Remove reauth endpoint. It's not going to work the way we want it to. If clients need to log out (like a browser), they can clear the sessions per browser. Also returns JSON error when auth is not returned correctly.
This commit is contained in:
parent
8da19e4dae
commit
9e2f0f55d8
|
@ -41,10 +41,6 @@ class WC_API_Authentication {
|
||||||
return new WP_User( 0 );
|
return new WP_User( 0 );
|
||||||
}
|
}
|
||||||
|
|
||||||
if ( '/reauth' === untrailingslashit( WC()->api->server->path ) ) {
|
|
||||||
$this->exit_with_unauthorized_headers();
|
|
||||||
}
|
|
||||||
|
|
||||||
try {
|
try {
|
||||||
if ( is_ssl() ) {
|
if ( is_ssl() ) {
|
||||||
$keys = $this->perform_ssl_authentication();
|
$keys = $this->perform_ssl_authentication();
|
||||||
|
@ -114,8 +110,7 @@ class WC_API_Authentication {
|
||||||
$auth_message = __( 'WooCommerce API. Use a consumer key in the username field and a consumer secret in the password field', 'woocommerce' );
|
$auth_message = __( 'WooCommerce API. Use a consumer key in the username field and a consumer secret in the password field', 'woocommerce' );
|
||||||
header( 'WWW-Authenticate: Basic realm="' . $auth_message . '"' );
|
header( 'WWW-Authenticate: Basic realm="' . $auth_message . '"' );
|
||||||
header( 'HTTP/1.0 401 Unauthorized' );
|
header( 'HTTP/1.0 401 Unauthorized' );
|
||||||
esc_html_e( 'A valid consumer key and secret must be provided to access this resource', 'woocommerce' );
|
throw new Exception( __( 'Consumer Secret is invalid', 'woocommerce' ), 401 );
|
||||||
exit;
|
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
|
|
Loading…
Reference in New Issue