6. REST API Overview

# Method 1: Application passwords (recommended for external tools)
curl -u "admin:ABCD 1234 EFGH 5678 IJKL 9012" 
  https://example.com/wp-json/seoforge/v1/dashboard

// Method 2: Cookie + Nonce (for JavaScript running within WordPress admin)
add_action( 'admin_enqueue_scripts', function () {
    wp_enqueue_script( 'my-seo-dashboard', plugin_dir_url( __FILE__ ) . 'js/dashboard.js', [], '1.0', true );
    wp_localize_script( 'my-seo-dashboard', 'mySeoConfig', [
        'restUrl'  => rest_url( 'seoforge/v1/' ),
        'nonce'    => wp_create_nonce( 'wp_rest' ),
    ] );
} );

// JavaScript: Using nonce auth in fetch calls
async function fetchDashboard() {
    const response = await fetch( mySeoConfig.restUrl + 'dashboard', {
        headers: { 'X-WP-Nonce': mySeoConfig.nonce }
    });
    return await response.json();
}