Page MenuHomePhabricator

Login screen shown during the OAuth authorization process should have an explanatory message on it
Closed, ResolvedPublic

Description

The MediaWiki OAuth extension allows a MediaWiki wiki to act as an OAuth provider, which can be used by third-party websites to use that wiki for identifying users: the user is sent to the wiki, where they can grant permission to the third-party website through a confirmation dialog to read their identity.

If a user is sent to the confirmation page but they are not logged into the wiki, they are redirected to the wiki's login page, and then back to the confirmation dialog. This might be confusing - users might not understand why they need to login to a completely different site then where they originally were.

This task is about adding an informational message to the wiki login page, which shortly explains why the user needs to log in here. This can be done by implementing the LoginFormValidErrorMessages hook in the OAuth extension.

Extension repository: https://gerrit.wikimedia.org/g/mediawiki/extensions/OAuth

Learn more about Git, Gerrit and how to submit a patch: https://www.mediawiki.org/wiki/Gerrit/Tutorial

Event Timeline

If someone wants to take a shot at this, LoginHelper and the LoginFormValidErrorMessages hook are probably the place to look at.

I added a screenshot of how the screen looks at the moment :)

I'm not sure what is expected here, something like the following?

"dashboard.wikiedu.org would like to use your Wikipedia account to log you into their site. Please read the requested permissions carefully and confirm that you want to give that application access to your account."??

No, the task is about showing a message on the login screen if the user needs to log in to get access to the authorization dialog.

Awesome! Thanks for the clarification :)

srishakatux subscribed.

(replaced the task description with that used in the GCI task as it was slightly more easy to follow)

Change 572360 had a related patch set uploaded (by Ammarpad; owner: Ammarpad):
[mediawiki/extensions/OAuth@master] Show help message atop SpecialLogin when a user is redirected there

https://gerrit.wikimedia.org/r/572360

Change 572360 merged by jenkins-bot:
[mediawiki/extensions/OAuth@master] Show help message atop SpecialLogin when a user is redirected there

https://gerrit.wikimedia.org/r/572360