Page MenuHomePhabricator
Create Task
Maniphest T255034

Wikimedia API Gateway Long-term Use
Closed, DeclinedPublic1 Estimated Story Points
Actions

Description

This epic is for long-term gateway user stories. It may get broken down into smaller epics ("do these first, do these second") after gateway launch.

Related Objects
Search...

StatusSubtypeAssignedTask
 Resolved• eprodromouT235270 Wikimedia API Gateway
 DeclinedNoneT255034 Wikimedia API Gateway Long-term Use
 Resolved• eprodromouT246260 API Developer mounts new API on path
 Resolved• eprodromouT246263 Administrator unmounts API from path
 Resolved• eprodromouT246264 Curator chooses available APIs
 Resolved• eprodromouT246268 API Developer uses OAuth 2.0 for authentication and authorization
 DeclinedNoneT253776 [API Gateway] Administrator defines burst limit
 DeclinedNoneT253777 [API Gateway] Administrator defines connection limit
 ResolvedapaskulinT250304 Add use case landing pages
 DeclinedNoneT250306 API Portal: Define programming language landing pages
 DeclinedNoneT253887 [API Gateway] Administrator limits number of client IDs per Client Developer
 DeclinedNoneT246275 [API Gateway] Client Developer get API usage data
 DeclinedNoneT246279 [API Gateway] Client Developer gets rate limit notification
 DeclinedNoneT259176 [API Gateway] Display client rate limit in the API Portal
 ResolvedakosiarisT251812 System administrator reviews API usage by client
 Resolved• PcheloloT259736 Unify access log schema for Action API and API Gateway/REST API
 ResolvedJMeybohmT260536 Package an up to date version of fluent-bit / td-agent-bit for buster
 Resolved• PcheloloT260626 Enable TLS for api-gateway -> eventgate access log delivery
 Resolved• PcheloloT260820 Followups to access logging after envoy 1.16
 Resolved• eprodromouT261002 Ingest api-gateway.request events to turnillo
 ResolvedNoneT258748 Client Developer has a cookie-free API call
 ResolvedhnowlanT259294 Configure API Portal to only send session cookie to its own routes
 ResolvedhnowlanT259296 Filter cookie headers for all API route requests
 ResolvedBCornwallT260943 Don't set cookies for api.wikimedia.org at the caching layer
 DeclinedNoneT259722 [API Gateway] Product Manager reads registered OAuth Client ID metrics
 DeclinedNoneT259724 [API Gateway] Product Manager reads Active OAuth Client ID metrics
 Resolved• PcheloloT246278 Client Developer gets rate limit headers
 Resolved• PcheloloT259544 Drop lua filter from api-gateway envoy
 OpenFeatureNoneT254190 Allow developers to disable their own OAuth clients
 Resolved• bd808T411176 Disable OAuth User-only consumer
 OpenNoneT261902 Rename OAuth consumer management endpoints
 DeclinedNoneT265145 [API Gateway] Client Developer reads Feed Availability Endpoint
 ResolvedJMeybohmT258934 [API Gateway] Move ratelimiter to its own chart outside of the api-gateway
 DeclinedhnowlanT260056 [API Gateway] Add validation of Envoy configuration to deployment-charts Rakefile
Resolved• ClarakosiT254914 Finalise Envoy configuration with completed Rate Limiter
 Resolved• ClarakosiT260591 Move rate limits configuration from route to virtual host
 Resolved• ClarakosiT261350 Envoy ratelimit config cleanups after 1.16
 DeclinedNoneT254917 Implement API Gateway solution for deployment-prep
 DeclinedNoneT269156 [API Gateway] Change how client credentials are handled in the rate limiter
 Resolved• PcheloloT268791 Allow Api-User-Agent header in API Gateway requests
 ResolvedapaskulinT255482 API Portal: Document stability policy
 ResolvedapaskulinT253067 API Portal: Document security best practices
 ResolvedapaskulinT255486 API Portal: Document authorization flows
 DeclinedNoneT259178 [API Gateway] Document process for client developers to request a higher rate limit
 ResolvedhnowlanT254916 Define base set of SLOs covering API Gateway
 DeclinedhnowlanT263727 Separate mediawiki latency metrics by endpoint
 ResolvedcolewhiteT263728 mtail 3.0.0-rc35 doesn't support the histogram type in -oneshot mode.
 DeclinedNoneT258757 Write unit tests for WikimediaApiPortalOAuth
DuplicatehasharT265407 Create a coverage job for skins
 ResolvedNoneT254950 Performance review of WikimediaApiPortalOAuth extension

Event Timeline

• eprodromou created this task.Jun 10 2020, 3:38 PM
• eprodromou added a subtask: T246260: API Developer mounts new API on path.Jun 10 2020, 3:40 PM
• eprodromou added a subtask: T246263: Administrator unmounts API from path.
• eprodromou added a subtask: T246264: Curator chooses available APIs.
• eprodromou added a subtask: T246268: API Developer uses OAuth 2.0 for authentication and authorization.Jun 10 2020, 3:44 PM
• eprodromou added a subtask: T253776: [API Gateway] Administrator defines burst limit.Jun 10 2020, 4:43 PM
• eprodromou added a subtask: T253777: [API Gateway] Administrator defines connection limit.
apaskulin added a subtask: T253067: API Portal: Document security best practices.Jun 15 2020, 8:31 PM
apaskulin removed a subtask: T253067: API Portal: Document security best practices.
apaskulin added a subtask: T250304: Add use case landing pages.
apaskulin added a subtask: T250306: API Portal: Define programming language landing pages.
• eprodromou added a subtask: T253887: [API Gateway] Administrator limits number of client IDs per Client Developer.Jul 23 2020, 2:50 PM
• eprodromou added a subtask: T246275: [API Gateway] Client Developer get API usage data.Jul 27 2020, 11:54 AM
• eprodromou added a subtask: T246279: [API Gateway] Client Developer gets rate limit notification.Jul 27 2020, 12:01 PM
apaskulin added a subtask: T259176: [API Gateway] Display client rate limit in the API Portal.Jul 29 2020, 6:25 PM
• eprodromou added a subtask: T251812: System administrator reviews API usage by client.Oct 8 2020, 10:21 PM
• eprodromou added a subtask: T258748: Client Developer has a cookie-free API call.
• eprodromou added a subtask: T259722: [API Gateway] Product Manager reads registered OAuth Client ID metrics.
• eprodromou added a subtask: T259724: [API Gateway] Product Manager reads Active OAuth Client ID metrics.Oct 8 2020, 10:23 PM
• eprodromou added a subtask: T246278: Client Developer gets rate limit headers.
• eprodromou added a subtask: T261462: Migrate OAuth extension back from wikimedia/oauth2-server fork to upstream.Oct 8 2020, 10:27 PM
• eprodromou added a subtask: T259544: Drop lua filter from api-gateway envoy.
• eprodromou added a subtask: T254190: Allow developers to disable their own OAuth clients.Oct 8 2020, 10:31 PM
• eprodromou added a subtask: T261902: Rename OAuth consumer management endpoints.
• eprodromou added a subtask: T265145: [API Gateway] Client Developer reads Feed Availability Endpoint.Oct 9 2020, 1:56 PM
• eprodromou added a subtask: T258934: [API Gateway] Move ratelimiter to its own chart outside of the api-gateway.Oct 22 2020, 8:15 PM
• eprodromou added a subtask: T260056: [API Gateway] Add validation of Envoy configuration to deployment-charts Rakefile .
• eprodromou added a subtask: T254914: Finalise Envoy configuration with completed Rate Limiter.
• eprodromou added a subtask: T254917: Implement API Gateway solution for deployment-prep.Oct 22 2020, 8:19 PM
• eprodromou added a subtask: T269156: [API Gateway] Change how client credentials are handled in the rate limiter.Dec 7 2020, 7:46 PM
• eprodromou added a subtask: T268791: Allow Api-User-Agent header in API Gateway requests.
• eprodromou added a project: Platform Engineering Roadmap.Dec 8 2020, 3:54 PM
Naike set the point value for this task to 1.Dec 10 2020, 2:17 PM
• eprodromou added a subtask: T255482: API Portal: Document stability policy.Dec 15 2020, 6:44 PM
• eprodromou added a subtask: T253067: API Portal: Document security best practices.Dec 15 2020, 6:53 PM
• eprodromou added a subtask: T255486: API Portal: Document authorization flows.
• eprodromou added a subtask: T259178: [API Gateway] Document process for client developers to request a higher rate limit.
• eprodromou added a subtask: T254916: Define base set of SLOs covering API Gateway.
• eprodromou added a subtask: T258757: Write unit tests for WikimediaApiPortalOAuth .Dec 15 2020, 7:02 PM
• eprodromou added a subtask: T265407: Create a coverage job for skins.
• eprodromou added a subtask: T254950: Performance review of WikimediaApiPortalOAuth extension.
apaskulin changed the status of subtask T259178: [API Gateway] Document process for client developers to request a higher rate limit from Open to Stalled.Dec 18 2020, 10:46 PM
apaskulin closed subtask T255486: API Portal: Document authorization flows as Resolved.Dec 22 2020, 2:19 AM
apaskulin closed subtask T255482: API Portal: Document stability policy as Resolved.
apaskulin closed subtask T246268: API Developer uses OAuth 2.0 for authentication and authorization as Resolved.Jan 8 2021, 12:34 AM
apaskulin closed subtask T246264: Curator chooses available APIs as Resolved.Jan 8 2021, 12:45 AM
apaskulin closed subtask T246260: API Developer mounts new API on path as Resolved.
apaskulin closed subtask T246263: Administrator unmounts API from path as Resolved.
apaskulin closed subtask T250304: Add use case landing pages as Resolved.Jan 22 2021, 12:32 AM
Aklapper removed • eprodromou as the assignee of this task.Apr 1 2021, 5:51 AM
hnowlan closed subtask T258748: Client Developer has a cookie-free API call as Resolved.Apr 1 2021, 9:38 AM
• Pchelolo closed subtask T246278: Client Developer gets rate limit headers as Resolved.May 21 2021, 6:07 PM
• Pchelolo closed subtask T254914: Finalise Envoy configuration with completed Rate Limiter as Resolved.
• Pchelolo closed subtask T259544: Drop lua filter from api-gateway envoy as Resolved.May 21 2021, 6:10 PM
hnowlan closed subtask T254916: Define base set of SLOs covering API Gateway as Resolved.May 25 2021, 4:30 PM
apaskulin closed subtask T268791: Allow Api-User-Agent header in API Gateway requests as Resolved.Jun 9 2021, 2:44 AM
apaskulin closed subtask T254950: Performance review of WikimediaApiPortalOAuth extension as Resolved.Jul 12 2021, 5:53 PM
apaskulin closed subtask T253067: API Portal: Document security best practices as Resolved.Aug 19 2021, 8:49 PM
Aklapper added a project: serviceops-deprecated.Apr 1 2024, 8:15 AM

As API Gateway is nowadays owned by ServiceOps, adding the ServiceOps project tag to open API Gateway tasks tagged with the deprecated/archived "Platform Team Initiatives (API Gateway)" tag at https://phabricator.wikimedia.org/project/profile/4321/, as part of Phabricator Housekeeping.

Krinkle removed a subtask: T261462: Migrate OAuth extension back from wikimedia/oauth2-server fork to upstream.Apr 15 2024, 3:24 PM
Krinkle mentioned this in T261462: Migrate OAuth extension back from wikimedia/oauth2-server fork to upstream.
hnowlan closed subtask T254917: Implement API Gateway solution for deployment-prep as Declined.Jun 13 2024, 11:11 AM
akosiaris closed subtask T251812: System administrator reviews API usage by client as Resolved.Jul 2 2024, 4:19 PM
jijiki moved this task from Incoming 🐫 to API Gateway 🥌 on the serviceops-deprecated board.Mar 10 2025, 12:34 PM
apaskulin closed subtask T258757: Write unit tests for WikimediaApiPortalOAuth as Declined.Feb 19 2026, 6:23 PM
apaskulin closed subtask T250306: API Portal: Define programming language landing pages as Declined.
Krinkle closed this task as Declined.Jul 12 2026, 10:07 PM
Krinkle closed subtask T269156: [API Gateway] Change how client credentials are handled in the rate limiter as Declined.
Krinkle subscribed.

Closing planning tasks from the former "Core Platform Team" reorged away in 2023 (i.e. not bugs or feature requests for current software). Note that the "API Gateway" was shutdown earlier this year in 2026. See also https://www.mediawiki.org/wiki/Core_Platform_Team and https://wikitech.wikimedia.org/wiki/API_Gateway.

Krinkle closed subtask T260056: [API Gateway] Add validation of Envoy configuration to deployment-charts Rakefile as Declined.Jul 12 2026, 10:09 PM
Krinkle closed subtask T259722: [API Gateway] Product Manager reads registered OAuth Client ID metrics as Declined.Jul 12 2026, 11:37 PM
Krinkle closed subtask T259178: [API Gateway] Document process for client developers to request a higher rate limit as Declined.
Krinkle closed subtask T259176: [API Gateway] Display client rate limit in the API Portal as Declined.
Krinkle closed subtask T253887: [API Gateway] Administrator limits number of client IDs per Client Developer as Declined.
Krinkle closed subtask T253777: [API Gateway] Administrator defines connection limit as Declined.
Krinkle closed subtask T246279: [API Gateway] Client Developer gets rate limit notification as Declined.
Krinkle closed subtask T253776: [API Gateway] Administrator defines burst limit as Declined.
Krinkle closed subtask T246275: [API Gateway] Client Developer get API usage data as Declined.
Krinkle closed subtask T265145: [API Gateway] Client Developer reads Feed Availability Endpoint as Declined.
Krinkle closed subtask T259724: [API Gateway] Product Manager reads Active OAuth Client ID metrics as Declined.
Krinkle closed subtask T258934: [API Gateway] Move ratelimiter to its own chart outside of the api-gateway as Resolved.Jul 13 2026, 6:48 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits