A safer way to do API key authentication in WordPress
A client’s whole API auth was a hardcoded key checked against a query parameter. Here is how I rebuild API key authentication in WordPress as a real security layer, using the REST authentication filter.