Need to Allow REST API

  • fssbob

    (@fssbob)


    2 months, 4 weeks ago

    I’ve run into a problem with the The Events Calendar plugin when Password Protected Status is enabled. Checking “Allow REST API” appears to fix the problem. Is there any downside to this? Why would someone NOT want to enable “Allow REST API”?

    (Entering my IP address also appears to fix the problem, but that’s not a useful solution in my case. The “Problem With Cookie Cache” option does NOT fix the problem.)

    Thanks.

Viewing 8 replies - 1 through 8 (of 8 total)
  • Plugin Support Muhammad Usama Azad

    (@usamaazad99)

    2 months, 4 weeks ago

    Hi @fssbob ,

    Hope you’re doing well!

    Could you please share a screencast or video showing how you reproduce the issue? That will really help us replicate it on our side and give you accurate assistance.

    Just to confirm: enabling “Allow REST API” in Password Protected re‑enables the default WordPress REST API. Some plugins (like The Events Calendar) rely on that API to fetch or display data — so that’s why enabling REST API makes them work again.

    Looking forward to your response.

    Best regards,
    Muhammad Usama Azad
    WP Experts Support Team

    Thread Starter fssbob

    (@fssbob)

    2 months, 4 weeks ago

    Sorry, I don’t think it’s possible to include a screencast in this support forum. But the steps to reproduce are simple: Bring up the Events Calendar in Month view. Attempt to switch from the current month to a previous one–and the Calendar hangs.

    Returning to my original question: What is the downside (security or whatever) of enabling “Allow REST API”? There must be a reason it isn’t enabled by default.

    Thanks.

    Plugin Support Muhammad Usama Azad

    (@usamaazad99)

    2 months, 3 weeks ago

    Hi @fssbob ,

    Thank you for getting back to us!

    To help us dig into this further, please create a support ticket using the link below and include a screen recording showing the issue, along with the related backend settings. You can either upload the video directly in the ticket or share it via a Drive link.

    Submit Ticket Here

    Just to clarify, the Allow REST API option is disabled by default to minimize security risks, since enabling it can potentially expose site data. With proper authentication in place, it’s generally safe to enable if needed.

    We appreciate your cooperation and look forward to your response.

    Best regards,
    Muhammad Usama Azad
    WP Experts Support Team

    Thread Starter fssbob

    (@fssbob)

    2 months, 2 weeks ago

    I’m fine enabling the REST API, so no need to follow up further on that.

    One other condition I’ve run into: With the Varnish cache enabled, the password doesn’t work. (After entering the password there’s a pause, and then it requests the password again.) This isn’t an issue for my use case, as I’m fine without Varnish. (I’m using the password on a historical version of a site that will only be used for occasional research–and thus the caching doesn’t really matter.) But curious whether this is a known issue.

    Thanks.

    Plugin Support Muhammad Usama Azad

    (@usamaazad99)

    2 months, 1 week ago

    Hi @fssbob ,

    I hope you’re doing well.

    Thanks for highlighting this — yes, this is a known behavior when page caching (like Varnish) is enabled. We’ve addressed this issue in the add-on by appending a random parameter to the URL, which helps bypass the page cache and prevents the password prompt loop.

    Could you please download the add-on from the link below and test it on your end?https://drive.google.com/file/d/1APJLVahcbuclwsOAS4vI8P-74dArTcMS/view?usp=sharing

    Once you’ve had a chance to try it, we’d really appreciate your feedback.

    Thanks again for taking the time to share your findings!

    Best regards,
    Muhammad Usama Azad
    WP Experts Support Team

    Thread Starter fssbob

    (@fssbob)

    2 months, 1 week ago

    Thanks, I’d be happy to test it–except for unknown reasons the password prompt loop has stopped happening. If/when it recurs, I’ll test the add-on.

    Bob

    Plugin Support fahadwaheed

    (@fahadwaheed)

    1 month, 4 weeks ago

    Hi @fssbob,

    Thank you for the update. Please feel free to let us know once you have had a chance to test it, and we will be happy to assist you further.

    Best regards,
    Fahad Waheed
    WP Experts Support Team

    Plugin Support fahadwaheed

    (@fahadwaheed)

    1 week, 2 days ago

    Hi @fssbob

    I hope this message finds you well.

    We’re following up regarding our last message, as we haven’t heard back from you yet. If you have any questions or concerns, please don’t hesitate to reach out. We’re here to assist you.

    Looking forward to your response.

Viewing 8 replies - 1 through 8 (of 8 total)

You must be logged in to reply to this topic.