[wp-trac] [WordPress Trac] #38691: REST API: Hide schema/args for site-customized endpoints unless authenticated

[WordPress Trac]

#38691: REST API: Hide schema/args for site-customized endpoints unless
authenticated
--------------------------+------------------------------
 Reporter:  jnylen0       |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  REST API      |     Version:  trunk
 Severity:  normal        |  Resolution:
 Keywords:                |     Focuses:
--------------------------+------------------------------

Comment (by joehoyle):

 How about we only include the schema in the OPTIONS request and the `wp-
 json?context=help` if you are allowed to `GET | POST | DELETE` on the
 endpoint? We already do these checks on sending an `OPTIONS` request (and
 some others) anyway, so there's probably little overhead to this.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/38691#comment:4>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform