Changeset 49334 for trunk/src/wp-includes/rest-api/endpoints/class-wp-rest-site-health-controller.php

Timestamp:

10/27/2020 06:30:03 PM (4 years ago)

Author:

TimothyBlynJacobs

Message:

Site Health, App Passwords: Test if the Authorization header is populated correctly.

App Passwords rely on the Authorization header to transport the Basic Auth credentials. For Apache web servers, WordPress automatically includes a RewriteRule to populate the value for servers running in CGI or FastCGI that wouldn't ordinarily populate the value.

This tests if the header is being filled with the expected values. For Apache users, we direct the user to visit the Permalinks settings to flush their permalinks. For all other users, we direct them to a help document on developer.wordpress.org.

Props Clorith, marybaum, TimothyBlynJacobs.
Fixes #51638.

File:

• trunk/src/wp-includes/rest-api/endpoints/class-wp-rest-site-health-controller.php (modified) (2 diffs)

trunk/src/wp-includes/rest-api/endpoints/class-wp-rest-site-health-controller.php

@@ -99 +99 @@
                     'permission_callback' => function () {
                         return $this->validate_request_permission( 'dotorg_communication' );
+                    },
+                ),
+                'schema' => array( $this, 'get_public_item_schema' ),
+            )
+        );
+
+        register_rest_route(
+            $this->namespace,
+            sprintf(
+                '/%s/%s',
+                $this->rest_base,
+                'authorization-header'
+            ),
+            array(
+                array(
+                    'methods'             => 'GET',
+                    'callback'            => array( $this, 'test_authorization_header' ),
+                    'permission_callback' => function () {
+                        return $this->validate_request_permission( 'authorization_header' );
                     },
                 ),
@@ -176 +195 @@
     public function test_loopback_requests() {
         return $this->site_health->get_test_loopback_requests();
+    }
+
+    /**
+     * Checks that the authorization header is valid.
+     *
+     * @since 5.6.0
+     *
+     * @return array
+     */
+    public function test_authorization_header() {
+        return $this->site_health->get_test_authorization_header();
     }