1. Trevor Nelmes

    I would agree with this:

    “The biggest issue right now is that the REST API isn’t included in core,” a representative from Ashworth Creative commented.

    An associate of mine, the owner of a reasonably large WordPress related software house, has a big piece of software already written and waiting to go. It will not be released until it is in core. Having all these beta plugins is of no use commercially, it speaks of adoption being far too risky.

    The BIG issue is security. If it goes into core, there is going to have to be a lot of hardness testing, because even now the teenage trolls of the world are already writing tools to hack it. My guess is that Matt M will see this as the biggest possible risk to the whole WordPress project. If this goes in core and goes south … well, the risk is far too great.


  2. David Wells

    I’d use it if it was in core.

    Telling users to install another plugin to run your plugin creates a real bad UX.

    Most folks have been ‘forced’ to roll their own APIs while waiting for the fabled JSON API to roll into core.

    Put JSON API in core already…


  3. Sunny Luthra

    I am also using WP as backend for two of my web apps.


  4. lukepettway

    I recently used the Rest API in conjunction with Advanced Custom Fields and a plugin to utilize acf through the Rest API as well. We needed a dynamic way for our client to add custom post types that appeared on a Google Map as they were added. Here is the website currently using it: http://findartdoorsrva.org/.

    It was a fairly straightforward process, call the endpoints via an ajax request, loop through the data objects that were created, and then build out objects using the Google Maps api. Now whenever a new door is added or updated, the map data is updated as well. When you click on the door icons, it displays all of the post/acf information.

    All in all it was a really fun project and a perfect opportunity to try out using the api.


  5. Adam

    Given all the other background events going on the last few weeks… how long until someone builds their own system that only deals with Rest API, and completely bypasses the GPL? Unless someone wants to argue that requesting resources from, and submitting comments to, a WP site compels Microsoft to release IE under GPL.


    • Kalen Johnson (@Kalenjohnson)

      With the REST API, you are simply exchanging information with WP. Some people will say that a theme and/or plugin is the same, but the difference is actually calling PHP functions directly, instead of hitting an endpoint of an external API.

      So while nobody will or should ever say “using the REST API means you are now GPL’d”, it definitely would be a way for someone *cough like Chris Pearson cough* to build out their own application on top of WP but still keep all his own code proprietary. But at that point, you would need to install both WP and your own app, so it would add a bit to the complexity, I suppose.


  6. WebScience Institute (@scienceofweb)

    One would hope they test the s**t out of this before it goes into production side by side with the core WP.

    I have found some creative uses so far but it would be nice if wordpress sites turned into apis for other consumers. I can think of some interesting ideas come from that. Also, I can envision some abuses. :/


  7. Steve Truman

    echo this
    “The biggest issue right now is that the REST API isn’t included in core,”

    The WP REST API has been in development now for over 2 years now https://github.com/WP-API/WP-API/commits/develop?page=70

    Over that time there has been 56 developers have made 2,244 commits.

    @rmccue has done an enormous amount of work as the lead dev.

    There was talk at one stage that it would be merged to core in wp v3.9 and hopes for every version since including v4.3 … but still not.

    WooCommerce got tired of waiting and released their own in feb 2014 – despite requests from wp to not release theirs until after the WP REST API was released in the core. The WC guys must have known that it was at that stage a long way off happening and went ahead anyway.

    Last year we have built a number of WooCommerce child plugins with utilizing jQuery/Underscore/Backbone stack. couple of them

    But have not proceeded with any WordPress integrations because as David Wells wrote

    “Telling users to install another plugin to run your plugin creates a real bad UX.”

    Re what Trevor Nelmes wrote:

    “The BIG issue is security.”

    Whilst it is a top priority as it is with all software – The WordPress https://wordpress.org/plugins/json-rest-api/ has 10,000+ active users, which is a wonderful Beta – stable and seemingly secure

    The WC JSON REST API which had a much shorter development cycle than the WP API is having has been in the wild for 18 months and is active on over 1 million sites without incident (sure their have been a couple of patches for disclosed vulnerabilities but nothing major)

    My wish is that Matt and the Automattic team would make the WP REST API a much higher priority than what I think are peripheral features like the Customizer / shortstack / which seems to be the number 1 priorities.


  8. Summer

    First, I think the Live Search is one of the neatest WP things I’ve seen in a couple years. I love playing with it, and it was the first tool I’d seen that I had a reason to install the REST API plugin for.

    Second, I noticed they’ve put a second version of the REST API plugin (and listed it as beta) that’s only compatible with WP 4.3beta and higher…. but I haven’t yet found any explanation on why the split.

    So the original plugin is only “verified” through WP 4.1.6, and the new one only operates on WP 4.3 and higher… leaving every WP 4.2 in an “unofficial” state? Yes, I know the original still works on WP 4.2, but this kinda goes towards the gaps in documentation issues all across the WP spectrum.


    • Mike Nelson

      I’m pretty sure “second version of the REST API plugin” on WordPress.org’s plugin repo (https://en-ca.wordpress.org/plugins/rest-api/) is the newer-but-unstable version. It has a lot of improvements but isn’t compatible with the earlier version. It’s what they’re hoping to put in WP core. I think they put it on wordpress.org to encourage folks to test it and get more feedback (also why they posted about this)


  9. Peter Ericson (@PeterEricson)

    We build mobile apps for publishers platform using REST. Check out http:’//getunipress.com


  10. rossnelliot

    Does the delay into core have to do with the fact that wordpress.com has such an api already and it’s a unique selling point for that platform?


    • Adam

      In a different discussion on a different site, I mentioned that other decisions that have been made which suggest this sort of bias in decision making. For example, if you submit a theme to WP.org, then you cannot include any functionality but this is a feature of VIP themes.

      I was assured that (in that case, at least) its a matter of the uniqueness of the VIP hosting situation and not because allowing only VIP themes with functionality receive the blessing of WordPress gives Automattic any advantage over competitors.

      In all things, the wise person asks, “Cui Bono?”


Comments are closed.

%d bloggers like this: