Page MenuHomePhabricator

[CentralAuth] New Method For Cross-Wiki Logins (instead of JavaScript)
Open, Needs TriagePublic

Description

In contrary to the current CA attach method relying on JavaScript (delayed, buggy, requires refresh, and doesn't work at all half the time), or simply requiring re-sign ins, a much better approach to crosswiki automated signins can be achieved by inserting ca cookie determined by login wiki when one is not recognized. There are several approaches, including onetime tokens for single logins only (might not reflect signouts) or querying the CA database every pageload (possibly problematic if mysql database doesnt like external connections and a bit difficult to scale up - it is assumed that fandom does this though). Any thoughts or opinions?

Event Timeline

@Naleksuh: Thanks for reporting this! Could you please edit the summary to describe an actual problem and your proposal? Also see https://www.mediawiki.org/wiki/How_to_report_a_bug - Thanks :)

@Naleksuh: Thanks for reporting this! Could you please edit the summary to describe an actual problem and your proposal? Also see https://www.mediawiki.org/wiki/How_to_report_a_bug - Thanks :)

This is less bug and much more of feature request. There are two possible ideas for this proposal:

  1. Do what the JavaScript does now, but through the backend. Can be done via header locations and one-time authorization to add CA cookies.
  2. Disable Special:UserLogin (except for api.php) and instead query the login wiki on every page load and have the user logged in to the account at runtime, this one page only.

Both of these are ideas with potential, upsides, and, downsides, and I think Mediawiki community can possibly discuss them

That's fine. :) My request was if you could please make the task summary ("New CA Attach Method") more specific?

Naleksuh renamed this task from New CA Attach Method to [CentralAuth] New Method For Cross-Wiki Logins (instead of JavaScript).Jul 4 2020, 5:25 PM