Page MenuHomePhabricator
Create Task
Maniphest T234666

Use OAuth 2.0 With Client Developer's Authorization
Open, Needs TriagePublic
Actions

Description

"As a Developer, I want to use a bearer token for the REST API that represents my organization, to identify requests made on behalf of my company."

This was originally about using client ID's for authorization. Per our discussions, we'd instead like to use a long-lived access token representing the client ID owner.

Related Objects
Search...

Event Timeline

• eprodromou created this task.Oct 4 2019, 4:24 PM
• eprodromou removed a subscriber: sbassett.Oct 4 2019, 6:50 PM
tstarling subscribed.Nov 12 2019, 6:22 AM

I'm not sure I understand this. As I said at T234677#5655125, the spec says the client ID should not be used for authorization.

• eprodromou renamed this task from Use OAuth 2.0 Client ID for Authorization to Use OAuth 2.0 With Client Developer's Authorization.Nov 20 2019, 5:57 PM
• eprodromou updated the task description. (Show Details)
In T234666#5655144, @tstarling wrote:

I'm not sure I understand this. As I said at T234677#5655125, the spec says the client ID should not be used for authorization.

Updated to be about an owner-authorized access token.

• eprodromou added a comment.Nov 20 2019, 6:09 PM

Client credentials work fine here.

CCicalese_WMF edited projects, added Core Platform Team Initiatives (MW REST API in PHP); removed Core Platform Team Initiatives (OAuth 2.0).Mar 18 2020, 9:45 PM
Aklapper removed EvanProdromou as the assignee of this task.May 25 2021, 8:39 PM
Aklapper added a subscriber: EvanProdromou.
Aklapper added a project: MediaWiki-REST-API.Oct 17 2023, 8:03 AM

Adding missing MediaWiki-REST-API code project tag as Core Platform Team Initiatives (MW REST API in PHP) team tag is archived and its parent Platform Engineering team does not exist anymore

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits