It doesn't make sense to try and grant anonymous users the ability to activate 2fa, and it leads to Manage Two-factor authentication being listed for anons at, eg, https://foundation.wikimedia.org/wiki/Special:SpecialPages
Instead, it should be granted to users, and revoked from them, as needed
This requires
Hence also tagging as a site request
Change 582613 had a related patch set uploaded (by DannyS712; owner: DannyS712):
[operations/mediawiki-config@master] Don't try to grant oathauth-enable to * (part 1)
Change 582614 had a related patch set uploaded (by DannyS712; owner: DannyS712):
[mediawiki/extensions/OATHAuth@master] Don't try to grant oathauth-enable to *
Change 582615 had a related patch set uploaded (by DannyS712; owner: DannyS712):
[operations/mediawiki-config@master] Don't try to grant oathauth-enable to * (part 2)
To be on the safe side, and not accidentally grant all users the ability to enable 2FA, the three patches need to be merged separately
Config update part 1 scheduled for SWAT: Monday, March 23 18:00–19:00 UTC (Morning SWAT)
Change 582613 merged by jenkins-bot:
[operations/mediawiki-config@master] Don't try to grant oathauth-enable to * (part 1)
Mentioned in SAL (#wikimedia-operations) [2020-03-23T18:24:55Z] <urbanecm@deploy1001> Synchronized wmf-config/CommonSettings.php: SWAT: 212114e: Dont try to grant oathauth-enable to * (T248282) (duration: 00m 59s)
Change 582614 merged by jenkins-bot:
[mediawiki/extensions/OATHAuth@master] Don't try to grant oathauth-enable to *
Change 582615 merged by jenkins-bot:
[operations/mediawiki-config@master] Don't try to grant oathauth-enable to * (part 2)
Mentioned in SAL (#wikimedia-operations) [2020-04-02T23:09:01Z] <catrope@deploy1001> Synchronized wmf-config/CommonSettings.php: Don't try to grant 'oathauth-enable' to '*' (part 2) (T248282) (duration: 00m 58s)