First of all, thank you very much for this plugin, it works great!
I have a question about security. When using the login API, the data returned contains a lot of informations, e.g the ‘data’ object has the user_pass hashed in it. I find this quite concerning, as I believe the user pass should not be transmitted in any way, hashed or not.
What do you think?
Thanks in advance
- The topic ‘Security concern’ is closed to new replies.