We need to white list the page because we have: $wgGroupPermissions['*']['read'] = false; set.

It looks like we're using Lockdown. There's a chance this may be more challenging.

I'm currently looking at: https://phabricator.wikimedia.org/T148582 to see how I add the api to the allow list.

There are two paths:

• allow the api to be accessed by any anonymous user (still making sure we can do this) - but I think it would be adding "api" to the $wgWhitelistRead array
• figure out how to add authentication based on a config variable
• or do both

Based on a brief conversation in chat with @AndyRussG and @jgleeson we will want to lock this down and probably add a config token for accessing it.

@Ejegg says we can try allowing it. Now I just have to make sure that's doable :).

I added Lockdown locally and am trying to match the prod settings.

Sadly adding "api" to the setting did not solve the problem :(.

So even though the settings say "Lockdown", it looks we don't have it installed. However, the problem remains the same that $wgGroupPermissions['*']['read'] = true; is blocking api access and I'm not sure how to make it accessible.

Change 606296 had a related patch set uploaded (by Mepps; owner: Mepps):
[mediawiki/extensions/DonationInterface@master] Change to require post and not read mode to allow access from form

https://gerrit.wikimedia.org/r/606296

Change 606296 merged by jenkins-bot:
[mediawiki/extensions/DonationInterface@master] Change to not read mode to allow access from form

https://gerrit.wikimedia.org/r/606296