Page MenuHomePhabricator

Support multiple Callback URLs or regex pattern matching
Open, Needs TriagePublicFeature

Description

Hi Team,

The Oauth is a great feature and great for the community developers like us.

We want to request the following features that could make our lives much better:

  1. Support multiple Callback URLs or regex pattern matching.

Our tool doublecheck.wikiloop.org have 6 kinds of instances: local-dev, canary(staging), prod, prod-on-wmf and they each have

  1. Allow edit and update them

Currently because such features are not available, we end-up creating multiple MediaWiki Oauth app registrations, each for one version. Hance it makes it difficult to manage and could confuse Tool users.

Thank you!

Event Timeline

Aklapper renamed this task from Better support `Callback URL` to Support multiple Callback URLs or regex pattern matching.Jul 25 2020, 10:23 AM
Aklapper changed the subtype of this task from "Task" to "Feature Request".

The OAuth 2 spec recommends against non-fully-specified URLs, and the upstream library we use for OAuth 2 has rejected requests (see T245475: OAuth 2.0 consumer form is not consistent with implementation). (OAuth 1 doesn't specify anything about the callback URL, but we'll probably want to keep the two in sync.) Multiple URLs would be fine, we'd just have to rework how we store them.

The edit/update part is already captured in T241867: Better support for callback URL updates, I think?