The field \"RootMutation.login\" cannot be accessed without authentication.

[rotkohlsuppe]

Hi everybody,
I'm trying to access the endpoint through the official WPGraphQL Plugin from the WP Plugin Library.
The plugin features the option to disable all requests, except authorized ones:

In order to use this feature I installed this plugin wp-graphql-jwt-authentication.
But with the option from above activated it doesn't allow access to the login field anymore:
The field \"RootMutation.login\" cannot be accessed without authentication.

How should I deal with this? I know the plugin works, for example querying users only works with authentication through this JWT plugin. But I want to restrict access to every endpoint, including Pages, Posts, etc., except for the Authentication Enpoint.
How can I achieve this, if this plugin doesn't work with the option from WPGraphQL?
Thanks for any ideas! Cheers!

[davidmadon]

I'm running into the same issue.
Shouldn't the plugin work with the "restrict endpoints" setting active in WPGraphQL?

Any suggestions?

[lucaBuccarello]

You have to specify to the plugin which mutation has to be public

1. Go in wordpress and find wp-graphql-jwt-authentication plugin path
2. Open "wp-graphql-jwt-authentication.php"
3. In the init() function add these lines after the end of the first "add_filter":

add_filter( 
  'graphql_require_authentication_allowed_fields', 
  function( $allowed ) {
	$allowed[] = 'login';
	return $allowed;
}, 10, 1 );

Reference: link
@rotkohlsuppe @davidmadon

[rotkohlsuppe]

You have to specify to the plugin which mutation has to be public

1. Go in wordpress and find wp-graphql-jwt-authentication plugin path

2. Open "wp-graphql-jwt-authentication.php"

3. In the init() function add these lines after the end of the first "add_filter":

add_filter( 
  'graphql_require_authentication_allowed_fields', 
  function( $allowed ) {
	$allowed[] = 'login';
	return $allowed;
}, 10, 1 );

Reference: link @rotkohlsuppe @davidmadon

Thank you very much. Will give it a try

[ashish-90]

You have to specify to the plugin which mutation has to be public

1. Go in wordpress and find wp-graphql-jwt-authentication plugin path
2. Open "wp-graphql-jwt-authentication.php"
3. In the init() function add these lines after the end of the first "add_filter":

add_filter( 
  'graphql_require_authentication_allowed_fields', 
  function( $allowed ) {
	$allowed[] = 'login';
	return $allowed;
}, 10, 1 );

Reference: link @rotkohlsuppe @davidmadon

This filter should be added in either functions.php file of the theme, or in a custom plugin.
Avoid adding code to the wp-graphql-jwt-authentication.php file. Plugin update will overwrite this custom functionality