feat: AJAX uses token authentication#181

Merged

dcalhoun merged 31 commits intotrunkfrom

feat/authorize-ajax-with-application-passwords

Mar 31, 2026

Commits on Mar 26, 2026

feat: Authorize AJAX with application passwords
dcalhoun
committed
refactor: Rename AJAX and api-fetch configuration utilities
dcalhoun
committed
fix: Configure AJAX after the library loads
dcalhoun
committed
test: Fix test imports and assertions
dcalhoun
committed
fix: Set the global WordPress admin AJAX URL
dcalhoun
committed
test: Assert AJAX configuration
dcalhoun
committed
feat: Allow configuring the Android asset loader domain
dcalhoun
committed
docs: Note AJAX support requirements
dcalhoun
committed
docs: Note AJAX CORS errors in troubleshooting documentation
dcalhoun
committed
fix: Add type checks before wrapping wp.ajax methods (#282)

dcalhoun
and
claude
committed
feat: conditionally reinstate VideoPress bridge

dcalhoun
and
claude
committed
fix: filter lodash-js-after inline script from editor assets

dcalhoun
and
claude
committed
feat: vendor and load wp-util.js

dcalhoun
and
claude
committed
fix: align wp.ajax wrapper signatures with wp-util

dcalhoun
and
claude
committed
fix: use home URL for iOS demo app site URL

dcalhoun
and
claude
committed
feat: alias wp.media.ajax and wp.media.post to wp.ajax

dcalhoun
and
claude
committed
build: Use wp-util from production WordPress release
dcalhoun
committed
docs: Expand inline comments
dcalhoun
committed
refactor: scope AJAX auth to same-site requests via ajaxPrefilter

dcalhoun
and
claude
committed
fix: strip trailing slash from siteURL before building AJAX URLs

dcalhoun
and
claude
committed
fix: warn instead of logging success when jQuery is unavailable for AJAX auth

dcalhoun
and
claude
committed
fix: use origin-based matching for AJAX auth header injection

dcalhoun
and
claude
committed
docs: separate AJAX config examples from Android requirement

dcalhoun
and
claude
committed
refactor: remove redundant AJAX setup from VideoPress bridge

dcalhoun
and
claude
committed
fix: add defensive guards to AJAX configuration

dcalhoun
and
claude
committed
fix: validate assetLoaderDomain in Android EditorConfiguration

dcalhoun
and
claude
committed
docs: add vendor README documenting wp-util.js source

dcalhoun
and
claude
committed
fix: add https scheme to WP.com site URL in Android demo app

dcalhoun
and
claude
committed
refactor: extract duplicated AJAX URL into local variable

dcalhoun
and
claude
committed
docs: remove lint/format exclusion note from vendor README

dcalhoun
and
claude
committed

Commits on Mar 28, 2026

refactor: derive Android WebView asset domain from site URL

dcalhoun
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: AJAX uses token authentication#181

feat: AJAX uses token authentication#181
dcalhoun merged 31 commits intotrunkfrom
feat/authorize-ajax-with-application-passwords

Commits on Mar 26, 2026

feat: Authorize AJAX with application passwords

refactor: Rename AJAX and api-fetch configuration utilities

fix: Configure AJAX after the library loads

test: Fix test imports and assertions

fix: Set the global WordPress admin AJAX URL

test: Assert AJAX configuration

feat: Allow configuring the Android asset loader domain

docs: Note AJAX support requirements

docs: Note AJAX CORS errors in troubleshooting documentation

fix: Add type checks before wrapping wp.ajax methods (#282)

feat: conditionally reinstate VideoPress bridge

fix: filter lodash-js-after inline script from editor assets

feat: vendor and load wp-util.js

fix: align wp.ajax wrapper signatures with wp-util

fix: use home URL for iOS demo app site URL

feat: alias wp.media.ajax and wp.media.post to wp.ajax

build: Use wp-util from production WordPress release

docs: Expand inline comments

refactor: scope AJAX auth to same-site requests via ajaxPrefilter

fix: strip trailing slash from siteURL before building AJAX URLs

fix: warn instead of logging success when jQuery is unavailable for AJAX auth

fix: use origin-based matching for AJAX auth header injection

docs: separate AJAX config examples from Android requirement

refactor: remove redundant AJAX setup from VideoPress bridge

fix: add defensive guards to AJAX configuration

fix: validate assetLoaderDomain in Android EditorConfiguration

docs: add vendor README documenting wp-util.js source

fix: add https scheme to WP.com site URL in Android demo app

refactor: extract duplicated AJAX URL into local variable

docs: remove lint/format exclusion note from vendor README

Commits on Mar 28, 2026

refactor: derive Android WebView asset domain from site URL