Skip to main content
Version: 1.x

AUTH431: Rest transport blocked

What this means​

The store's REST API did not answer on any address form this app can use.

The app tried the store's REST API at its normal address (/wp-json/...) and at WordPress's built-in fallback address (/?rest_route=...), and neither answered. The store's website itself may be up — this is specifically the REST API being unreachable, usually a security plugin hiding it or a firewall rule blocking it.

Your data​

No order or product data is affected.

Troubleshoot​

On the store — for the site administrator: if a security plugin hides or renames /wp-json/ (for example WP Hide), allow WordPress's built-in /?rest_route= form as well — the app falls back to it automatically.

On the host / server:

  1. Check firewall (WAF) rules for anything matching wp-json or rest_route and allow the store's own REST API through.
  2. If the server is behind a maintenance page or bot challenge, REST requests may be answered with an HTML page — disable the challenge for the REST API.

To test (anyone): https://your-store.com/?rest_route=/ should return JSON, not a 403 page or the site's homepage.

Details​

Code
AUTH431 (REST_TRANSPORT_BLOCKED)
Severity
error
Introduced in
WCPOS 1.10.0