Add OAuth 2.0 support to MediaWiki for use by web-based clients
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	• CCicalese_WMF
	Jul 31 2019, 9:51 PM

Description

This is an epic of a Platform Engineering initiative that is documented here.

Non-functional requirements:

OAuth 1.0 and OAuth 2.0 must be able to coexist
Implementation in the existing OAuth extension
Code must be extensible to support API-based clients in Epic 2
The MediaWiki code should not depend upon a particular client in any way
Possibly test with Wikimedia-hosted Discourse instance
Security review of all new code
Implement on top of new MediaWiki REST API support, if possible
Use existing library, if possible
- https://github.com/thephpleague/oauth2-server (needs security review)

Details

Related Changes in Gerrit:

	Subject	Repo	Branch	Lines +/-
	Move OAuth2 functionality to OAuth(1) - session provider	mediawiki/extensions/OAuth	master	+461 -119

Customize query in gerrit

Related Objects
Search...

Status	Assigned	Task
Resolved	• CCicalese_WMF	T229500 Add OAuth 2.0 support to MediaWiki
Resolved	• CCicalese_WMF	T229501 Add OAuth 2.0 support to MediaWiki for use by web-based clients
Resolved	None	T229505 Admin adds new client
Resolved	None	T229506 Admin removes client
Resolved	None	T229508 User requests login using OAuth 2.0
Duplicate	None	T229509 User requests login to client when user is not already logged in to server (wiki)
Declined	None	T229511 Admin whitelists client
Resolved	None	T232634 Manage OAuth 2.0 grants for a user
Resolved	Reedy	T239940 Security review of OAuth 2.0 patches

Event Timeline

• CCicalese_WMF created this task.Jul 31 2019, 9:51 PM

• CCicalese_WMF triaged this task as Medium priority.

• CCicalese_WMF moved this task from Epic Backlog to User Story Tasks being created on the Platform Team Workboards (Epics) board.

Paladox subscribed.Jul 31 2019, 9:52 PM

• CCicalese_WMF updated the task description. (Show Details)Jul 31 2019, 11:05 PM

Izno subscribed.Aug 1 2019, 3:08 AM

• CCicalese_WMF updated the task description. (Show Details)Aug 1 2019, 2:01 PM

• CCicalese_WMF moved this task from User Story Tasks being created to Ready for Engineering on the Platform Team Workboards (Epics) board.Aug 14 2019, 2:28 PM

• CCicalese_WMF moved this task from Ready for Engineering to Doing on the Platform Team Workboards (Epics) board.

Change 550847 had a related patch set uploaded (by ItSpiderman; owner: ItSpiderman):
[mediawiki/extensions/OAuth@master] Move OAuth2 functionality to OAuth(1) - session provider

https://gerrit.wikimedia.org/r/550847

gerritbot added a project: Patch-For-Review.Nov 14 2019, 2:57 PM

• CCicalese_WMF updated the task description. (Show Details)Dec 5 2019, 6:03 PM

• CCicalese_WMF mentioned this in T239940: Security review of OAuth 2.0 patches.Dec 5 2019, 6:24 PM

• CCicalese_WMF added a subtask: T239940: Security review of OAuth 2.0 patches.Dec 5 2019, 6:26 PM

Change 550847 merged by jenkins-bot:
[mediawiki/extensions/OAuth@master] Move OAuth2 functionality to OAuth(1) - session provider

https://gerrit.wikimedia.org/r/550847

Reedy closed subtask T239940: Security review of OAuth 2.0 patches as Resolved.Jan 13 2020, 4:19 PM

ReleaseTaggerBot added a project: MW-1.35-notes (1.35.0-wmf.15; 2020-01-14).Jan 13 2020, 5:00 PM

• CCicalese_WMF closed subtask T229506: Admin removes client as Resolved.Jan 17 2020, 8:48 PM

• CCicalese_WMF closed subtask T229511: Admin whitelists client as Declined.Jan 17 2020, 8:50 PM

• CCicalese_WMF closed subtask T229505: Admin adds new client as Resolved.