"As a Developer, I want to use an access token as a bearer token for the REST API, to identify requests made on behalf of a user."
Description
Description
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Invalid | None | T229661 Core REST API in MediaWiki | |||
| Resolved | • eprodromou | T234665 Add OAuth 2.0 support to MediaWiki REST API | |||
| Duplicate | None | T234667 OAuth 2.0 Access Token for Authorization |
Event Timeline
Comment Actions
We definitely need Authorization header with Bearer tokens.
Stretch goal: access_token query parameter.
Comment Actions
Adding missing MediaWiki-REST-API code project tag as Core Platform Team Initiatives (MW REST API in PHP) team tag is archived and its parent Platform Engineering team does not exist anymore
Comment Actions
Stretch goal: access_token query parameter.
I believe this part didn't happen, but I don't think it's terribly useful anyway. Support for the Authorize header is required by the spec, the other alternatives aren't (T265148#10417155).