Sticklight

Beschrijving

Sticklight Connector securely connects your WordPress site to Sticklight, an AI app-building platform for creating web applications, dashboards, internal tools, and custom interfaces powered by your existing WordPress data.

The plugin extends the WordPress REST API with additional endpoints that allow authenticated Sticklight projects and external applications to retrieve user context and interact with permitted WordPress data. This allows the Sticklight agent to work with content and functionality exposed through WordPress while continuing to respect WordPress authentication, user roles, and capability checks.

Sticklight does not replace WordPress authentication or bypass WordPress permissions. It relies on WordPress authentication APIs for credential validation, uses WordPress Application Passwords for API access, and applies standard capability checks (current_user_can) to protected requests.

With WordPress connected to Sticklight, you can use natural-language instructions to build applications and tools around the data already stored in your site — without replacing WordPress as your CMS or backend.

For WooCommerce sites, the Sticklight Connector can also provide authenticated access to WooCommerce data and functionality exposed through the WordPress REST API. This allows Sticklight projects to build custom dashboards, internal tools, storefront experiences, and workflows around products, orders, customers, inventory, and other WooCommerce resources, subject to the permissions and capabilities of the connected WordPress user.

For example, Sticklight can be used to create tailored order-management interfaces, product and inventory tools, customer-facing experiences, or operational dashboards that work with the data already managed in WooCommerce.

Typische gebruikssituaties

• Build AI-generated applications, dashboards, and internal tools powered by WordPress data
• Create custom interfaces for managing WordPress content outside wp-admin
• Build headless or hybrid WordPress frontends
• Create editorial, content-management, or operational workflows around existing WordPress data
• Build tools using data exposed by compatible WordPress plugins, including WooCommerce
• Connect React applications to the WordPress user and permission system
• Give authenticated applications controlled access to WordPress REST API resources

Functies

• Securely connects WordPress with Sticklight projects
• Enables the Sticklight agent to work with authorized WordPress data through the REST API
• Authenticates through WordPress and issues Application Passwords for subsequent API access
• REST endpoints toevoegen voor login, logout en het ophalen van de huidige gebruikerscontext
• Preserves WordPress roles and capability checks
• Supports cross-origin and headless WordPress architectures
• Works with resources exposed through the WordPress REST API
• Uitbreidbaar via WordPress hooks en filters

About Sticklight

Sticklight is an AI app-building platform that lets users create production-ready applications and tools through natural-language instructions. The WordPress Connector allows those applications to work with live WordPress content and data while retaining WordPress as the underlying content, user, and permissions system.

Learn more about Sticklight for WordPress.

Read the WordPress Connector documentation.

Gebruik

Login

Authenticeren met gebruikersnaam (of e-mail) en wachtwoord:

POST /wp-json/sticklight/v1/auth/login

Bij succes bevat de reactie een applicatiewachtwoord voor vervolg API-aanvragen en de geauthenticeerde gebruiker:

{
  "app_password": "XXXX XXXX XXXX XXXX XXXX XXXX",
  "user": {
    "user_id": 1,
    "username": "admin",
    "display_name": "Admin",
    "email": "admin@example.com",
    "roles": ["administrator"]
  }
}

Gebruik de geretourneerde app_password met HTTP Basic Authentication voor alle verdere aanvragen.

Huidige gebruiker

Huidige geauthenticeerde gebruiker ophalen:

GET /wp-json/sticklight/v1/auth/me

Uitloggen

Huidige applicatiewachtwoord sessie intrekken:

POST /wp-json/sticklight/v1/auth/logout

Gebruikersregistratie

Gebruikerscreatie wordt afgehandeld via de ingebouwde WordPress REST API (POST /wp-json/wp/v2/users) en vereist beheerder-authenticatie.

Beschermde gegevens benaderen

Aanvragen aan elk endpoint moeten standaard WordPress permissiecontroles doorstaan. Sticklight omzeilt of overschrijft deze controles niet.

Beveiliging

Sticklight volgt WordPress beveiligingspraktijken:

• Delegates credential validation to WordPress authentication APIs and uses WordPress Application Passwords for subsequent API access
• Problemen met applicatiewachtwoorden beperkt tot individuele sessies
• Biedt geen gebruikersregistratie – accounts moeten door een beheerder worden aangemaakt
• Rechtencontroles (current_user_can) toepassen op alle endpoints
• Privégegevens niet blootstellen zonder juiste permissies

Voor externe applicaties wordt aanbevolen om:

• HTTPS gebruiken
• Toegestane origins beperken
• Gevoelige endpoints onnodig blootstellen vermijden