Change 496451 had a related patch set uploaded (by ItSpiderman; owner: ItSpiderman):
[mediawiki/extensions/OATHAuth@wmf/1.33.0-wmf.20] [WIP] Refactor the extension to support multiple auth modules

https://gerrit.wikimedia.org/r/496451

@Bawolff Hello Brian, at this point of the refactoring i have a couple of questions:

• Both API modules seem to be unused, as well as the OATHAuthUtils class. Can I remove this code?
• With the possibility of having multiple modules (auth methods), should we offer the user possibility to choose which Auth method to use (rought version implemented), or should it be set on wiki level?

Thank you

I have seen that one of the APIs is a meta API, I still dont know where the other one is used, but i did refactor both, so disregard that question.

What is SO878?

SO878 is our internal project number, the name of this ticket is the same as the name of our internal ticket

Change 496451 had a related patch set uploaded (by ItSpiderman; owner: ItSpiderman):
[mediawiki/extensions/OATHAuth@master] Refactor the extension to support multiple auth modules

https://gerrit.wikimedia.org/r/496451

Minutes from the hangout

• OATHAuthUtils can be removed (https://codesearch.wmflabs.org/search/?q=OATHAuthUtils&i=nope&files=&repos=)
• Api modules should stay as they are, as they may be needed by https://github.com/wikimedia/labs-striker/search?q=oath&unscoped_q=oath
• Sysadmin should be able to remove modules that available on the user
• The user should be able to choose between enabled modules and maybe use them in parallel. But this will be put to the end of the project, as it may require some more work.

API would presumably need to be refactored to support multiple methods? And yes, obviously, the API is in use externally.

The user should be able to choose between enabled modules and maybe use them in parallel. But this will be put to the end of the project, as it may require some more work.

Just to be clear on this. Using in parallel is a nice to have, but users being able to chose which method is a requirement as we expect only some users will have access to yubikeys.

In regards to API modules, you may want to consider making it similar to the authmanager login module, as during the normal login process people will be prompted for the 2FA stuff, so it will have to work with that flow anyways.

Change 508765 had a related patch set uploaded (by ItSpiderman; owner: ItSpiderman):
[mediawiki/extensions/WebAuthn@master] Init

https://gerrit.wikimedia.org/r/508765

Change 508765 merged by Brian Wolff:
[mediawiki/extensions/WebAuthn@master] Init

https://gerrit.wikimedia.org/r/508765

Change 496451 merged by jenkins-bot:
[mediawiki/extensions/OATHAuth@master] Refactor the extension to support multiple auth modules

https://gerrit.wikimedia.org/r/496451

Mentioned in SAL (#wikimedia-releng) [2019-06-18T22:14:03Z] <Reedy> Apply https://gerrit.wikimedia.org/r/#/c/mediawiki/extensions/OATHAuth/+/496451/53/sql/mysql/patch-add_generic_fields.sql to centralauth on beta T218210

Change 508788 had a related patch set uploaded (by Cicalese; owner: ItSpiderman):
[mediawiki/extensions/WebAuthn@master] Implement WebAuthn module

https://gerrit.wikimedia.org/r/508788

Change 547849 had a related patch set uploaded (by Zoranzoki21; owner: Zoranzoki21):
[mediawiki/extensions/OATHAuth@master] Fix formatting of OATHAuth.alias.php file

https://gerrit.wikimedia.org/r/547849

Change 547849 abandoned by Zoranzoki21:
Fix formatting of OATHAuth.alias.php file

https://gerrit.wikimedia.org/r/547849