wordpress-mobile / wordpress-mobile/WordPress-Android
WordPress app: Enable REST API
Nobody has claimed this yet.
- Dominant language
- Kotlin
- Stars
- 3.2k
- Forks
- 1.4k
- Avg merge
- 1d 11h
- Merged PRs (30d)
- 69
Description
The WP app only supports communicating with the site using XMLRPC. Following a negative app review seems that XMLRPC could be a concerning point when using the app due to security reasons.
Cool app, and useful functionality for doing limited editing on the run, but XMLRPC is wildly insecure and this app needs two factor authentication for me to use it securely. Will upgrade this review when it has this functionality!
Expected behavior
The WP app connects to sites using REST API.
Actual behavior
The WP app connects to sites using XMLRPC.
Steps to reproduce the behavior
N/A
Tested on Samsung Galaxy S20 FE 5G, Android 13, WordPressAndroid 25.0
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating how the WP Android app currently connects to sites through XMLRPC and identify the existing REST API support, if any. Review the app's authentication and editing flows before defining the migration scope. Done means the app connects to supported sites through REST API rather than XMLRPC, with the affected functionality still working.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- android, kotlin
- Domain
- api, mobile
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 32/100