If the correct form to fill out is https://www.mediawiki.org/wiki/Special:OAuthConsumerRegistration/propose , there are quite a few more details required before it can be submitted.

@jayvdb @Halfak This is the draft proposal for the OAuth consumer for testing. Please review it.

Doesnt this app need API access?

@jayvdb Oh yes, it needs API access. API access is needed for testing.
There are some rights available on propose page. I think we may need all applicable rights listed.

@VcamX did the proposal a few days ago: https://www.mediawiki.org/w/index.php?title=Special:OAuthListConsumers/view/3f8e98d87f2a17030f7300baf45caff6&name=&publisher=VcamX&stage=0

@Halfak, can you help with this?

Ah I see @Halfak is a potential approver listed at https://www.mediawiki.org/wiki/Special:ListUsers/oauthadmin . That should help.

Hey folks. It's a little scary to have a consumer with so many permissions, but the use case here seems reasonable.

You should be able to run tests from @VcamX's account without approval since he is the proposer. If you need other people to be able to use the consumer, let me know and I'll approve. Will these creds be used as part of a regular test or just for development work?

@Halfak, these creds are intended to be used for automated testing. See line 40 of https://gerrit.wikimedia.org/r/#/c/219787/6/tests/auth_tests.py,cm

@jayvdb @Halfak, these tokens are sensitive like password. I think using environment variable to specify tokens maybe better. If these environment variables are not set, tests will be skipped.

Yes, the credentials will be put into envvars, which Travis CI supports and is documented in tests/README.rst

@jayvdb tells me via email that the large permission set is in fact not needed. Can you submit a new consumer proposal with only the permissions you intend to make use of?

@jayvdb @Halfak I submitted a new proposal. The permission requested should be enough for the two basic tests decribed in T74065:

1. Perform a login and logout using OAuth with assertions that verify APISite._userinfo is correct.
2. Login, edit a userpage, and confirm the edit was performed using the OAuth-authenticated account.

With respect to T104764, This is the configuration of OAuth client on the beta cluster: http://deployment.wikimedia.beta.wmflabs.org/w/index.php?title=Special:OAuthListConsumers/view/6ad8150a40735dac98d4f07826061cd1&name=&publisher=&stage=0

The tests seemed to work well on the beta cluster:
https://travis-ci.org/VcamX/pywikibot-core/jobs/73654518
https://travis-ci.org/VcamX/pywikibot-core/jobs/73654519

There're two additional rights need to be added: View your watchlist, Edit your watchlist

@Halfak , can you process this please?

@jayvdb @Halfak, we may need to use 'Python-oauth' account to propose OAuth client, not 'VcamX'.

@hashar, I may need your help for this task, like T104764. The account Pywikibot-oauth in test.wikipedia.org will be used for test. It also need to be in the group of Confirmed users group to propose an OAuth client. Thank you! :)

@VcamX fill in task against Beta-Cluster-Infrastructure and poke #wikimedia-releng about it. I am off for a few.

I've approved the current consumer request. It seems like additional rights are needed per @VcamX's comment. Consider email or pinging me on IRC for a faster response to the next consumer proposal.

Thank you @Halfak! I just proposed a new OAuth client. And the old one could be disabled :)

Saw your ping from the early hours on #wikimedia-dev, so I came looking for consumers to approve right when I got on this morning.

{{done}}