Call HTTP Functions on a Wix Site

HTTP functions allow you to expose the functionality of a Wix site as a service in the form of REST APIs. If you’ve added functionality to a site with code and want to use it in a Headless site or app, you can expose HTTP functions and call the APIs in your client's code.

Learn more about exposing a site API with HTTP functions.

Authentication context

Authentication context is information about which identity is calling an API.

If an HTTP function on a Wix site doesn't receive authentication context, it treats the call as if it was made by an anonymous site visitor. This restricts the methods you can use in your code without overriding authentication using elevate().

Providing your HTTP functions with authentication context allows you to:

• Restrict HTTP function usage on your site to admins or site members.
• Use functions that return different responses based on who calls them, such as getCurrentMember().

Implementation approaches

You can call site HTTP functions using 2 approaches:

• The JavaScript SDK, using the http-functions module to call your site's endpoints. The SDK client's authorization strategy associates each call with the site that hosts your HTTP functions and with the authentication context of who is making the call.

• The REST API, using access tokens or API keys to send authentication context to your site's HTTP functions.

See also

• Set Up a Headless Client
• Authenticate Visitors (REST)
• Generate an API Key