BuddyPress.org

Hello,

I know the documentation says BP uses cookies for API authentication, but my install of BP allows any non-authenticated user to use the API and retrieve user data. (e.g. /wp-json/buddypress/v1/members/3)

I’ve also tried this through incognito/private browsers and also through curl from the command line.

Everything I’ve tried, without authenticating, returns the data.

I’ve also installed REST API Toolbox (plugin) – that helped me with requiring authentication for WP wp-json endpoints.

I don’t see a BP option anywhere to require authentication…

Am I missing something here?

Thank you in advance for the help!

-gregg