3. REST API Overview

# Using application passwords
curl -s -u "admin:XXXX XXXX XXXX XXXX" 
  https://example.com/wp-json/formforge/v1/forms

// Using nonce from the admin page
fetch( formforgeAdmin.restUrl + '/forms', {
    headers: { 'X-WP-Nonce': formforgeAdmin.restNonce }
} )
.then( r => r.json() )
.then( data => console.log( data ) );

// jQuery with cookie auth — nonce is still required
jQuery.ajax( {
    url: formforgeAdmin.restUrl + '/forms',
    method: 'GET',
    beforeSend: function( xhr ) {
        xhr.setRequestHeader( 'X-WP-Nonce', formforgeAdmin.restNonce );
    },
    success: function( data ) {
        console.log( 'Forms:', data );
    }
} );

{
  "code": "error_code",
  "message": "Human-readable error description.",
  "data": { "status": 403 }
}