Authenticating REST requests from a headless front end

For what it is worth, the same approach works with the PMPro adapter — the membership side is identical from here.

This matches my experience exactly. The hard part is staying consistent once the initial novelty wears off.

Strong agree. Good defaults beat a wall of toggles every single time.

Strong agree. Good defaults beat a wall of toggles every single time.

This deserves more votes. It is a small change with an outsized impact on day-to-day use.