Hi @ideasandpixels , thanks for coming here.
Are you going to whitelist some endpoints or exclude some endpoints from whitelisting?
Some endpoints are whitelisted by default such as:
wp-json/wp/v2
wp-json/wc
wp-json/wc-auth
wp-json/wc-analytics
As you might already know, if you want to whitelist some endpoints, you can use jwt_auth_whitelist
filter. And if you want to exclude some endpoints/ namespace from whitelisting, you can use jwt_auth_default_whitelist
filter. They are described with example in the plugin page.
In the early release of the plugin, we intercept almost all access to rest routes including WordPress & WooCommerce default REST API routes. This caused some/ many users experiencing bug like WooCommerce analytics doesn’t work. This was because WordPress and WooCommerce were intercepted/ blocked by default.
Because of that, someone suggested that WordPress default rest api routes should be whitelisted by default. Then i whitelisted WordPress & WooCommerce by default. This way, access to any custom endpoints will be intercepted without breaking WordPress default.
Maybe i missunderstood your question, but let me know if you still have some question about this.
Thank you!
Bagus