REST API Authentication — a practical guide to WordPress REST authentication with clear examples you can reuse in real projects.
WordPress Plugin Development Series (45/95). Prefer one article? Read the complete WordPress plugin development tutorial.
Short description
For same-origin wp-admin/editor requests, cookie + nonce works. For external clients, use application passwords or OAuth/JWT solutions.
Permission callback
'permission_callback' => function () {
return current_user_can('edit_posts');
}