Page MenuHomePhabricator
Create Task
Maniphest T227242

Deploy WebAuthn to Wikimedia Wikis
Closed, ResolvedPublic
Actions

Description

Prep task.

Note, this requires PHP 7 so blocked on completion of T192166: Drop HHVM support from MediaWiki

Details

ProjectBranchLines +/-Subject
mediawiki/vendormaster+2 -287Remove paragonie/random_compat
operations/mediawiki-configmaster+13 -0Enable WebAuthn on all beta wikis
mediawiki/vendormaster+34 K -3Add vendor libraries for WebAuthn
translatewikimaster+1 -1Enable translation for WebAuthn
mediawiki/tools/releasemaster+1 -0Start branching WebAuthn for wmf/
Customize query in gerrit

Related Objects
Search...

StatusSubtypeAssignedTask
 ResolvedReedyT227242 Deploy WebAuthn to Wikimedia Wikis
 ResolvedItSpidermanT100373 WebAuthn (U2F) integration for Extension:OATHAuth
 ResolvedItSpidermanT218210 SO878 Step 1: Refactor OATHAuth extension
 ResolvedItSpidermanT226053 Special:Manage_Two-factor_authentication looks odd
 ResolvedReedyT226057 s/OATH Manage/Manage OATH/
 ResolvedItSpidermanT218211 SO878 Step 2: Implement WebAuthn method
 ResolvedReedyT227244 Security review of WebAuthn library dependencies
 OpenNoneT232099 What to do about multiple libraries implementing the same thing?
 ResolvedItSpidermanT218214 SO878 Step 3: Finalize settings and user experience
 ResolvedCCicalese_WMFT226058 oathauth-ui-error-page-no-module need refining
 ResolvedItSpidermanT226056 Describe what different auth methods are
 ResolvedPRODUCTION ERRORItSpidermanT231786 Error trying to enable 2FA on testwiki: "Call to a member function getSecret() on a non-object (array)"
 ResolvedItSpidermanT232008 Ability to overwrite 2FA method without providing/re-auth using existing secondary authentication method
 ResolvedItSpidermanT218215 SO878 Step 4: Bind permissions to 2FA
 ResolvedJdforrester-WMFT226737 Enable Phan and seccheck on WebAuthn extension
 ResolvedJdforrester-WMFT226752 mwext-php72-phan-docker running composer under PHP 7.0
 ResolvedJdforrester-WMFT227043 ext-gmp/ext-bcmath missing for Phan jobs based on php 7.2
 OpenNoneT232639 Get UX review for OATHAuth/WebAuthn
 OpenNoneT230043 Add Webauthn support to Mobile apps
 DeclinedNoneT231242 [Spike] Webauthn support for iOS app
 ResolvedNoneT248878 [SPIKE] Investigate potential move to Webauthn support
 ResolvedJdforrester-WMFT192166 Drop HHVM support from MediaWiki
 ResolvedJdforrester-WMFT234062 ci-src-setup job (used by mediawiki-core-php72-phan-docker) is still running on PHP 7.0.33
 ResolvedJdforrester-WMFT234384 Drop HHVM from CI
 ResolvedjijikiT229792 Remove HHVM from production
 ResolvedawightT236019 Remove HHVM support from Quibble
 ResolvedjijikiT239054 Reimage all mediawiki servers
ResolvedJdforrester-WMFT236907 mwgate-composer-php72-docker missing php-intl
 ResolvedAnomieT237049 DifferenceEngineTest and ApiComparePagesTest failures when wikidiff2 is installed

Event Timeline

Reedy created this task.Jul 4 2019, 12:16 AM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJul 4 2019, 12:16 AM
Reedy added a subtask: T100373: WebAuthn (U2F) integration for Extension:OATHAuth.Jul 4 2019, 12:16 AM
Reedy changed the task status from Open to Stalled.Jul 4 2019, 12:18 AM
Reedy added a subtask: T176370: Migrate to PHP 7 in WMF production.
Jdforrester-WMF added projects: Security-Team, Release-Engineering-Team.Jul 4 2019, 12:20 AM
Reedy changed the status of subtask T227244: Security review of WebAuthn library dependencies from Open to Stalled.Jul 4 2019, 12:28 AM
Paladox added a subscriber: Paladox.Jul 4 2019, 12:35 AM
AntiCompositeNumber added a subscriber: AntiCompositeNumber.Jul 4 2019, 12:52 AM
greg moved this task from INBOX to Deployment services on the Release-Engineering-Team board.Jul 8 2019, 7:13 PM
greg edited projects, added Release-Engineering-Team (Deployment services); removed Release-Engineering-Team.
greg added a project: Wikimedia-extension-review-queue.Jul 11 2019, 9:44 PM
Reedy mentioned this in T230043: Add Webauthn support to Mobile apps.Aug 7 2019, 4:59 PM
Reedy added a subtask: T230043: Add Webauthn support to Mobile apps.
Reedy changed the status of subtask T227244: Security review of WebAuthn library dependencies from Stalled to Open.Sep 4 2019, 4:51 PM
Reedy mentioned this in T232639: Get UX review for OATHAuth/WebAuthn.Sep 11 2019, 5:22 PM
MarcoAurelio added a project: Wikimedia-Extension-setup.Sep 26 2019, 10:38 AM
Jcross triaged this task as Medium priority.Oct 4 2019, 4:16 PM
Jcross moved this task from Incoming to In Progress on the Security-Team board.
Jcross moved this task from In Progress to Watching on the Security-Team board.Oct 4 2019, 4:20 PM
Reedy closed subtask T227244: Security review of WebAuthn library dependencies as Resolved.Oct 8 2019, 5:17 PM
gerritbot added a comment.Oct 9 2019, 4:50 PM

Change 541855 had a related patch set uploaded (by Jforrester; owner: Jforrester):
[mediawiki/tools/release@master] Start branching WebAuthn for wmf/

https://gerrit.wikimedia.org/r/541855

gerritbot added a project: Patch-For-Review.Oct 9 2019, 4:50 PM
gerritbot added a comment.Oct 9 2019, 6:21 PM

Change 541855 merged by jenkins-bot:
[mediawiki/tools/release@master] Start branching WebAuthn for wmf/

https://gerrit.wikimedia.org/r/541855

Maintenance_bot removed a project: Patch-For-Review.Oct 9 2019, 7:10 PM
Krinkle updated the task description. (Show Details)Oct 12 2019, 4:50 PM
Krinkle removed a subtask: T176370: Migrate to PHP 7 in WMF production.
Krinkle updated the task description. (Show Details)Oct 12 2019, 4:54 PM
Krinkle added a subtask: T192166: Drop HHVM support from MediaWiki.
Masumrezarock100 added a subscriber: Masumrezarock100.Oct 14 2019, 8:03 PM
Reedy closed subtask T100373: WebAuthn (U2F) integration for Extension:OATHAuth as Resolved.Oct 16 2019, 2:36 PM
gerritbot added a comment.Oct 23 2019, 2:56 PM

Change 545582 had a related patch set uploaded (by Reedy; owner: Reedy):
[translatewiki@master] Enable translation for WebAuthn

https://gerrit.wikimedia.org/r/545582

gerritbot added a project: Patch-For-Review.Oct 23 2019, 2:56 PM
Reedy changed the task status from Stalled to Open.Oct 23 2019, 2:57 PM

We should start getting it translated :)

gerritbot added a comment.Oct 23 2019, 3:00 PM

Change 545582 merged by jenkins-bot:
[translatewiki@master] Enable translation for WebAuthn

https://gerrit.wikimedia.org/r/545582

Reedy mentioned this in rGTWN9fc37f8183d8: Enable translation for WebAuthn.Oct 23 2019, 3:03 PM
Maintenance_bot removed a project: Patch-For-Review.Oct 23 2019, 3:11 PM
Aklapper added a comment.Oct 24 2019, 5:10 PM

If this about https://www.mediawiki.org/wiki/Extension:WebAuthn then there should be a Phab project tag so tasks can be planned?
See https://www.mediawiki.org/wiki/Review_queue and https://www.mediawiki.org/wiki/Phabricator/Creating_and_renaming_projects

Reedy added a subtask: T236907: mwgate-composer-php72-docker missing php-intl.Oct 30 2019, 2:25 PM
gerritbot added a comment.Oct 30 2019, 7:52 PM

Change 546975 had a related patch set uploaded (by Jforrester; owner: Reedy):
[operations/mediawiki-config@master] Enable WebAuthn on all beta wikis

https://gerrit.wikimedia.org/r/546975

gerritbot added a project: Patch-For-Review.Oct 30 2019, 7:52 PM
Jdforrester-WMF closed subtask T236907: mwgate-composer-php72-docker missing php-intl as Resolved.Oct 31 2019, 7:03 PM
Jdforrester-WMF reopened subtask T236907: mwgate-composer-php72-docker missing php-intl as Open.Oct 31 2019, 7:48 PM
gerritbot added a comment.Nov 6 2019, 4:05 PM

Change 547215 had a related patch set uploaded (by Jforrester; owner: Reedy):
[mediawiki/vendor@master] Add vendor libraries for WebAuthn

https://gerrit.wikimedia.org/r/547215

Jdforrester-WMF closed subtask T236907: mwgate-composer-php72-docker missing php-intl as Resolved.Nov 6 2019, 4:07 PM
gerritbot added a comment.Nov 6 2019, 4:43 PM

Change 547215 merged by jenkins-bot:
[mediawiki/vendor@master] Add vendor libraries for WebAuthn

https://gerrit.wikimedia.org/r/547215

ReleaseTaggerBot added a project: MW-1.35-notes (1.35.0-wmf.8; 2019-11-26).Nov 6 2019, 5:00 PM
gerritbot added a comment.Nov 6 2019, 5:07 PM

Change 546975 merged by jenkins-bot:
[operations/mediawiki-config@master] Enable WebAuthn on all beta wikis

https://gerrit.wikimedia.org/r/546975

Stashbot added a comment.Nov 6 2019, 5:09 PM

Mentioned in SAL (#wikimedia-operations) [2019-11-06T17:09:54Z] <jforrester@deploy1001> Synchronized wmf-config/InitialiseSettings.php: Set wmgUseWebAuthn false in all of production T227242 (duration: 01m 01s)

Stashbot added a comment.Nov 6 2019, 5:11 PM

Mentioned in SAL (#wikimedia-operations) [2019-11-06T17:11:30Z] <jforrester@deploy1001> Synchronized wmf-config/CommonSettings.php: Enable WebAuthn extension if wmgUseWebAuthn is set (false in all of production) T227242 (duration: 01m 00s)

Maintenance_bot removed a project: Patch-For-Review.Nov 6 2019, 5:11 PM
Jdforrester-WMF closed this task as Resolved.Jan 6 2020, 6:01 PM
Jdforrester-WMF assigned this task to Reedy.
Jdforrester-WMF added a subscriber: Jdforrester-WMF.

Live everywhere, as of this morning.

gerritbot added a comment.Mar 15 2020, 5:48 PM

Change 579870 had a related patch set uploaded (by Reedy; owner: Reedy):
[mediawiki/vendor@master] Remove paragonie/random_compat

https://gerrit.wikimedia.org/r/579870

gerritbot added a project: Patch-For-Review.Mar 15 2020, 5:48 PM
gerritbot added a comment.Mar 15 2020, 8:33 PM

Change 579870 merged by jenkins-bot:
[mediawiki/vendor@master] Remove paragonie/random_compat

https://gerrit.wikimedia.org/r/579870

ReleaseTaggerBot edited projects, added MW-1.35-notes (1.35.0-wmf.24; 2020-03-17); removed MW-1.35-notes (1.35.0-wmf.8; 2019-11-26).Mar 15 2020, 9:00 PM
Maintenance_bot removed a project: Patch-For-Review.Mar 15 2020, 9:10 PM
Krinkle mentioned this in T256432: Performance review of WebAuthn extension.Jun 25 2020, 9:50 PM
Content licensed under Creative Commons Attribution-ShareAlike 3.0 (CC-BY-SA) unless otherwise noted; code licensed under GNU General Public License (GPL) or other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL