Page MenuHomePhabricator

Redirect Wikilabels to HTTPS
Closed, ResolvedPublic

Description

auth.py redirects to http://labels.wmflabs.org/ui/huwiki/ instead of HTTPS although OAuth sends me to https://labels.wmflabs.org/auth/callback/?oauth_verifier=12a&oauth_token=34b (these are not actual tokens, of course). I also don’t know why does it use <meta> tag instead of the HTTP header.

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald Transcript
238482n375 added a project: acl*security.
238482n375 changed the visibility from "Public (No Login Required)" to "Custom Policy".
238482n375 subscribed.
This comment was removed by akosiaris.
akosiaris changed the visibility from "Custom Policy" to "Public (No Login Required)".
akosiaris removed a subscriber: 238482n375.
akosiaris subscribed.
Harej moved this task from Front-end to Back-end on the Wikilabels board.

Change 450395 had a related patch set uploaded (by Ladsgroup; owner: Amir Sarabadani):
[operations/puppet@production] wikilabels: Enforce SSL

https://gerrit.wikimedia.org/r/450395

Okay, now the PR in wikilabels needs to be merged and then the one in wikilabels-wmflabs-deploy (and then gets deployed) and then the puppet change can get merged and deploy (It's better to do all in one go)

Change 450395 merged by Arturo Borrero Gonzalez:
[operations/puppet@production] wikilabels: Enforce SSL

https://gerrit.wikimedia.org/r/450395