[wp-trac] [WordPress Trac] #51939: Basic Auth staging protections conflicts with App Passwords

WordPress Trac noreply at wordpress.org
Fri Dec 4 19:40:25 UTC 2020


#51939: Basic Auth staging protections conflicts with App Passwords
-----------------------------------+-----------------------
 Reporter:  TimothyBlynJacobs      |       Owner:  (none)
     Type:  defect (bug)           |      Status:  new
 Priority:  highest omg bbq        |   Milestone:  5.6
Component:  Application Passwords  |     Version:  5.6
 Severity:  blocker                |  Resolution:
 Keywords:  has-patch              |     Focuses:  rest-api
-----------------------------------+-----------------------

Comment (by adamsilverstein):

 I was able to test this in my local setup and verify both the issue and
 that the proposed fix in the PR works as expected:

 * After setting up local auth and submitting a form (using CF7 as
 described in the issue) as a non-logged in user, I received an
 authentication error from the rest API. Status `401` message: "Unknown
 username. Check again or try your email address."
 * Testing the PR the form submission/endpoint works as expected.
 * Trying to set up Application Password when my site is behind basic auth,
 I discover I cannot:

 [[Image(https://p201.p0.n0.cdn.getcloudapp.com/items/8LunjXne/Image%202020-12-04%20at%2012.36.56%20PM.jpg)]]

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/51939#comment:10>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list