Update messages to notify WebAuthn users that they need to login on the same wiki they registered
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Reedy
	Mar 24 2020, 1:21 AM

Description

Probably best done in WikimediaMessages as overrides? Or in WebAuthn itself with a ExtensionRegistry::getInstance()->isLoaded( 'CentralAuth' ) conditional to alter the messages?

Details

Related Changes in Gerrit:

	Subject	Repo	Branch	Lines +/-
	Override WebAuthn messages due to bug T248367	mediawiki/extensions/WikimediaMessages	master	+8 -2

Customize query in gerrit

Related Objects
Search...

Status	Assigned	Task
Open	None	T345245 Mitigate phase-out of third-party cookies in Wikimedia production
Resolved	Tgr	T345249 Mitigate phase-out of third-party cookies in CentralAuth
Resolved	OWresch-WMF	T348388 SUL3: Use a dedicated domain for login and account creation
Stalled	None	T399839 Update the Patch demo `tarball` preset to reflect changes to the list of bundled extensions/skins made with MediaWiki 1.45
Open	None	T392080 Expand the set of bundled extensions and skins in MediaWiki 1.45
Declined	None	T258007 Bundle WebAuthn extension with MediaWiki
Resolved	Tgr	T244088 Logging in at another wiki than WebAuth was set up fails
Resolved	Tgr	T384219 SUL3 Phase 4: Staged rollout for all existing users
Resolved	Tgr	T362715 Move credentials change to central domain
Open	None	T399644 FY2025-26 WE4.6.2 Multiple Authenticators
Resolved	Mstyles	T401773 Always redirect 2FA management special page to auth domain on SUL wikis, so that WebAuthn setup can be offered
Open	None	T391535 Remove top-level autologin (once SUL2 support is dropped)
Open	None	T402423 Remove &usesul3= URL parameter
Open	None	T376021 Migrate WebAuthn on Wikimedia wikis to central domain
Resolved	None	T248339 Decide how to deal with WebAuthn login/registration flow on Wikimedia wikis in future
Resolved	Reedy	T248367 Update messages to notify WebAuthn users that they need to login on the same wiki they registered

Event Timeline

Reedy created this task.Mar 24 2020, 1:21 AM

Anomie moved this task from Inbox to Triage Meeting Inbox on the Platform Engineering board.Mar 24 2020, 1:52 PM

Reedy moved this task from Incoming to Back Orders on the Security-Team board.Mar 24 2020, 3:26 PM

This doesn't seem to be within scope of Platform Engineering, so we're untagging ourselves.

Anomie unsubscribed.Mar 24 2020, 8:07 PM

Change 588101 had a related patch set uploaded (by Reedy; owner: Reedy):
[mediawiki/extensions/WikimediaMessages@master] Override WebAuthn messages due to bug T248367

https://gerrit.wikimedia.org/r/588101

gerritbot added a project: Patch-For-Review.Apr 11 2020, 6:20 PM

Change 588101 merged by jenkins-bot:
[mediawiki/extensions/WikimediaMessages@master] Override WebAuthn messages due to bug T248367

https://gerrit.wikimedia.org/r/588101

ReleaseTaggerBot added a project: MW-1.35-notes (1.35.0-wmf.30; 2020-04-28).Apr 17 2020, 11:00 PM

Maintenance_bot removed a project: Patch-For-Review.Apr 17 2020, 11:10 PM

Reedy closed this task as Resolved.Apr 19 2020, 9:46 PM

Reedy claimed this task.

LucasWerkmeister mentioned this in T244088: Logging in at another wiki than WebAuth was set up fails.Dec 9 2022, 8:44 PM