If I am writing a plugin to add posts to my website and I wish to use the WP REST API to do so, do I have to use authentication at all since the request is coming from the same website as the post if being added to? In other words, are WP REST APIs automatically trusted if triggered from the site being called?
I ask because I would like for this plugin to eventually be able to be used on other sites by other people and it seems unwieldy to require that they create and enter an application password and then enter the username and app password into an admin panel so that my plugin knows who to past as…
[ad_2]