WP-API/Basic-Auth — pull request #10 by tlovett1 (2014-09-08 04:10:21+00:00)
Title: Authentication happening if no auth header is sent.

If basic auth is used, we need to return null for json_basic_auth_error. Right now, if basic auth isn't used, we just assume the user is authenticated even if no authentication method has been used.

To confirm this bug, view /posts/?context=edit (without sending a nonce) while the Basic Auth plugin is enabled. You will see posts when you shouldn't.