Is there a plan for private/restricted content API

[Imoptimal]

Hi,

I’m thinking of building a self hosted ghost website, which will also include mobile apps built with React native.

Right now, I see that there is only content API for public posts, but no explanation of how to get restricted/private posts?

Any information on this topic - is that private content API planned in any shape or form in the near future?

Thanks in advance for your help,
Ivan

[Kevin]

You can use the Admin API in place of the Content API

Ghost Admin API Documentation

[Imoptimal]

That’s intended for authors as far as I understand, not subscribers that will just read restricted posts?

I’ll look at that option in more detail, maybe I misunderstood.

[Kevin]

Oh, sorry, I didn’t understand from your initial message that you meant members-only content.

The Content API is usable with JWTs. A couple of posts that should point you in the right direction:

Use Ghost members auth to log-in to custom app via cookies

Hey! This is definitely doable but it’s gonna be a hack either way as these are not publicly documented or stable methods. You can either get a JWT for a member and use that to authenticate into your application, but this won’t handle logout when the member logs out of Ghost. Or you can use the cookies like you say, but this will be a little more involved and require your app to be running on the same domain so that the cookies can be shared. External auth with JWT You can make a GET request…

Where can I find `members_public_key` to validate a JWT?

Hi @disaza You can find this at /members/.well-known/jwks.json on the frontend domain of the site! It’s in the “JSON Web Key Store” format - and can be parsed/handled by libraries like jose, node-jose, and jwks-rsa