| CARVIEW |
Select Language
HTTP/2 301
date: Mon, 29 Dec 2025 14:15:13 GMT
content-type: text/html; charset=UTF-8
location: https://docs.gravityforms.com/gform_webapi_authentication_required_endpoint/
server: cloudflare
strict-transport-security: max-age=604800
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self';
referrer-policy: no-referrer
referrer-policy: strict-origin-when-cross-origin
x-redirect-by: WordPress
fastcgi-cache: MISS
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=oP%2FlkgxFeq4lKyOoTtUION14k13SA1iAYFEfBsua523pgb1BM%2F%2FRCR%2FiHVTaiNMeExI1ypbpjUfwwQJozw5GZtUuqAZPYWnDkhvj8VTOLVkazhHf"}]}
cf-ray: 9b59e87e0d7bf470-BLR
HTTP/2 200
date: Mon, 29 Dec 2025 14:15:13 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
vary: Accept-Encoding
strict-transport-security: max-age=604800
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self';
referrer-policy: no-referrer
referrer-policy: strict-origin-when-cross-origin
link: ; rel="alternate"; title="JSON"; type="application/json"
link: ; rel=shortlink
fastcgi-cache: HIT
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=3TwgLxcL0J82kp5BFWwOLGWH1870LCFFhCWb1agqritxIYz7Bs%2Fq9%2Fz0uQgHi8QvLQgyUcwM2C6SuMbpm2Aem%2F64B0S4mHTrQgitsuWptl0l13%2FQ"}]}
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: gzip
cf-ray: 9b59e884f947f470-BLR
gform_webapi_authentication_required_ENDPOINT - Gravity Forms
gform_webapi_authentication_required_ENDPOINT
Description
The “gform_webapi_authentication_required_” plus ENDPOINT filter in Gravity Forms allows the overriding of authentication for all the endpoints of the Web API.
Usage
add_filter( 'gform_webapi_authentication_required_' . $endpoint, 'your_function_name' );
Parameters
- $authentication_required bool
Whether authentication is required for this endpoint.
Example
Force authentication for the POST forms/[ID]/submissions endpoint.
The following example forces the Gravity Forms Web API to authenticate the user before allowing the form to be POSTed.
add_filter( 'gform_webapi_authentication_required_post_forms_submissions', '__return_true' );
Placement
This code should be placed in the functions.php file of your active theme.
Source Code
This filter is located in GFWebAPI::handle_page_request() in includes/webapi/webapi.php