WP API can't create a post

I am having the same issue you originally had Goharika. I am using angular in the front end and I want to use basic authorization. I have enqueued the api and created the nonce:

wp_localize_script( 'angular-core', 'RestAPI', array( 'url' => get_bloginfo('wpurl').'/wp-json/wp/v2/', 'nonce' => wp_create_nonce( 'wp_rest' ) ) );

I then have this form in html:

<form ng-submit="processForm()">

			<!-- Title -->
			<div id="title_field" class="">
			  <label>Title</label>
			  <input type="text" name="title" class="" placeholder="Name of item" ng-model="formData.title">

			</div>

			<!-- Submit Button -->
			<button type="submit" class="">
			  <span class=""></span> Submit!
			</button>

		  </form>

And this is the processForm function in my controller:

$scope.processForm = function() {
			console.log(RestAPI.nonce);

			$http({
				method: 'POST',
				url: '/wp-json/wp/v2/posts',
				params: $scope.formData,
				transformRequest: angular.identity,
				headers: { 'Content-Type': 'multipart/form-data', 'X-WP-Nonce': RestAPI.nonce }
			})
			.success(function (result) {
				console.log('Success!');
			}).error(function () {
				console.log('Fail!');
			});
		};

Adding the headers portion of the submit function got me from a 401 error to a 403 error, saying the nonce is invalid. I don’t know what the deal is.

If it matters, while logged into the admin panel, if i go to the site and try and access users/me (which i know has issues listed in the documentation) I simply get logged out and repeatedly asked to login. Maybe i am misunderstanding the nonce usage?

Hey all, I have opened a question on the WordPress.Stackexchange.com site regarding this exactly.

The documentation talks about the request header as ‘X-WP-Nonce’ and then sending along the nonce. Perhaps this is what most everyone’s issue is:

beforeSend: function ( xhr ) {
        xhr.setRequestHeader( 'X-WP-Nonce', WP_API_Settings.nonce );
}

However with Postman I cannot figure out how to do that?

Please take a look at the StackExchange question.

I am using the rest api plugin (version 1) with basic auth plugin its not working error[
{
“code”: “json_cannot_edit”,
“message”: “Sorry, you cannot edit this post”
}
]

any idea ???

Hey Guys,

Been through the comments above and managed to fix my authentication issues – however I’m still getting a 400 error (see pasted code below). I am trying to send post 12 to http://autoload.dev I have been through the DB and deleted every reference to post 12.

Array
(
    [headers] => Array
        (
            [date] => Thu, 09 Jun 2016 11:43:49 GMT
            [server] => Apache/2.2.29 (Unix) mod_wsgi/3.5 Python/2.7.10 PHP/5.6.10 mod_ssl/2.2.29 OpenSSL/0.9.8zh DAV/2 mod_fastcgi/2.4.6 mod_perl/2.0.9 Perl/v5.22.0
            [access-control-allow-origin] => *
            [access-control-allow-methods] => POST, GET, PUT, DELETE, OPTIONS
            [access-control-allow-headers] => Array
                (
                    [0] => X-Requested-With, content-type
                    [1] => Authorization
                )

            [x-powered-by] => PHP/5.6.10
            [set-cookie] => PHPSESSID=3d20b969e225f5168b258a6fe94609ad; path=/
            [expires] => Wed, 11 Jan 1984 05:00:00 GMT
            [cache-control] => no-cache, must-revalidate, max-age=0
            [pragma] => no-cache
            [x-content-type-options] => nosniff
            [access-control-expose-headers] => X-WP-Total, X-WP-TotalPages
            [last-modified] =>
            [allow] => GET, POST
            [content-length] => 90
            [connection] => close
            [content-type] => application/json; charset=UTF-8
        )

    [body] => {"code":"rest_post_exists","message":"Cannot create existing post.","data":{"status":400}}
    [response] => Array
        (
            [code] => 400
            [message] => Bad Request
        )

    [cookies] => Array
        (
            [0] => WP_Http_Cookie Object
                (
                    [name] => PHPSESSID
                    [value] => 3d20b969e225f5168b258a6fe94609ad
                    [expires] =>
                    [path] => /
                    [domain] => autoload.dev
                )

        )

    [filename] =>
)

Can anyone explain what's going on