Changeset 42421 for trunk/src/wp-includes/rest-api/class-wp-rest-server.php

Timestamp:

12/30/2017 08:36:25 PM (7 years ago)

Author:

rachelbaker

Message:

REST API: Return the proper status code for failed permission callbacks in WP_REST_Server->dispatch().

Use the rest_authorization_required_code() function to return a 401 status code when a permission callback fails due to a user not being logged in.

Props jaswrks.
Fixes #42828.

File:

• trunk/src/wp-includes/rest-api/class-wp-rest-server.php (modified) (1 diff)

trunk/src/wp-includes/rest-api/class-wp-rest-server.php

@@ -916 +916 @@
                             $response = $permission;
                         } elseif ( false === $permission || null === $permission ) {
-                            $response = new WP_Error( 'rest_forbidden', __( 'Sorry, you are not allowed to do that.' ), array( 'status' => 403 ) );
+                            $response = new WP_Error( 'rest_forbidden', __( 'Sorry, you are not allowed to do that.' ), array( 'status' => rest_authorization_required_code() ) );
                         }
                     }