Looking at https://meta.wikimedia.org/wiki/Special:OAuthManageConsumers/approved "Consumer key" is then used...

"client token" isn't mentioned in i18n/en.json

I asked a question relating to this here: https://meta.wikimedia.org/wiki/Tech#What_to_use_as_client_id_for_OAuth2

I filed T253568: Make the terminology of OAuth UI and documentation easy to understand although in hindsight I should have probably edited this task.

@apaskulin I know that we've been working on harmonising these terms. Do you mind looking this over and changing to the right terminology?

I've made some quick updates to the page to help clarify things in relation to the terms used on Meta, and I've responded to the comment on the talk page. But I'd like to keep this task open considering that these inconsistencies need to be addressed across the docs and the interfaces in Meta. I'm hoping to get to work on this this year, but I'll hold off from assigning myself in case someone gets to it before I do.

Hey @apaskulin,
Please assign me this task, I would like to contribute to it under you mentorship.
Also let me know how to get this started and put this on-track.
Regards
Harsh

@Hqrshguptq: Thanks for your interest. There is no need to ask for task assignment; please see https://www.mediawiki.org/wiki/How_to_become_a_MediaWiki_hacker#Communicate_that_you_work_on_a_task - thanks.

Cool, will look over it.

Ask the user to authorize the application by sending them to oauth2/authorize under the wiki's REST endpoint (usually rest.php), with response_type=code and the client token (as client_id), and ideally also a request_url and state.

I’ll just quickly mention here that I’ve now removed the request_url from the docs, since I assume it was a mistake. The parameter you can specify is redirect_uri; however, MediaWiki requires it to be exactly the same URL as what you already specified in the consumer request (where AFAICT it’s not optional either), so I don’t really see the point in including the redirect_uri to be honest. (It’s part of the standard, and on some other sites it makes more sense, but if you’re specifically targeting MediaWiki then I think you can just ignore the redirect_url in both authorization steps.)