Page MenuHomePhabricator
Create Task
Maniphest T227242

Deploy WebAuthn to Wikimedia Wikis
Open, NormalPublic
Actions

Description

Prep task.

Note, this requires PHP 7 so blocked on completion of T192166: Drop HHVM support from MediaWiki

Details

Related Gerrit Patches:
operations/mediawiki-config : masterEnable WebAuthn on all beta wikis
mediawiki/vendor : masterAdd vendor libraries for WebAuthn
translatewiki : masterEnable translation for WebAuthn
mediawiki/tools/release : masterStart branching WebAuthn for wmf/

Related Objects
Search...

StatusAssignedTask
 OpenNoneT227242 Deploy WebAuthn to Wikimedia Wikis
 ResolvedItSpidermanT100373 WebAuthn (U2F) integration for Extension:OATHAuth
 ResolvedItSpidermanT218210 SO878 Step 1: Refactor OATHAuth extension
 ResolvedItSpidermanT226053 Special:Manage_Two-factor_authentication looks odd
 ResolvedReedyT226057 s/OATH Manage/Manage OATH/
 ResolvedItSpidermanT218211 SO878 Step 2: Implement WebAuthn method
 ResolvedReedyT227244 Security review of WebAuthn library dependencies
 OpenNoneT232099 What to do about multiple libraries implementing the same thing?
 ResolvedItSpidermanT218214 SO878 Step 3: Finalize settings and user experience
 ResolvedCCicalese_WMFT226058 oathauth-ui-error-page-no-module need refining
 ResolvedItSpidermanT226056 Describe what different auth methods are
 ResolvedItSpidermanT231786 Error trying to enable 2FA on testwiki: "Call to a member function getSecret() on a non-object (array)"
 ResolvedItSpidermanT232008 Ability to overwrite 2FA method without providing/re-auth using existing secondary authentication method
 ResolvedItSpidermanT218215 SO878 Step 4: Bind permissions to 2FA
 ResolvedJdforrester-WMFT226737 Enable Phan and seccheck on WebAuthn extension
 ResolvedJdforrester-WMFT226752 mwext-php72-phan-docker running composer under PHP 7.0
 ResolvedJdforrester-WMFT227043 ext-gmp/ext-bcmath missing for Phan jobs based on php 7.2
 OpenNoneT232639 Get UX review for OATHAuth/WebAuthn
 OpenNoneT230043 Add Webauthn support to Mobile apps
 OpenNoneT231242 [Spike] Webauthn support for iOS app
 ResolvedJdforrester-WMFT192166 Drop HHVM support from MediaWiki
 ResolvedJdforrester-WMFT234062 ci-src-setup job (used by mediawiki-core-php72-phan-docker) is still running on PHP 7.0.33
 ResolvedJdforrester-WMFT234384 Drop HHVM from CI
 OpenjijikiT229792 Remove HHVM from production
 OpenawightT236019 Remove HHVM support from Quibble
 OpenjijikiT236048 Move debugging symbols and tools to a new class
 ResolvedJdforrester-WMFT236907 mwgate-composer-php72-docker missing php-intl
 ResolvedAnomieT237049 DifferenceEngineTest and ApiComparePagesTest failures when wikidiff2 is installed

Event Timeline

Reedy created this task.Jul 4 2019, 12:16 AM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJul 4 2019, 12:16 AM
Reedy changed the task status from Open to Stalled.Jul 4 2019, 12:18 AM
Reedy added a subtask: T176370: Migrate to PHP 7 in WMF production.
Jcross triaged this task as Normal priority.Oct 4 2019, 4:16 PM
Jcross moved this task from Backlog to In Progress on the Security-Team board.
Jcross moved this task from In Progress to Watching on the Security-Team board.Oct 4 2019, 4:20 PM
gerritbot added a comment.Oct 9 2019, 4:50 PM

Change 541855 had a related patch set uploaded (by Jforrester; owner: Jforrester):
[mediawiki/tools/release@master] Start branching WebAuthn for wmf/

https://gerrit.wikimedia.org/r/541855

gerritbot added a comment.Oct 9 2019, 6:21 PM

Change 541855 merged by jenkins-bot:
[mediawiki/tools/release@master] Start branching WebAuthn for wmf/

https://gerrit.wikimedia.org/r/541855

gerritbot added a comment.Wed, Oct 23, 2:56 PM

Change 545582 had a related patch set uploaded (by Reedy; owner: Reedy):
[translatewiki@master] Enable translation for WebAuthn

https://gerrit.wikimedia.org/r/545582

Reedy changed the task status from Stalled to Open.Wed, Oct 23, 2:57 PM

We should start getting it translated :)

gerritbot added a comment.Wed, Oct 23, 3:00 PM

Change 545582 merged by jenkins-bot:
[translatewiki@master] Enable translation for WebAuthn

https://gerrit.wikimedia.org/r/545582

gerritbot added a comment.Wed, Oct 30, 7:52 PM

Change 546975 had a related patch set uploaded (by Jforrester; owner: Reedy):
[operations/mediawiki-config@master] Enable WebAuthn on all beta wikis

https://gerrit.wikimedia.org/r/546975

gerritbot added a comment.Wed, Nov 6, 4:05 PM

Change 547215 had a related patch set uploaded (by Jforrester; owner: Reedy):
[mediawiki/vendor@master] Add vendor libraries for WebAuthn

https://gerrit.wikimedia.org/r/547215

gerritbot added a comment.Wed, Nov 6, 4:43 PM

Change 547215 merged by jenkins-bot:
[mediawiki/vendor@master] Add vendor libraries for WebAuthn

https://gerrit.wikimedia.org/r/547215

gerritbot added a comment.Wed, Nov 6, 5:07 PM

Change 546975 merged by jenkins-bot:
[operations/mediawiki-config@master] Enable WebAuthn on all beta wikis

https://gerrit.wikimedia.org/r/546975

Stashbot added a comment.Wed, Nov 6, 5:09 PM

Mentioned in SAL (#wikimedia-operations) [2019-11-06T17:09:54Z] <jforrester@deploy1001> Synchronized wmf-config/InitialiseSettings.php: Set wmgUseWebAuthn false in all of production T227242 (duration: 01m 01s)

Stashbot added a comment.Wed, Nov 6, 5:11 PM

Mentioned in SAL (#wikimedia-operations) [2019-11-06T17:11:30Z] <jforrester@deploy1001> Synchronized wmf-config/CommonSettings.php: Enable WebAuthn extension if wmgUseWebAuthn is set (false in all of production) T227242 (duration: 01m 00s)

Content licensed under Creative Commons Attribution-ShareAlike 3.0 (CC-BY-SA) unless otherwise noted; code licensed under GNU General Public License (GPL) or other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL