A Servant Authentication Handler that valiates a logged_in Cookie & a wp_rest Nonce.

This is similar to wpAuthHandler but it allows you to throw an error for anonymous users with valid nonces - restricting handlers to only logged in users.

The result of the authorizeWordpressRequest function can be an authorized user with some additional data, or an anonymous user.

Configuration data specific to your Wordpress site & Haskell application.

The name of a Wordpress authentication cookie. Wordpress's frontend uses CookieNameWithMD5 "wordpress_logged_in_" "<your-site-url>" by default.

This represents one of the $schemes that Wordpress's cookie/nonce functions use to salt their hashes.

The built-in Wordpress schemes are auth/auth_sec for HTTP/HTTPS requests to wp-admin, logged_in for authenticated front-end requests, & nonce for form submissions & API requests.

The secret keys & salts are constants found in your wp-config.php file, defined as LOGGED_IN_SALT, LOGGED_IN_KEY, etc.

An auth scheme's _KEY constant, usually defined in your Wordpress site's wp-config.php. E.g., LOGGED_IN_KEY

Build the _KEY value for an authentiation scheme.

An auth scheme's _SALT constant, usually defined in your Wordpress site's wp-config.php. E.g., LOGGED_IN_SALT

Build the _SALT value for an authentiation scheme.

The data needed for authentication, along with some arbitrary data that is returned on success.

The ID field from the users table of a Wordpress site.

The user_pass field from the users table of a Wordpress site.

A User Session's Token. These can be found in the usermeta Wordpress table for rows where meta_key="session_token".

You'll probably want to use decodeSessionTokens to parse the tables's meta_value instead of constructing them yourself.

Decode a serialized PHP array containing a User's Session Tokens. These are usually stored as the session_tokens usermeta.

It may be an associative array of tokens to expiration times, or tokens to an associative array of sub-fields:

array(
  'some-random-hex-text' => 192836504,
  // ...
);
array(
  'deadbeef ' => array(
    'expiration' => 9001,
    // ...
  ),
);

Potential errors during authentication.

Potential errors while searching for a specific cookie in the request headers.

Potential errors we may encounter while parsing a WPCookie.

Potential validation errors for a WPCookie.