Ticket #37569: 37569.patch

src/wp-includes/rest-api.php

@@ -587 +587 @@
                 return true;
         }
 
+        // Send a refreshed nonce in header.
+        $wp_rest_server->send_header( 'X-WP-Nonce', wp_create_nonce( 'wp_rest' ) );
+
         // Check the nonce.
         $result = wp_verify_nonce( $nonce, 'wp_rest' );
 
         if ( ! $result ) {
-                return new WP_Error( 'rest_cookie_invalid_nonce', __( 'Cookie nonce is invalid' ), array( 'status' => 403 ) );
+                return new WP_Error( 'rest_cookie_expired_nonce', __( 'Cookie nonce expired' ), array( 'status' => 403 ) );
         }
 
-        // Send a refreshed nonce in header.
-        $wp_rest_server->send_header( 'X-WP-Nonce', wp_create_nonce( 'wp_rest' ) );
-
         return true;
 }