[wp-trac] [WordPress Trac] #51939: Basic Auth staging protections conflicts with App Passwords

WordPress Trac noreply at wordpress.org
Fri Dec 4 19:33:50 UTC 2020


#51939: Basic Auth staging protections conflicts with App Passwords
-----------------------------------+-----------------------
 Reporter:  TimothyBlynJacobs      |       Owner:  (none)
     Type:  defect (bug)           |      Status:  new
 Priority:  highest omg bbq        |   Milestone:  5.6
Component:  Application Passwords  |     Version:  5.6
 Severity:  blocker                |  Resolution:
 Keywords:  has-patch              |     Focuses:  rest-api
-----------------------------------+-----------------------

Comment (by TimothyBlynJacobs):

 After discussion in #core-passwords we decided on a different solution.

 We now won't return any errors from `wp_authenticate_application_password`
 if there are no App Passwords created. Additionally, we prevent creating
 new App Passwords if it looks like the site is already behind Basic
 Authentication.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/51939#comment:9>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list