Enforce Privacy doesn’t protect REST API

@lonevvolf so it does appear that this has been a miss for the plugin in that mode. I would recommend protecting the API end point using a security plugin that can disable public access. I have opened up a GitHub issue to be worked on ASAP to ensure that this aspect of content protection is being handled.

https://github.com/oidc-wp/openid-connect-generic/issues/504

@tnolte Thank you – I have already done exactly that but looking forward to removing that once the issue has been resolved. Thanks again for the great response.