Deploy WebAuthn to Wikimedia Wikis
Closed, ResolvedPublic
Actions

Description

Prep task.

Note, this requires PHP 7 so blocked on completion of T192166: Drop HHVM support from MediaWiki

Details

Project	Branch	Lines +/-	Subject
mediawiki/vendor	master	+2 -287	Remove paragonie/random_compat
operations/mediawiki-config	master	+13 -0	Enable WebAuthn on all beta wikis
mediawiki/vendor	master	+34 K -3	Add vendor libraries for WebAuthn
translatewiki	master	+1 -1	Enable translation for WebAuthn
mediawiki/tools/release	master	+1 -0	Start branching WebAuthn for wmf/

Customize query in gerrit

Related Objects
Search...

Status	Assigned	Task
Resolved	Reedy	T227242 Deploy WebAuthn to Wikimedia Wikis
Resolved	ItSpiderman	T100373 WebAuthn (U2F) integration for Extension:OATHAuth
Resolved	ItSpiderman	T218210 SO878 Step 1: Refactor OATHAuth extension
Resolved	ItSpiderman	T226053 Special:Manage_Two-factor_authentication looks odd
Resolved	Reedy	T226057 s/OATH Manage/Manage OATH/
Resolved	ItSpiderman	T218211 SO878 Step 2: Implement WebAuthn method
Resolved	Reedy	T227244 Security review of WebAuthn library dependencies
Open	None	T232099 What to do about multiple libraries implementing the same thing?
Resolved	ItSpiderman	T218214 SO878 Step 3: Finalize settings and user experience
Resolved	CCicalese_WMF	T226058 oathauth-ui-error-page-no-module need refining
Resolved	ItSpiderman	T226056 Describe what different auth methods are
Resolved	ItSpiderman	T231786 Error trying to enable 2FA on testwiki: "Call to a member function getSecret() on a non-object (array)"
Resolved	ItSpiderman	T232008 Ability to overwrite 2FA method without providing/re-auth using existing secondary authentication method
Resolved	ItSpiderman	T218215 SO878 Step 4: Bind permissions to 2FA
Resolved	Jdforrester-WMF	T226737 Enable Phan and seccheck on WebAuthn extension
Resolved	Jdforrester-WMF	T226752 mwext-php72-phan-docker running composer under PHP 7.0
Resolved	Jdforrester-WMF	T227043 ext-gmp/ext-bcmath missing for Phan jobs based on php 7.2
Open	None	T232639 Get UX review for OATHAuth/WebAuthn
Open	None	T230043 Add Webauthn support to Mobile apps
Open	None	T231242 [Spike] Webauthn support for iOS app
Resolved	None	T248878 [SPIKE] Investigate potential move to Webauthn support
Resolved	Jdforrester-WMF	T192166 Drop HHVM support from MediaWiki
Resolved	Jdforrester-WMF	T234062 ci-src-setup job (used by mediawiki-core-php72-phan-docker) is still running on PHP 7.0.33
Resolved	Jdforrester-WMF	T234384 Drop HHVM from CI
Resolved	jijiki	T229792 Remove HHVM from production
Resolved	awight	T236019 Remove HHVM support from Quibble
Resolved	jijiki	T239054 Reimage all mediawiki servers
Resolved	Jdforrester-WMF	T236907 mwgate-composer-php72-docker missing php-intl
Resolved	Anomie	T237049 DifferenceEngineTest and ApiComparePagesTest failures when wikidiff2 is installed

Event Timeline

Reedy created this task.Jul 4 2019, 12:16 AM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJul 4 2019, 12:16 AM

Reedy added a subtask: T100373: WebAuthn (U2F) integration for Extension:OATHAuth.Jul 4 2019, 12:16 AM

Reedy changed the task status from Open to Stalled.Jul 4 2019, 12:18 AM

Reedy added a subtask: T176370: Migrate to PHP 7 in WMF production.

Jdforrester-WMF added projects: Security-Team, Release-Engineering-Team.Jul 4 2019, 12:20 AM

Reedy changed the status of subtask T227244: Security review of WebAuthn library dependencies from Open to Stalled.Jul 4 2019, 12:28 AM

Paladox added a subscriber: Paladox.Jul 4 2019, 12:35 AM

AntiCompositeNumber added a subscriber: AntiCompositeNumber.Jul 4 2019, 12:52 AM

greg moved this task from INBOX to Deployment services on the Release-Engineering-Team board.Jul 8 2019, 7:13 PM

greg edited projects, added Release-Engineering-Team (Deployment services); removed Release-Engineering-Team.

greg added a project: Wikimedia-extension-review-queue.Jul 11 2019, 9:44 PM

Reedy mentioned this in T230043: Add Webauthn support to Mobile apps.Aug 7 2019, 4:59 PM

Reedy added a subtask: T230043: Add Webauthn support to Mobile apps.

Reedy changed the status of subtask T227244: Security review of WebAuthn library dependencies from Stalled to Open.Sep 4 2019, 4:51 PM

Reedy mentioned this in T232639: Get UX review for OATHAuth/WebAuthn.Sep 11 2019, 5:22 PM

• MarcoAurelio added a project: Wikimedia-Extension-setup.Sep 26 2019, 10:38 AM

Jcross triaged this task as Medium priority.Oct 4 2019, 4:16 PM

Jcross moved this task from Incoming to In Progress on the Security-Team board.

Jcross moved this task from In Progress to Watching on the Security-Team board.Oct 4 2019, 4:20 PM

Reedy closed subtask T227244: Security review of WebAuthn library dependencies as Resolved.Oct 8 2019, 5:17 PM

Change 541855 had a related patch set uploaded (by Jforrester; owner: Jforrester):
[mediawiki/tools/release@master] Start branching WebAuthn for wmf/

https://gerrit.wikimedia.org/r/541855

gerritbot added a project: Patch-For-Review.Oct 9 2019, 4:50 PM

Change 541855 merged by jenkins-bot:
[mediawiki/tools/release@master] Start branching WebAuthn for wmf/

https://gerrit.wikimedia.org/r/541855

Maintenance_bot removed a project: Patch-For-Review.Oct 9 2019, 7:10 PM

Krinkle updated the task description. (Show Details)Oct 12 2019, 4:50 PM

Krinkle removed a subtask: T176370: Migrate to PHP 7 in WMF production.

Krinkle updated the task description. (Show Details)Oct 12 2019, 4:54 PM

Krinkle added a subtask: T192166: Drop HHVM support from MediaWiki.

Masumrezarock100 added a subscriber: Masumrezarock100.Oct 14 2019, 8:03 PM

Reedy closed subtask T100373: WebAuthn (U2F) integration for Extension:OATHAuth as Resolved.Oct 16 2019, 2:36 PM

Change 545582 had a related patch set uploaded (by Reedy; owner: Reedy):
[translatewiki@master] Enable translation for WebAuthn

https://gerrit.wikimedia.org/r/545582

gerritbot added a project: Patch-For-Review.Oct 23 2019, 2:56 PM

We should start getting it translated :)

Change 545582 merged by jenkins-bot:
[translatewiki@master] Enable translation for WebAuthn

https://gerrit.wikimedia.org/r/545582

Reedy mentioned this in rGTWN9fc37f8183d8: Enable translation for WebAuthn.Oct 23 2019, 3:03 PM

Maintenance_bot removed a project: Patch-For-Review.Oct 23 2019, 3:11 PM

If this about https://www.mediawiki.org/wiki/Extension:WebAuthn then there should be a Phab project tag so tasks can be planned?
See https://www.mediawiki.org/wiki/Review_queue and https://www.mediawiki.org/wiki/Phabricator/Creating_and_renaming_projects

Reedy added a subtask: T236907: mwgate-composer-php72-docker missing php-intl.Oct 30 2019, 2:25 PM

Change 546975 had a related patch set uploaded (by Jforrester; owner: Reedy):
[operations/mediawiki-config@master] Enable WebAuthn on all beta wikis

https://gerrit.wikimedia.org/r/546975

gerritbot added a project: Patch-For-Review.Oct 30 2019, 7:52 PM

Jdforrester-WMF closed subtask T236907: mwgate-composer-php72-docker missing php-intl as Resolved.Oct 31 2019, 7:03 PM

Jdforrester-WMF reopened subtask T236907: mwgate-composer-php72-docker missing php-intl as Open.Oct 31 2019, 7:48 PM

Change 547215 had a related patch set uploaded (by Jforrester; owner: Reedy):
[mediawiki/vendor@master] Add vendor libraries for WebAuthn

https://gerrit.wikimedia.org/r/547215

Jdforrester-WMF closed subtask T236907: mwgate-composer-php72-docker missing php-intl as Resolved.Nov 6 2019, 4:07 PM

Change 547215 merged by jenkins-bot:
[mediawiki/vendor@master] Add vendor libraries for WebAuthn

https://gerrit.wikimedia.org/r/547215

ReleaseTaggerBot added a project: MW-1.35-notes (1.35.0-wmf.8; 2019-11-26).Nov 6 2019, 5:00 PM

Change 546975 merged by jenkins-bot:
[operations/mediawiki-config@master] Enable WebAuthn on all beta wikis

https://gerrit.wikimedia.org/r/546975

Mentioned in SAL (#wikimedia-operations) [2019-11-06T17:09:54Z] <jforrester@deploy1001> Synchronized wmf-config/InitialiseSettings.php: Set wmgUseWebAuthn false in all of production T227242 (duration: 01m 01s)

Mentioned in SAL (#wikimedia-operations) [2019-11-06T17:11:30Z] <jforrester@deploy1001> Synchronized wmf-config/CommonSettings.php: Enable WebAuthn extension if wmgUseWebAuthn is set (false in all of production) T227242 (duration: 01m 00s)

Maintenance_bot removed a project: Patch-For-Review.Nov 6 2019, 5:11 PM