whitelist /graphql [reCAPTCHA + wp-graphql-jwt-authentication]

Replies: 0

Hi,
I’m using latest versions of:
WordPress + WooCommerce
+ [WP GraphQL]
+ wp-graphql-jwt-authentication [github]
+ wp-graphql-woocommerce [github]
+ Wordfence with reCAPTCHA v3 activated

To work with GraphQL I need to log in by mysite.com/graphql endpoint. In order to get auth token I need to send POST like this:

js
mutation login {
  login( input: {
    clientMutationId: "uniqueId",
    username: "my_external_app",
    password: "wcerunt8w7ernyrt7ycwechiuwerc"
  } ) {
    authToken
    user {
      id
      name
    }
  }
}

Unfortunately, that action leads to “wfls_captcha_verify” error, and Wordfence asks me to do additional steps: click on the link that I’ve received on mail.

How to whitelist this action?

Live Traffic shows me a yellow icon as “Type: Failed Login” on page “/graphql”

Regards!