└── auth.php


/auth.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | /*
 4 |  * Plugin Name: Application Passwords for more things
 5 |  */
 6 | 
 7 | function application_password_extras($original_value) {
 8 | 	// Allow Application Password access to admin-ajax.php
 9 | 	if ( is_admin() && wp_doing_ajax() ){
10 | 		return true;
11 | 	}
12 | 
13 | 	// Allow access to post/page previews
14 | 	if ( isset( $_GET['p'] ) || isset( $_GET['page_id'] ) ) {
15 | 		return true;
16 | 	}
17 | 
18 | 	return $original_value;
19 | }
20 | 
21 | add_filter( 'application_password_is_api_request', 'application_password_extras' );
22 | 
23 | // Add an endpoint to advertise support. This could also be setting that's only registered
24 | // for the REST API, but having a way to know upfront whether this will work or not is 
25 | // really helpful for the application UI.
26 | function application_password_extra_capabilities() {
27 | 	return [
28 | 		'admin-ajax' => true,
29 | 		'post-previews' => true,
30 | 	];
31 | }
32 | 
33 | add_action( 'rest_api_init', function() {
34 | 	register_rest_route( 'application-password-extras/v1', 'capabilities', [
35 | 		'methods'  				=> WP_REST_Server::READABLE,
36 | 		'callback' 				=> 'application_password_extra_capabilities',
37 | 		'permission_callback' 	=> 'is_user_logged_in',
38 | 	] );
39 | 
40 | 	register_rest_route( 'application-password-extras/v1', 'admin-ajax', [
41 | 		'methods'  				=> WP_REST_Server::READABLE,
42 | 		'callback' 				=> 'application_password_extra_capabilities',
43 | 		'permission_callback' 	=> 'is_user_logged_in',
44 | 	] );
45 | 
46 | 	register_rest_route( 'application-password-extras/v1', 'post-previews', [
47 | 		'methods'  				=> WP_REST_Server::READABLE,
48 | 		'callback' 				=> 'application_password_extra_capabilities',
49 | 		'permission_callback' 	=> 'is_user_logged_in'
50 | 	] );
51 | });
52 | 
53 | 
54 | 


--------------------------------------------------------------------------------