LMS API Exposed

[bhavindersingh]

Hi Support, I have install wplms with mobile app. Mobile app using below APIs calll. https://lms.qbslearning.com/wp-json/wplms/v1/course/106/ Problem: When i am hitting this URL in browser then data is coming in JSON format. I want to secure this type of API with some auth and tokens. Could you pls guide me how to resolve it. I want to secure all APIs. Thanks, Bhavinder      

[Anshuman Sahu]

Yes that should be done .Actually some hits are does not require any cleint id or token . But these are some general hits like courses and course categories etc . All the user specific data is protected in api . you wont be able to access any user related data without access token. But yes still we need to secure general api hits with clientId which we will in future.

[bhavindersingh]

Thanks Alex for quick reply.

[MrVibe]

We've added a check for this in our next update. All API hits will require client id, this option will require to be checked in LMS - Settings - API

[Author]

Posts