Page MenuHomePhabricator
Create Task
Maniphest T25735

Allow different user grouping for OpenID users
Closed, DeclinedPublic
Actions

Description

Author: ipatrol6010

Description:
A general idea is to give OpenID users any different user grouping and permissions as desired. OpenID has some phishing and new-account block issues that might warrant tor-like controls to improve security and uniqueness.

Version: unspecified
Severity: enhancement
URL: http://www.mediawiki.org/wiki/Extension:OpenID
See Also:
https://bugzilla.wikimedia.org/show_bug.cgi?id=9604

Details

Reference
bz23735

Related Objects
Search...

StatusSubtypeAssignedTask
 DeclinedNoneT31254 [SUGGESTION] Expose group memberships for query through OpenID teams extension
 DeclinedWikinautT25735 Allow different user grouping for OpenID users
 DeclinedNoneT11604 Get OpenID extension to a state where it could be used on Wikimedia projects as a provider
 Resolved• brionT2057 Single login (Unified login) on all wikimedia projects
 ResolvedNoneT3180 old users not sysopable
 ResolvedNoneT5060 Support OpenID Authentication within Mediawiki
 ResolvedParent5446T20528 [GUI] Disable login button submit function on the provider picker page until something is entered as username
 ResolvedNoneT19637 Implement memcached store for OpenID extension
 ResolvedWikinautT46293 [BUG] OpenID URLs are invalid when $wgServer is relative
 DeclinedNoneT36357 [SEVERE DESIGN PROBLEM] OpenID-created account owners cannot set their e-mail address and/or reset their password when the account lacks an e-mail address or password - race condition
 ResolvedNoneT22185 Changing your email address should require entering your password
 ResolvedWikinautT46353 [SUGGESTION] Login page doesn't respect $wgSecureLogin
 ResolvedWikinautT46416 OpenID: when logging in as "Name" with wiki/Special:OpenIDServer/id , the OpenID should be restamped to wiki/User:Name
 DeclinedNoneT46438 [CODE QUALITY] E:OpenId still contains several header() statements. Check, what can be improved by correct methods.
 DeclinedBUG REPORTNoneT48258 [BUG] E:OpenID when used as Provider does not populate sreg (or ax) fields nickname, email...
 ResolvedWikinautT46821 [BUG] OpenID Consumer wiki stalls with blank page for certain OpenID Provider verification error cases (consumer fails to show the provider response message)
 ResolvedWikinautT48617 [IMPROVEMENT] Add a Special:OpenIDAdminAccountCreation page to allow account creation by admins when the wiki allows account creation for others only through OpenID
 ResolvedWikinautT47304 [GUI] Correct the button message text when converting OpenID (must be "converting" or "adding", not "Login")
 DeclinedWikinautT47308 [BUG] OpenID server log errors $mode and _SESSION
 DeclinedWikinautT46165 [SUGGESTION] Add extension hooks for OpenID link/unlink
 DeclinedFeatureNoneT47914 [CODE QUALITY] Refactor the storage of "trust" information in the user properties (use JSON)
 ResolvedWikinautT48053 [CODE QUALITY] Cleanup ancient un-needed comments and remove superfluous wfDebug statements
 InvalidWikinautT59478 MediaWiki as OpenID server: make $wgOpenIDTrustRoot protocol-independent
 InvalidWikinautT56413 Add necessary functions to $wgRedactedFunctionArguments
 ResolvedWikinautT59578 OpenID: Fix the README file
 DeclinedNoneT59579 E:OpenID as consumer: ChangePassword page is shown twice when attaching an OpenID to an existing account using the _temporary_ password
 OpenNoneT59731 [RFC] make SpecialChangePassword form text depending on login status of $wgUser
 ResolvedTgrT110280 Rewrite password management to use AuthManager
 ResolvedAnomieT91699 Create AuthManager framework and core classes
 ResolvedJoeT97675 Custom session handler corrupted by session_destroy, "Failed to initialize storage module"
 ResolvedJoeT106483 Create new HHVM package for HHVM 3.6.5 + patches
 ResolvedhasharT106699 Upgrade HHVM related packages on Trusty Jenkins slaves
 Resolvedbd808T95864 Mocking abstract objects fails on HHVM
 ResolvedAnomieT110274 Fix PHPUnit version incompatibility between AuthManager and Jenkins
 ResolvedKrinkleT99982 Upgrade PHPUnit to 4.0+
 ResolvedNoneT90303 Fetch dependencies using composer instead of cloning mediawiki/vendor for non-wmf branches
 ResolvedJanZerebeckiT106433 replace inline perl in builder wd-mw-composer-merged-install with a proper script
 ResolvedKrinkleT112895 Support installing composer require-dev packages together with mediawiki/vendor
 ResolvedTgrT110628 Improve AuthManager documentation
 ResolvedWikinautT56507 When having a forced provider, disallow adding (converting) further OpenIDs from non-allowed providers: only allow to add the forced provider.
 ResolvedWikinautT56506 $wgHideOpenIDLoginLink was not completely renamed to $wgOpenIDHideOpenIDLoginLink
 DeclinedNoneT56510 $wgOpenIDServerStoreType and $wgOpenIDConsumerStoreType need to support something other than 'file'
 DeclinedNoneT56509 remove deprecated, deleted functions like DataBase::safeQuery and User::getSkin
 ResolvedWikinautT56508 Add a third mode "provider only" to the existing "consumer" and "consumer and provider" modes
 DeclinedBUG REPORTNoneT56512 E:OpenID needs to work with $wgSecureLogin
 ResolvedWikinautT56511 E:OpenID as server: OpenIDServer shows a blank content page in case of untrusted $wgOpenIDTrustRoot. Should display a meaningful error message.
 DeclinedNoneT56677 Do account creation checks when creating users
 DeclinedFeatureNoneT58254 E-Mail-based whitelist domains for OpenID
 DeclinedNoneT55087 Extension:OpenID is not yet CSP compliant because it still uses of inline CSS
 DeclinedFeatureNoneT53331 [SUGGESTION] Allow existing users to log in with name/password, new users must use OpenID
 DeclinedNoneT58660 Use autocreate permission to create new users
 ResolvedWikinautT59065 E:OpenID does not accept the temporary password when attaching an OpenID to an existing account.

Event Timeline

• bzimport raised the priority of this task from to Lowest.Nov 21 2014, 11:03 PM
• bzimport added a project: MediaWiki-extensions-OpenID.
• bzimport set Reference to bz23735.
• bzimport created this task.May 31 2010, 4:46 PM
• bzimport added a comment.May 31 2010, 8:33 PM

sergey.chernyshev wrote:

I think you're talking about users who just created their account using OpenID and don't have any other credentials supplied.

In this case, I agree, but existing users can associate OpenID with their existing accounts and I don't think it makes sense to reduce their privileges just because they chose to use one more credential.

We can call it "OpenID only user" group, not just "OpenID user".

Wikinaut added a comment.Feb 14 2011, 11:30 PM

see also OpenID extension: disallow new account creation for those users without "createaccount " permission https://bugzilla.wikimedia.org/show_bug.cgi?id=27419 .

siebrand added a comment.May 16 2011, 9:54 AM

Mass maintainer change.

Wikinaut added a comment.May 23 2011, 12:31 AM

I don't think that a special group is needed -> closing this enhancement bug.

Aklapper added a comment.Dec 12 2012, 2:10 PM

[Removing RESOLVED LATER as discussed in
http://lists.wikimedia.org/pipermail/wikitech-l/2012-November/064240.html .
Reopening and setting priority to "Lowest".
For future reference, please use either RESOLVED WONTFIX (for issues that will
not be fixed), or simply set lowest priority. Thanks a lot!]

Wikinaut added a comment.May 7 2013, 7:02 AM

I don't think that a special group is needed -> closing this enhancement bug as "resolved wontfix". If someone thinks that this is needed, please feel invited to come back and reopen this bug, but please with a concrete proposal.

Currently, I cannot see any reason why a further group is needed.

• mmodell closed subtask T11604: Get OpenID extension to a state where it could be used on Wikimedia projects as a provider as Resolved.Sep 7 2016, 10:17 PM
Jdforrester-WMF reopened subtask T11604: Get OpenID extension to a state where it could be used on Wikimedia projects as a provider as Open.Sep 7 2016, 10:19 PM
nshahquinn closed subtask T11604: Get OpenID extension to a state where it could be used on Wikimedia projects as a provider as Declined.Aug 26 2022, 6:30 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL