Page MenuHomePhabricator

OAuth extension should provide the ability to hide or remove disruptive edit tags
Open, Needs TriagePublic

Description

People sometimes register OAuth apps with long or disruptive names and descriptions without realizing that those strings will show up in various shared interfaces. A vandal could do this on purpose.

Once the app makes an edit, the edit will be tagged with the app name, and the app name and description will show up on Special:Tags and the advanced recent changes filter interface. Since it's a software-defined tag, admins can't remove it. The tag name and description can be change via the usual MediaWiki namespace override, but for an app that edits many wikis, it seems kind of annoying to have to do that, and tags apps used for testing only or for vandalism will still clutter up tag lists.

A past example of an unfortunately named app cluttering up the tags and RC UI:

Screen Shot 2018-02-21 at 9.21.08 AM.png (911×685 px, 198 KB)
Screen Shot 2018-02-21 at 9.22.50 AM.png (210×1 px, 93 KB)

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald Transcript

We just need an enwiki sysop to mark the tag as inactive.

I don't see a "delete" or "deactivate" link under Actions, like I do for some other tags. How do I mark it as inactive?

I did blank the description, so it at least doesn't stand out as badly in the tags list.

We just need an enwiki sysop to mark the tag as inactive.

How can we find one of those sysop?

Pppery subscribed.

As an enwiki sysop I confirm there's nothing I can do here. The tag management interface doesn't seem to let us locally manage OAuth tags, which is probably correct, except for the fact that OAuth doesn't provide any way of managing them I can see.

Tagging MediaWiki-extensions-OAuth for awareness.

Tag names are localizable the same way other i18n messages are. There are edit links to the relevant messages on Special:Tags.

We can disable the OAuth app, in which case the change tag will be removed from ChangeTagsListActive but not from ListDefinedTags. I am not sure of the exact UI implications, but it will at least disappear from the RecentChanges UI.

Maybe if the OAuth app is oversighted, the change tag should be disowned by the extension entirely (at which point admins can delete it).

There is no way to change the name or description of an existing OAuth app (those are the default values for the tag name and description). It's a somewhat tricky problem due to the security implications.

Tgr renamed this task from Rename or somehow deprecate 'Medha_Bansal_intern_at_WikiEduDashboard' tag filter to OAuth extension should provide the ability to hide or remove disruptive edit tags.May 12 2025, 7:14 PM
Tgr updated the task description. (Show Details)

See also T60937: Add "under development" stage before "proposed" stage for OAuth consumers which would provide the foundation for not tagging edits made by test apps.