Public REST endpoints wrongly require tokens
The plugin forces token checks on public REST endpoints, and site owners cannot easily exempt some routes from authentication.
Tier II · Emerging Problems that are still building up.
4 public reports · first reported 25 July 2023 · last reported 22 January 2026
What's going wrong
Several site owners report that once the JWT plugin is active, core and WooCommerce REST endpoints that should stay open start demanding an authorization header.
AI-assisted: written with the help of AI from the reports. The idea report has the full summary.
In the idea report
- The full summary.
- The products the 4 reports are about, and how many came each month.
- Related problems.
No business has been found with this problem yet, so the report has no contacts. All sales are final — no refunds. Pricing.