Wordpress REST API Register Routes Permissions

REST API expose data WP ke eksternal (termasuk Gutenberg & SPA). Kita bisa buat endpoint sendiri.

Definisi

register_rest_route('ns/v1', '/book/(?P<id>\d+)', ['methods'=>GET, 'callback'=>..., 'permission_callback'=>...]).

Kapan dipakai

Frontend JS ambil data, integrasi mobile, webhook, blok dinamis.

Cara kerja

php

add_action('rest_api_init', function () {
    register_rest_route('dk/v1', '/book/(?P<id>\d+)', [
        'methods' => 'GET',
        'callback' => function ($req) {
            return get_post($req['id']);
        },
        'permission_callback' => function () {
            return current_user_can('read');
        },
    ]);
});

Struktur alur

Catatan implementasi

• permission_callback wajib (sejak WP 5.5) agar tidak terbuka.
• Namespace unik cegah bentrok.
• Return array/object (otomatis JSON).

Kesalahan umum

• Tanpa permission_callback -> endpoint publik.
• Return WP_Error salah format.
• Lupa sanitasi param.

Referensi terkait

• WordPress Application Passwords (REST auth)
• WordPress CPT & Taxonomies