation still occurs for all request methods
2. Can"t disable validation by setting "Protect endpoints enabled: No"

---

I understand this feature is still under development - just wanted to make sure you"re aware of these issues. Thanks for your quick response on this! 😊

[nicumicle]

Hi @ZhongxuYang ,

I did some tests, and found a small bug.
Now, it should be fixed. I even added a couple of integration tests to ensure that most of the scenarios are covered.

Can you please give it another try?
Thank you.

[ZhongxuYang]

I tried and it still didn't work. Still the above two questions:

1. After configuring request methods, validation still occurs for all request methods
2. Can"t disable validation by setting "Protect endpoints enabled: No"

Configure

Browser

---

I have doubts if the plugin old version data has an effect on this, so I tried to reinstall it after uninstalling the plugin, but it still didn't work.

[nicumicle]

This error is generated by the "All WordPress endpoints checks for JWT Authentication" option from General settings.

If this option is enabled, the plugins will search for a JWT in the query parameters/headers/Sesstion/Cookies.

You can read more here.