Expected behavior

New users created through the API Portal should be able to create and use an owner-only OAuth access token without needing to log in to individual wikis.

Observed behavior

As a new user, created through the API Portal, I can only use an owner-only OAuth access token to access wikis that I have visited and have never in the history of my account, logged in to. For example, this request fails unless I first log in to fr.wikipedia.org:

curl -H "Authorization: Bearer TOKEN_HERE" https://api.wikimedia.org/core/v1/wikipedia/fr/page/Chat/bare

{"error":"rest-read-denied","httpCode":403,"httpReason":"Forbidden"}

Acceptance Criteria

• Investigate the issue to propose implementation options to resolve this issue

Note

Estimations reflect the timebox we're giving this task