rest_cookie_check_errors( WP_Error|mixed $result ): WP_Error|mixed|bool

1118function rest_cookie_check_errors( $result ) {1119	if ( ! empty( $result ) ) {1120		return $result;1121	}1122 1123	global $wp_rest_auth_cookie;1124 1125	/*1126	 * Is cookie authentication being used? (If we get an auth1127	 * error, but we're still logged in, another authentication1128	 * must have been used).1129	 */1130	if ( true !== $wp_rest_auth_cookie && is_user_logged_in() ) {1131		return $result;1132	}1133 1134	// Determine if there is a nonce.1135	$nonce = null;1136 1137	if ( isset( $_REQUEST['_wpnonce'] ) ) {1138		$nonce = $_REQUEST['_wpnonce'];1139	} elseif ( isset( $_SERVER['HTTP_X_WP_NONCE'] ) ) {1140		$nonce = $_SERVER['HTTP_X_WP_NONCE'];1141	}1142 1143	if ( null === $nonce ) {1144		// No nonce at all, so act as if it's an unauthenticated request.1145		wp_set_current_user( 0 );1146		return true;1147	}1148 1149	// Check the nonce.1150	$result = wp_verify_nonce( $nonce, 'wp_rest' );1151 1152	if ( ! $result ) {1153		add_filter( 'rest_send_nocache_headers', '__return_true', 20 );1154		return new WP_Error( 'rest_cookie_invalid_nonce', __( 'Cookie check failed' ), array( 'status' => 403 ) );1155	}1156 1157	// Send a refreshed nonce in header.1158	rest_get_server()->send_header( 'X-WP-Nonce', wp_create_nonce( 'wp_rest' ) );1159 1160	return true;1161}