Page MenuHomePhabricator
Create Task
Maniphest T227242

Deploy WebAuthn to Wikimedia Wikis
Closed, ResolvedPublic
Actions

Description

Prep task.

Note, this requires PHP 7 so blocked on completion of T192166: Drop HHVM support from MediaWiki

Related Objects
Search...

StatusSubtypeAssignedTask
 ResolvedReedyT227242 Deploy WebAuthn to Wikimedia Wikis
 ResolvedItSpidermanT100373 WebAuthn (U2F) integration for Extension:OATHAuth
 ResolvedItSpidermanT218210 SO878 Step 1: Refactor OATHAuth extension
 ResolvedItSpidermanT226053 Special:Manage_Two-factor_authentication looks odd
 ResolvedReedyT226057 s/OATH Manage/Manage OATH/
 ResolvedItSpidermanT218211 SO878 Step 2: Implement WebAuthn method
 ResolvedReedyT227244 Security review of WebAuthn library dependencies
 OpenNoneT232099 What to do about multiple libraries implementing the same thing?
 ResolvedItSpidermanT218214 SO878 Step 3: Finalize settings and user experience
 ResolvedCCicalese_WMFT226058 oathauth-ui-error-page-no-module need refining
 ResolvedItSpidermanT226056 Describe what different auth methods are
 ResolvedPRODUCTION ERRORItSpidermanT231786 Error trying to enable 2FA on testwiki: "Call to a member function getSecret() on a non-object (array)"
 ResolvedItSpidermanT232008 Ability to overwrite 2FA method without providing/re-auth using existing secondary authentication method
 ResolvedItSpidermanT218215 SO878 Step 4: Bind permissions to 2FA
 ResolvedJdforrester-WMFT226737 Enable Phan and seccheck on WebAuthn extension
 ResolvedJdforrester-WMFT226752 mwext-php72-phan-docker running composer under PHP 7.0
 ResolvedJdforrester-WMFT227043 ext-gmp/ext-bcmath missing for Phan jobs based on php 7.2
 OpenNoneT232639 Get UX review for OATHAuth/WebAuthn
 OpenNoneT230043 Add WebAuthn support to Mobile apps
 DeclinedNoneT231242 [Spike] Webauthn support for iOS app
 ResolvedNoneT248878 [SPIKE] Investigate potential move to Webauthn support
 ResolvedJdforrester-WMFT192166 Drop HHVM support from MediaWiki
 ResolvedJdforrester-WMFT234062 ci-src-setup job (used by mediawiki-core-php72-phan-docker) is still running on PHP 7.0.33
 ResolvedJdforrester-WMFT234384 Drop HHVM from CI
 ResolvedjijikiT229792 Remove HHVM from production
 ResolvedawightT236019 Remove HHVM support from Quibble
 ResolvedjijikiT239054 Reimage all mediawiki servers
ResolvedJdforrester-WMFT236907 mwgate-composer-php72-docker missing php-intl
 ResolvedAnomieT237049 DifferenceEngineTest and ApiComparePagesTest failures when wikidiff2 is installed

Event Timeline

Reedy created this task.Jul 4 2019, 12:16 AM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJul 4 2019, 12:16 AM
Reedy added a subtask: T100373: WebAuthn (U2F) integration for Extension:OATHAuth.Jul 4 2019, 12:16 AM
Reedy changed the task status from Open to Stalled.Jul 4 2019, 12:18 AM
Reedy added a subtask: T176370: Migrate to PHP 7 in WMF production.
Jdforrester-WMF added projects: Security-Team, Release-Engineering-Team.Jul 4 2019, 12:20 AM
Reedy changed the status of subtask T227244: Security review of WebAuthn library dependencies from Open to Stalled.Jul 4 2019, 12:28 AM
Paladox subscribed.Jul 4 2019, 12:35 AM
AntiCompositeNumber subscribed.Jul 4 2019, 12:52 AM
greg moved this task from INBOX to Deployment services on the Release-Engineering-Team board.Jul 8 2019, 7:13 PM
greg edited projects, added Release-Engineering-Team (Deployment services); removed Release-Engineering-Team.
greg added a project: Wikimedia-extension-review-queue.Jul 11 2019, 9:44 PM
Reedy mentioned this in T230043: Add WebAuthn support to Mobile apps.Aug 7 2019, 4:59 PM
Reedy added a subtask: T230043: Add WebAuthn support to Mobile apps.
Reedy changed the status of subtask T227244: Security review of WebAuthn library dependencies from Stalled to Open.Sep 4 2019, 4:51 PM
Reedy mentioned this in T232639: Get UX review for OATHAuth/WebAuthn.Sep 11 2019, 5:22 PM
MarcoAurelio added a project: Wikimedia-Extension-setup.Sep 26 2019, 10:38 AM
• Jcross triaged this task as Medium priority.Oct 4 2019, 4:16 PM
• Jcross moved this task from Incoming to In Progress on the Security-Team board.
• Jcross moved this task from In Progress to Watching on the Security-Team board.Oct 4 2019, 4:20 PM
Reedy closed subtask T227244: Security review of WebAuthn library dependencies as Resolved.Oct 8 2019, 5:17 PM
gerritbot added a comment.Oct 9 2019, 4:50 PM

Change 541855 had a related patch set uploaded (by Jforrester; owner: Jforrester):
[mediawiki/tools/release@master] Start branching WebAuthn for wmf/

https://gerrit.wikimedia.org/r/541855

gerritbot added a project: Patch-For-Review.Oct 9 2019, 4:50 PM
gerritbot added a comment.Oct 9 2019, 6:21 PM

Change 541855 merged by jenkins-bot:
[mediawiki/tools/release@master] Start branching WebAuthn for wmf/

https://gerrit.wikimedia.org/r/541855

Maintenance_bot removed a project: Patch-For-Review.Oct 9 2019, 7:10 PM
Krinkle updated the task description. (Show Details)Oct 12 2019, 4:50 PM
Krinkle removed a subtask: T176370: Migrate to PHP 7 in WMF production.
Krinkle updated the task description. (Show Details)Oct 12 2019, 4:54 PM
Krinkle added a subtask: T192166: Drop HHVM support from MediaWiki.
Masumrezarock100 subscribed.Oct 14 2019, 8:03 PM
Reedy closed subtask T100373: WebAuthn (U2F) integration for Extension:OATHAuth as Resolved.Oct 16 2019, 2:36 PM
gerritbot added a comment.Oct 23 2019, 2:56 PM

Change 545582 had a related patch set uploaded (by Reedy; owner: Reedy):
[translatewiki@master] Enable translation for WebAuthn

https://gerrit.wikimedia.org/r/545582

gerritbot added a project: Patch-For-Review.Oct 23 2019, 2:56 PM
Reedy changed the task status from Stalled to Open.Oct 23 2019, 2:57 PM

We should start getting it translated :)

gerritbot added a comment.Oct 23 2019, 3:00 PM

Change 545582 merged by jenkins-bot:
[translatewiki@master] Enable translation for WebAuthn

https://gerrit.wikimedia.org/r/545582

Reedy mentioned this in rGTWN9fc37f8183d8: Enable translation for WebAuthn.Oct 23 2019, 3:03 PM
Maintenance_bot removed a project: Patch-For-Review.Oct 23 2019, 3:11 PM
Aklapper added a comment.Oct 24 2019, 5:10 PM

If this about https://www.mediawiki.org/wiki/Extension:WebAuthn then there should be a Phab project tag so tasks can be planned?
See https://www.mediawiki.org/wiki/Review_queue and https://www.mediawiki.org/wiki/Phabricator/Creating_and_renaming_projects

Reedy added a subtask: T236907: mwgate-composer-php72-docker missing php-intl.Oct 30 2019, 2:25 PM
gerritbot added a comment.Oct 30 2019, 7:52 PM

Change 546975 had a related patch set uploaded (by Jforrester; owner: Reedy):
[operations/mediawiki-config@master] Enable WebAuthn on all beta wikis

https://gerrit.wikimedia.org/r/546975

gerritbot added a project: Patch-For-Review.Oct 30 2019, 7:52 PM
Jdforrester-WMF closed subtask T236907: mwgate-composer-php72-docker missing php-intl as Resolved.Oct 31 2019, 7:03 PM
Jdforrester-WMF reopened subtask T236907: mwgate-composer-php72-docker missing php-intl as Open.Oct 31 2019, 7:48 PM
gerritbot added a comment.Nov 6 2019, 4:05 PM

Change 547215 had a related patch set uploaded (by Jforrester; owner: Reedy):
[mediawiki/vendor@master] Add vendor libraries for WebAuthn

https://gerrit.wikimedia.org/r/547215

Jdforrester-WMF closed subtask T236907: mwgate-composer-php72-docker missing php-intl as Resolved.Nov 6 2019, 4:07 PM
gerritbot added a comment.Nov 6 2019, 4:43 PM

Change 547215 merged by jenkins-bot:
[mediawiki/vendor@master] Add vendor libraries for WebAuthn

https://gerrit.wikimedia.org/r/547215

ReleaseTaggerBot added a project: MW-1.35-notes (1.35.0-wmf.8; 2019-11-26).Nov 6 2019, 5:00 PM
gerritbot added a comment.Nov 6 2019, 5:07 PM

Change 546975 merged by jenkins-bot:
[operations/mediawiki-config@master] Enable WebAuthn on all beta wikis

https://gerrit.wikimedia.org/r/546975

Stashbot added a comment.Nov 6 2019, 5:09 PM

Mentioned in SAL (#wikimedia-operations) [2019-11-06T17:09:54Z] <jforrester@deploy1001> Synchronized wmf-config/InitialiseSettings.php: Set wmgUseWebAuthn false in all of production T227242 (duration: 01m 01s)

Stashbot added a comment.Nov 6 2019, 5:11 PM

Mentioned in SAL (#wikimedia-operations) [2019-11-06T17:11:30Z] <jforrester@deploy1001> Synchronized wmf-config/CommonSettings.php: Enable WebAuthn extension if wmgUseWebAuthn is set (false in all of production) T227242 (duration: 01m 00s)

Maintenance_bot removed a project: Patch-For-Review.Nov 6 2019, 5:11 PM
Jdforrester-WMF closed this task as Resolved.Jan 6 2020, 6:01 PM
Jdforrester-WMF assigned this task to Reedy.
Jdforrester-WMF subscribed.

Live everywhere, as of this morning.

gerritbot added a comment.Mar 15 2020, 5:48 PM

Change 579870 had a related patch set uploaded (by Reedy; owner: Reedy):
[mediawiki/vendor@master] Remove paragonie/random_compat

https://gerrit.wikimedia.org/r/579870

gerritbot added a project: Patch-For-Review.Mar 15 2020, 5:48 PM
gerritbot added a comment.Mar 15 2020, 8:33 PM

Change 579870 merged by jenkins-bot:
[mediawiki/vendor@master] Remove paragonie/random_compat

https://gerrit.wikimedia.org/r/579870

ReleaseTaggerBot edited projects, added MW-1.35-notes (1.35.0-wmf.24; 2020-03-17); removed MW-1.35-notes (1.35.0-wmf.8; 2019-11-26).Mar 15 2020, 9:00 PM
Maintenance_bot removed a project: Patch-For-Review.Mar 15 2020, 9:10 PM
Krinkle mentioned this in T256432: Performance review of WebAuthn extension.Jun 25 2020, 9:50 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL