Page MenuHomePhabricator

Allow authentication providers to add images as form fields
Open, Needs TriagePublic

Description

Currently, an authentication request can not return images from the getFieldInfo method, which is required, e.g., in the PasswordlessLogin extension and probably also in the MediaWiki-extensions-OATHAuth extension if it would use the LinkAccounts special page, in order to show a QR code which can be scanned by a phone.

The FancyCaptcha module of the ConfirmEdit (CAPTCHA extension) extension does this already by using the AuthChangeFormFields hook, which is probably a bit too complex for most use cases. Having a separate field type of image, which just takes a src (can be a link, or probably a data uri), sounds reasonable.

Event Timeline

Florian created this task.May 21 2019, 12:04 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMay 21 2019, 12:04 PM

Change 512735 had a related patch set uploaded (by Florianschmidtwelzow; owner: Florianschmidtwelzow):
[mediawiki/extensions/PasswordlessLogin@master] Render QR code in backend and remove odd client script

https://gerrit.wikimedia.org/r/512735

Change 512736 had a related patch set uploaded (by Florianschmidtwelzow; owner: Florianschmidtwelzow):
[mediawiki/core@master] [AuthManager] Add a way to render images in AuthenticationRequests

https://gerrit.wikimedia.org/r/512736

Change 512735 merged by Florianschmidtwelzow:
[mediawiki/extensions/PasswordlessLogin@master] Render QR code in backend and remove odd client script

https://gerrit.wikimedia.org/r/512735