Page MenuHomePhabricator
Create Task
Maniphest T110280

Rewrite password management to use AuthManager
Closed, ResolvedPublic
Actions

Description

Related Objects
Search...

StatusSubtypeAssignedTask
 DeclinedNoneT31254 [SUGGESTION] Expose group memberships for query through OpenID teams extension
 DeclinedWikinautT25735 Allow different user grouping for OpenID users
 OpenFeatureNoneT66475 Make crosswiki bits and pieces truly global (tracking)
 DeclinedFeatureNoneT15631 Wikimedia should become an OpenID provider
 Resolved• DeskanaT75616 Tracking: API/backend issues blocking Wikipedia app development
 ResolvedAnomieT32788 Allow triggering of user password reset email via the API
 DeclinedNoneT61631 Enable Facebook login on Wikimedia wikis
 DeclinedNoneT11604 Get OpenID extension to a state where it could be used on Wikimedia projects as a provider
 DeclinedNoneT59579 E:OpenID as consumer: ChangePassword page is shown twice when attaching an OpenID to an existing account using the _temporary_ password
 OpenNoneT59731 [RFC] make SpecialChangePassword form text depending on login status of $wgUser
 OpenNoneT90925 General authentication improvements for MediaWiki
 ResolvedAnomieT48179 Allow a challenge stage during authentication
 OpenNoneT5709 Refactoring to make external authentication and identity systems easier
 ResolvedTgrT43201 UserLoadFromSession considered evil
 ResolvedAnomieT67493 Session is started by EditAction (problem for extensions using UserLoadFromSession hook)
 OpenFeatureNoneT55156 Provide option to force a login session to end within a certain time
 OpenNoneT89459 Modernize MediaWiki authentication system (AuthManager)
 ResolvedTgrT110279 Rewrite core classes which need to be clients of AuthManager
 OpenNoneT61736 password reset mail should have a "cancel this" link
 ResolvedTgrT110280 Rewrite password management to use AuthManager
 ResolvedAnomieT91699 Create AuthManager framework and core classes
 ResolvedJoeT97675 Custom session handler corrupted by session_destroy, "Failed to initialize storage module"
 ResolvedJoeT106483 Create new HHVM package for HHVM 3.6.5 + patches
 ResolvedhasharT106699 Upgrade HHVM related packages on Trusty Jenkins slaves
 Resolvedbd808T95864 Mocking abstract objects fails on HHVM
 ResolvedAnomieT110274 Fix PHPUnit version incompatibility between AuthManager and Jenkins
 ResolvedKrinkleT99982 Upgrade PHPUnit to 4.0+
 ResolvedNoneT90303 Fetch dependencies using composer instead of cloning mediawiki/vendor for non-wmf branches
 ResolvedJanZerebeckiT106433 replace inline perl in builder wd-mw-composer-merged-install with a proper script
 ResolvedKrinkleT112895 Support installing composer require-dev packages together with mediawiki/vendor
 ResolvedTgrT110628 Improve AuthManager documentation

Event Timeline

Tgr created this task.Aug 26 2015, 6:10 AM
Tgr raised the priority of this task from to Needs Triage.
Tgr updated the task description. (Show Details)
Tgr added projects: MediaWiki-Core-AuthManager, Reading-Infrastructure-Team-Old (Don't use).
Tgr subscribed.
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptAug 26 2015, 6:10 AM
Tgr added a subtask: T91699: Create AuthManager framework and core classes.Aug 26 2015, 6:10 AM
Tgr added a parent task: T110279: Rewrite core classes which need to be clients of AuthManager.

This would also be a good time to refactor the password reset business logic into a non-UI-related class and expose it as an API.

Tgr renamed this task from Rewrite password reset to use AuthManager to Rewrite password management to use AuthManager.Aug 26 2015, 6:17 AM
Tgr updated the task description. (Show Details)
Tgr set Security to None.
bd808 moved this task from Backlog to AuthManager Backlog on the MediaWiki-Core-AuthManager board.Aug 26 2015, 5:33 PM
Tgr added a parent task: T61736: password reset mail should have a "cancel this" link.Sep 1 2015, 3:54 AM
Tgr mentioned this in T61736: password reset mail should have a "cancel this" link.
Tgr added a parent task: T59731: [RFC] make SpecialChangePassword form text depending on login status of $wgUser.Sep 1 2015, 3:57 AM
Tgr added a comment.Sep 1 2015, 4:14 AM

See also https://gerrit.wikimedia.org/r/#/c/106218/

Tgr mentioned this in T17876: Allow user with a certain user right change/reset the passwords of others.Sep 2 2015, 9:01 PM
Anomie closed subtask T91699: Create AuthManager framework and core classes as Resolved.May 25 2016, 6:51 PM
Anomie closed this task as Resolved.Jun 16 2016, 6:04 PM
Anomie assigned this task to Tgr.
Anomie subscribed.

Seems to be done: all the listed things go through AuthManager now.

• Fjalapeno edited projects, added Product-Infrastructure-Team-Backlog-Deprecated; removed Reading-Infrastructure-Team-Old (Don't use).Jun 7 2017, 2:58 PM
Aklapper removed a subscriber: Anomie.Oct 16 2020, 5:39 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL