Application passwords and WP hooks

Replies: 0

I am encountering an issue where The Events Calendar plugin is forcing user authentication during its initialization. The stack trace is as follows:

=> wp_validate_application_password() / .../wp-includes/class-wp-hook.php, line 287
=> apply_filters() / .../wp-includes/plugin.php, line 212
=> apply_filters() / .../wp-includes/user.php, line 3005
=> _wp_get_current_user() / .../wp-includes/pluggable.php, line 70
=> wp_get_current_user() / .../wp-includes/pluggable.php, line 2198
=> wp_create_nonce() / .../wp-content/plugins/the-events-calendar/common/src/Tribe/Admin/Help_Page.php, line 55
=> register_assets() / .../wp-content/plugins/the-events-calendar/common/src/Tribe/Main.php, line 264
=> load_assets() / .../wp-includes/class-wp-hook.php, line 287
=> apply_filters() / .../wp-includes/class-wp-hook.php, line 311
=> do_action() / .../wp-includes/plugin.php, line 484
=> do_action() / .../wp-content/plugins/the-events-calendar/common/src/Tribe/Main.php, line 107
=> plugins_loaded() / .../wp-includes/class-wp-hook.php, line 287
=> apply_filters() / .../wp-includes/class-wp-hook.php, line 311
=> do_action() / .../wp-includes/plugin.php, line 484
=> do_action() / .../wp-settings.php, line 420
=> require_once() / .../wp-config.php, line 133
=> require_once() / .../wp-load.php, line 37
=> require_once() / .../wp-blog-header.php, line 13
=> require() / .../index.php, line 17

The register_assets() function calls wp_create_nonce(), which calls wp_get_current_user(), which triggers user authentication. Because this is happening at plugin init time, functions.php has not been loaded and therefore filters like rest_url_prefix are not in place yet. So it does not seem like REST_REQUEST can be properly set.

My question is whether The Events Calendar plugin is doing something wrong, or if there is something else that I am missing here.

Thanks for any insight and advice.