oEmbed Discovery Endpoints

[rickalee]

Hi team,

This appears to be too strict and I believe we need to whitelist /wp-json/oembed/* for post embeds to work.

10up-experience/includes/rest-api.php

Line 26 in 26db50f

if ( 'all' === $restrict && ! user_can_access_rest_api() ) {

This snippet seems like a good opportunity to add filterable whitelist of paths as well.
https://snippets.khromov.se/disable-rest-api-for-anonymous-users/