Struggling with domain key

Hi,

REST API works – domain.com/wp-json delivers data,

no, if you visit it as guest user , you will see it gives 401 error

Best regards,

Hi

REST API works

I was just meaning, it is not switched off by any other plugin.

What could I do to enable issueing of domain key?

Hi,

the URL works , but something restricted it to 401 error which requires a login user , but QC can not “log in” to your site, that was the issue.

from the name , it looks like

wp-maintenance-mode
wps-hide-login
login-lockdown

could have some interact with this , please try turn them off , and see if it helps

you can visit the REST URI by private window, you will see what it returns

Best regards,

hmmm, that begins to be weird. I swiched off these plugins you mentioned, and a pair of other – but reached no positiv effect.

• This reply was modified 3 years, 2 months ago by chillybang.

yeah, if you access that URL with a private windows

https://xxx/?rest_route=/liteseed/v1/token

you will see it gives {"code":401,"message":"not allowed.","data":{"status":401}} , this means something disallowed it

I tried a text-search over wordpress default files but I don’t find any code that will generate such response

I think it should come from your plugin or theme , please try search “not allowed” through them , see if you can get something.

Currently is an access to https://xxx/wp-json/litespeed/v1/ possible.

But on trying to retrieve the domain key there rises unknown error:

Failed to communicate with QUIC.cloud server: Unknown error: Fail to process

Report DHJCOPKC

• This reply was modified 3 years, 2 months ago by chillybang.

how did you access it ? it still gives me 401 error

Now I know what happens. Site admin switched REST API for not-logged in users off – he means, opened REST API is a huge security issue, and it will be no way opened.

What possibilities do I have to get a domain key under these circumstances?

Hi,

we have a filter

$is_from_cloud = apply_filters( 'litespeed_is_from_cloud', false );

this can check if IP is ours or not , and please ask your site admin to grant REST to our IPs

Should REST API always be accessible? Is it possible to make the REST API accessible only until the domain key is successfully issued and then close it again?

Hi,

yes, it should be accessible for QC nodes for online services like image optimization , CSS generation …etc

but like I said , you can use above API to only allow access by our IPs instead of keep it open publicly

Bes tregards,