WPCOM_JSON_API_Endpoint::allows_unauthorized_requests PHP Method

    function allows_unauthorized_requests($origin, $complete_access_origins)
    {
        return 'GET' == $this->method || $this->allow_unauthorized_request && in_array($origin, $complete_access_origins);
    }