向php服务发送经过身份验证的AJAX请求(针对Wordpress)

<button id="ajax-button">发送AJAX请求</button>

<script>
    document.getElementById('ajax-button').addEventListener('click', function() {
        var xhr = new XMLHttpRequest();
        xhr.open('POST', '/wp-admin/admin-ajax.php', true);
        xhr.setRequestHeader('Content-Type', 'application/x-www-form-urlencoded');
        xhr.setRequestHeader('Authorization', 'Bearer YOUR_TOKEN'); // 替换为实际的身份验证令牌

        xhr.onreadystatechange = function() {
            if (xhr.readyState === 4 && xhr.status === 200) {
                var response = JSON.parse(xhr.responseText);
                console.log(response);
            }
        };

        xhr.send('action=my_ajax_action'); // 替换为实际的请求参数
    });
</script>

add_action('wp_ajax_my_ajax_action', 'my_ajax_action_callback');
add_action('wp_ajax_nopriv_my_ajax_action', 'my_ajax_action_callback');

function my_ajax_action_callback() {
    // 验证身份和权限
    if (!is_user_logged_in() || !current_user_can('manage_options')) {
        wp_send_json_error('无权访问');
    }

    // 处理请求
    $data = array(
        'message' => 'Hello, AJAX!'
    );

    wp_send_json_success($data);
}