"As a User, I want to delete all access tokens when I change my password, so that applications need to re-authorize."
This is a best practice in the OAuth 2.0 world, based on the assumption that the user needed to change their password because they're concerned about a security breach.
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Invalid | None | T229661 Core REST API in MediaWiki | |||
| Resolved | • eprodromou | T234665 Add OAuth 2.0 support to MediaWiki REST API | |||
| Open | None | T234674 Delete OAuth 2.0 access tokens on password change |
Adding missing MediaWiki-REST-API code project tag as Platform Team Initiatives (MW REST API in PHP) team tag is archived and its parent Platform Engineering team does not exist anymore