unset API endpoints example: user

unset API endpoints example: user

// Unset user API endpoints to prevent user enumeration
add_filter('rest_endpoints', function($endpoints) {

    unset( $endpoints['/wp/v2/users'] );
    unset( $endpoints ['/wp/v2/users/(?P<id>[\d]+)']);
    unset( $endpoints ['[/wp/v2/users/me]']);
    unset( $endpoints ['[/wp/v2/users/(?P<user_id>(?:[\d]+|me))/application-passwords]']);
    unset( $endpoints ['[/wp/v2/users/(?P<user_id>(?:[\d]+|me))/application-passwords/introspect]']);
    unset( $endpoints ['[/wp/v2/users/(?P<user_id>(?:[\d]+|me))/application-passwords/(?P<uuid>[\w\-]+)']);

    return $endpoints;

});