- Backward compatible: Yes
- Database/config update required: No
- Minimum requirements: No change in this release.
Updated name in the WordPress plugin directory
To comply with WordPress directory trademark guidelines, we’ve updated the plugin name. This is purely a branding change—everything else works exactly the same.
CoCart’s listed title has changed:
- Before: “Headless WooCommerce Made Easy with CoCart”
- Now: “Headless eCommerce API for Developers – CoCart”
In your WordPress Dashboard under Plugins, this shows up as “CoCart API – Headless eCommerce API for Developers” (previously “CoCart API – Headless WooCommerce Made Easy”).
JSON body authentication for the login endpoint
The login endpoint (API v2 only) now accepts credentials as a JSON request body, in addition to whatever it already supported, with a clear indication of which method was used.
{
"username": "your-username",
"password": "your-password"
}Query parameters for username and password are now also explicitly supported on the same v2 login endpoint, if you prefer that over a JSON body.
Internally, permission checks on the login endpoint were also refactored to consistently return a WP_Error rather than mixed return types — relevant if you have custom code inspecting the raw return value of CoCart’s internal permission-check functions rather than the REST response itself.
Breaking changes & deprecations
No breaking changes in this release — it is a drop-in upgrade.