Skip to main content
Version: 1.x

AUTH431: Rest transport blocked

What this means

The store's REST API did not answer on any address form this app can use.

The app tried the store's REST API at its normal address (/wp-json/...) and at WordPress's built-in fallback address (/?rest_route=...), and neither answered. The store's website itself may be up — this is specifically the REST API being unreachable, usually a security plugin hiding it or a firewall rule blocking it.

Your data

No order or product data is affected.

Troubleshoot

On the store — for the site administrator: if a security plugin hides or renames /wp-json/ (for example WP Hide), allow WordPress's built-in /?rest_route= form as well — the app falls back to it automatically.

On the host / server:

  1. Check firewall (WAF) rules for anything matching wp-json or rest_route and allow the store's own REST API through.
  2. If the server is behind a maintenance page or bot challenge, REST requests may be answered with an HTML page — disable the challenge for the REST API.

To test (anyone): https://your-store.com/?rest_route=/ should return JSON, not a 403 page or the site's homepage.

Details

Code
AUTH431 (REST_TRANSPORT_BLOCKED)
Severity
error
Introduced in
WCPOS 1.10.0