Internal error when trying to revoke OAuth consumer
Closed, DuplicatePublicPRODUCTION ERROR
Actions

Assigned To

None

Authored By

	Tacsipacsi
	Mar 19 2020, 5:50 PM

Description

Error message

[XnOwTgpAAEMAAFgx-74AAAAO] 2020-03-19 17:47:58: Fatal exception of type "Error"

Impact

OAuth consumers’ access cannot be revoked, not even malicious ones’.

Details

Request ID: XnOwTgpAAEMAAFgx-74AAAAO
Request URL: https://hu.wikipedia.org/wiki/Speciális:OAuthManageMyGrants/revoke/XXXX

Stack Trace

Event Timeline

Tacsipacsi created this task.Mar 19 2020, 5:50 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMar 19 2020, 5:50 PM

This is a major security issue: if a user is tricked into granting an OAuth consumer, there is no way back.

Restricted Application added a subscriber: Liuxinyu970226. · View Herald TranscriptMar 19 2020, 5:52 PM

Error message:

Error from line 95 of /srv/mediawiki/php-1.35.0-wmf.23/extensions/OAuth/includes/frontend/specialpages/SpecialMWOAuthManageMyGrants.php: Call to a member function getConsumerKey() on boolean

matmarex closed this task as a duplicate of T247531: SpecialMWOAuthManageMyGrants: Call to a member function getConsumerKey() on boolean.Mar 19 2020, 5:55 PM

Restricted Application removed a subscriber: Liuxinyu970226. · View Herald TranscriptMar 19 2020, 5:55 PM

Internal error when trying to revoke OAuth consumerClosed, DuplicatePublicPRODUCTION ERRORActions

Description

Impact

Details

Event Timeline

Internal error when trying to revoke OAuth consumer
Closed, DuplicatePublicPRODUCTION ERROR
Actions