Page MenuHomePhabricator
Create Task
Maniphest T321160

Lcobucci\JWT\Signer\InvalidKeyProvided: Key cannot be empty
Closed, ResolvedPublicPRODUCTION ERROR
Actions

Description

Error
normalized_message
[{reqId}] {exception_url}   Lcobucci\JWT\Signer\InvalidKeyProvided: Key cannot be empty
exception.trace
from /srv/mediawiki/php-1.40.0-wmf.6/vendor/lcobucci/jwt/src/Signer/InvalidKeyProvided.php(34)
#0 /srv/mediawiki/php-1.40.0-wmf.6/vendor/lcobucci/jwt/src/Signer/Key/InMemory.php(25): Lcobucci\JWT\Signer\InvalidKeyProvided::cannotBeEmpty()
#1 /srv/mediawiki/php-1.40.0-wmf.6/vendor/lcobucci/jwt/src/Signer/Key/InMemory.php(44): Lcobucci\JWT\Signer\Key\InMemory->__construct(string, string)
#2 /srv/mediawiki/php-1.40.0-wmf.6/vendor/league/oauth2-server/src/Entities/Traits/AccessTokenTrait.php(51): Lcobucci\JWT\Signer\Key\InMemory::plainText(string)
#3 /srv/mediawiki/php-1.40.0-wmf.6/vendor/league/oauth2-server/src/Entities/Traits/AccessTokenTrait.php(62): MediaWiki\Extension\OAuth\Entity\AccessTokenEntity->initJwtConfiguration()
#4 /srv/mediawiki/php-1.40.0-wmf.6/vendor/league/oauth2-server/src/Entities/Traits/AccessTokenTrait.php(91): MediaWiki\Extension\OAuth\Entity\AccessTokenEntity->convertToJWT()
#5 /srv/mediawiki/php-1.40.0-wmf.6/extensions/OAuth/src/Rest/Handler/AbstractClientHandler.php(56): MediaWiki\Extension\OAuth\Entity\AccessTokenEntity->__toString()
#6 /srv/mediawiki/php-1.40.0-wmf.6/includes/Rest/Router.php(487): MediaWiki\Extension\OAuth\Rest\Handler\AbstractClientHandler->execute()
#7 /srv/mediawiki/php-1.40.0-wmf.6/includes/Rest/Router.php(406): MediaWiki\Rest\Router->executeHandler(MediaWiki\Extension\OAuth\Rest\Handler\RequestClient)
#8 /srv/mediawiki/php-1.40.0-wmf.6/includes/Rest/EntryPoint.php(170): MediaWiki\Rest\Router->execute(MediaWiki\Rest\RequestFromGlobals)
#9 /srv/mediawiki/php-1.40.0-wmf.6/includes/Rest/EntryPoint.php(135): MediaWiki\Rest\EntryPoint->execute()
#10 /srv/mediawiki/php-1.40.0-wmf.6/rest.php(31): MediaWiki\Rest\EntryPoint::main()
#11 /srv/mediawiki/w/rest.php(3): require(string)
#12 {main}
Impact

No idea ;)

Notes

There are a few, apparently all occurring on https://meta.wikimedia.org

Details

Request URL
https://meta.wikimedia.org/w/rest.php/oauth2/client
Show related patches Customize query in gerrit

Related Objects

Event Timeline

There are a very large number of changes, so older changes are hidden. Show Older Changes
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptOct 19 2022, 8:35 AM
hashar triaged this task as Unbreak Now! priority.Oct 19 2022, 8:35 AM
hashar added a parent task: T320511: 1.40.0-wmf.6 deployment blockers.

That is a new error in 1.40.0-wmf.6

Zabe subscribed.Oct 19 2022, 8:47 AM

Caused by https://gerrit.wikimedia.org/r/c/mediawiki/vendor/+/837160.

The upstream fix is https://github.com/thephpleague/oauth2-server/pull/1282.

I would propose to just revert that lcobucci/jwt upgrade as a quick fix.

gerritbot added a comment.Oct 19 2022, 8:49 AM

Change 844442 had a related patch set uploaded (by Zabe; author: Zabe):

[mediawiki/vendor@master] Downgrade lcobucci/jwt (4.2.1 => 4.1.5)

https://gerrit.wikimedia.org/r/844442

gerritbot added a project: Patch-For-Review.Oct 19 2022, 8:49 AM
Agusbou2015 subscribed.Oct 19 2022, 12:11 PM
gerritbot added a comment.Oct 19 2022, 1:30 PM

Change 844035 had a related patch set uploaded (by Hashar; author: Zabe):

[mediawiki/vendor@wmf/1.40.0-wmf.6] Downgrade lcobucci/jwt (4.2.1 => 4.1.5)

https://gerrit.wikimedia.org/r/844035

gerritbot added a comment.Oct 19 2022, 1:50 PM

Change 844442 merged by jenkins-bot:

[mediawiki/vendor@master] Downgrade lcobucci/jwt (4.2.1 => 4.1.5)

https://gerrit.wikimedia.org/r/844442

gerritbot added a comment.Oct 19 2022, 2:23 PM

Change 844035 merged by jenkins-bot:

[mediawiki/vendor@wmf/1.40.0-wmf.6] Downgrade lcobucci/jwt (4.2.1 => 4.1.5)

https://gerrit.wikimedia.org/r/844035

Stashbot added a comment.Oct 19 2022, 2:25 PM

Mentioned in SAL (#wikimedia-operations) [2022-10-19T14:25:32Z] <hashar@deploy1002> Started scap: Backport for [[gerrit:844035|Downgrade lcobucci/jwt (4.2.1 => 4.1.5) (T321160)]]

Stashbot added a comment.Oct 19 2022, 2:25 PM

Mentioned in SAL (#wikimedia-operations) [2022-10-19T14:25:58Z] <hashar@deploy1002> hashar and hashar: Backport for [[gerrit:844035|Downgrade lcobucci/jwt (4.2.1 => 4.1.5) (T321160)]] synced to the testservers: mwdebug2001.codfw.wmnet, mwdebug1001.eqiad.wmnet, mwdebug2002.codfw.wmnet, mwdebug1002.eqiad.wmnet

Stashbot added a comment.Oct 19 2022, 2:29 PM

Mentioned in SAL (#wikimedia-operations) [2022-10-19T14:29:00Z] <hashar@deploy1002> sync-world aborted: Backport for [[gerrit:844035|Downgrade lcobucci/jwt (4.2.1 => 4.1.5) (T321160)]] (duration: 03m 27s)

Stashbot added a comment.Oct 19 2022, 2:29 PM

Mentioned in SAL (#wikimedia-operations) [2022-10-19T14:29:35Z] <hashar@deploy1002> Started scap: Backport for [[gerrit:844035|Downgrade lcobucci/jwt (4.2.1 => 4.1.5) (T321160)]]

Stashbot added a comment.Oct 19 2022, 2:29 PM

Mentioned in SAL (#wikimedia-operations) [2022-10-19T14:29:58Z] <hashar@deploy1002> hashar and hashar: Backport for [[gerrit:844035|Downgrade lcobucci/jwt (4.2.1 => 4.1.5) (T321160)]] synced to the testservers: mwdebug1002.eqiad.wmnet, mwdebug1001.eqiad.wmnet, mwdebug2001.codfw.wmnet, mwdebug2002.codfw.wmnet

Stashbot added a comment.Oct 19 2022, 2:34 PM

Mentioned in SAL (#wikimedia-operations) [2022-10-19T14:34:00Z] <hashar@deploy1002> Finished scap: Backport for [[gerrit:844035|Downgrade lcobucci/jwt (4.2.1 => 4.1.5) (T321160)]] (duration: 04m 25s)

hashar added a comment.EditedOct 19 2022, 2:35 PM

Should be good. Thank you @Zabe

I am guessing MediaWiki-extensions-OAuth could use an integration test to cover the 4.2.1 incompatibility, I imagine the update might be attempted again and there is no test covering it.

hashar removed a parent task: T320511: 1.40.0-wmf.6 deployment blockers.Oct 19 2022, 2:36 PM
hashar lowered the priority of this task from Unbreak Now! to High.Oct 20 2022, 3:11 PM

That is no more an unbreak now priority since lcobucci/jwt got downgraded. We would still need a test in MediaWiki-extensions-OATHAuth to cover the 4.1.5 requirement and prevent a future unattended upgrade to 4.2.1.

thcipriani moved this task from Untriaged to Oct 2022 on the Wikimedia-production-error board.Oct 20 2022, 3:42 PM
WMDE-leszek subscribed.Nov 9 2022, 10:32 AM
Lucas_Werkmeister_WMDE subscribed.Nov 23 2022, 11:33 AM

It looks like upstream league/oauth2-server fixed this in Fix compatibility with lcobucci/jwt ^4.2, included in 8.3.5, but Extension:OAuth currently uses a custom 9.0.0 branch.

gerritbot added a comment.Nov 23 2022, 11:33 AM

Change 860005 had a related patch set uploaded (by Lucas Werkmeister (WMDE); author: Lucas Werkmeister (WMDE)):

[mediawiki/extensions/OAuth@master] Pin lcobucci/jwt to compatible version (4.1.5)

https://gerrit.wikimedia.org/r/860005

Lucas_Werkmeister_WMDE added a comment.Nov 23 2022, 11:33 AM

Uploaded a patch to pin the version, e.g. for local dev environments (since I just ran into the same error).

Tgr mentioned this in T318480: OAuth test failure on REL1_39.Jan 20 2023, 8:08 AM
gerritbot added a comment.Jan 20 2023, 8:16 AM

Change 860005 merged by jenkins-bot:

[mediawiki/extensions/OAuth@master] Pin lcobucci/jwt to compatible version (4.1.5)

https://gerrit.wikimedia.org/r/860005

ReleaseTaggerBot added a project: MW-1.40-notes (1.40.0-wmf.20; 2023-01-23).Jan 20 2023, 9:01 AM
gerritbot added a comment.Jan 20 2023, 3:52 PM

Change 881860 had a related patch set uploaded (by Reedy; author: Lucas Werkmeister (WMDE)):

[mediawiki/extensions/OAuth@REL1_39] Pin lcobucci/jwt to compatible version (4.1.5)

https://gerrit.wikimedia.org/r/881860

gerritbot added a comment.Jan 20 2023, 4:32 PM

Change 881860 merged by jenkins-bot:

[mediawiki/extensions/OAuth@REL1_39] Pin lcobucci/jwt to compatible version (4.1.5)

https://gerrit.wikimedia.org/r/881860

gerritbot added a comment.Jan 23 2023, 4:14 AM

Change 882176 had a related patch set uploaded (by Gergő Tisza; author: Lucas Werkmeister (WMDE)):

[mediawiki/extensions/OAuth@REL1_35] Pin lcobucci/jwt to compatible version (4.1.5)

https://gerrit.wikimedia.org/r/882176

gerritbot added a comment.Jan 23 2023, 4:18 AM

Change 882177 had a related patch set uploaded (by Gergő Tisza; author: Lucas Werkmeister (WMDE)):

[mediawiki/extensions/OAuth@REL1_38] Pin lcobucci/jwt to compatible version (4.1.5)

https://gerrit.wikimedia.org/r/882177

gerritbot added a comment.Jan 26 2023, 11:23 AM

Change 882177 merged by jenkins-bot:

[mediawiki/extensions/OAuth@REL1_38] Pin lcobucci/jwt to compatible version (4.1.5)

https://gerrit.wikimedia.org/r/882177

gerritbot added a comment.Jan 26 2023, 11:25 AM

Change 882176 merged by jenkins-bot:

[mediawiki/extensions/OAuth@REL1_35] Pin lcobucci/jwt to compatible version (4.1.5)

https://gerrit.wikimedia.org/r/882176

Tgr closed this task as Resolved.Jan 26 2023, 7:21 PM
Tgr assigned this task to Zabe.

Nothing left to do here, I think; there are a bunch of other tasks for figuring out the oauth2-server versioning mess in general (T279837, T261462, T319685).

hashar added a comment.Jan 26 2023, 8:49 PM

Thank you to have followed up on that ask with all the releases backports!

gerritbot added a comment.Mar 12 2023, 8:24 PM

Change 897363 had a related patch set uploaded (by Krinkle; author: Krinkle):

[mediawiki/extensions/OAuth@master] build: Remove pinning of indirect lcobucci/jwt dependency

https://gerrit.wikimedia.org/r/897363

gerritbot added a comment.Mar 12 2023, 8:25 PM

Change 880491 had a related patch set uploaded (by Krinkle; author: Reedy):

[mediawiki/vendor@master] Upgrading lcobucci/jwt (4.1.5 => 4.3.0)

https://gerrit.wikimedia.org/r/880491

gerritbot added a comment.Mar 12 2023, 9:46 PM

Change 897363 merged by jenkins-bot:

[mediawiki/extensions/OAuth@master] build: Remove pinning of indirect lcobucci/jwt dependency

https://gerrit.wikimedia.org/r/897363

gerritbot added a comment.Mar 12 2023, 9:57 PM

Change 880491 merged by jenkins-bot:

[mediawiki/vendor@master] Upgrading lcobucci/jwt (4.1.5 => 4.3.0)

https://gerrit.wikimedia.org/r/880491

ReleaseTaggerBot edited projects, added MW-1.40-notes (1.40.0-wmf.27; 2023-03-13); removed MW-1.40-notes (1.40.0-wmf.20; 2023-01-23).Mar 12 2023, 10:00 PM
brennen mentioned this in T332217: Lcobucci\JWT\Signer\InvalidKeyProvided: Key cannot be empty.Mar 15 2023, 7:45 PM
brennen reopened this task as Open.Mar 15 2023, 7:55 PM
brennen merged a task: T332217: Lcobucci\JWT\Signer\InvalidKeyProvided: Key cannot be empty.
brennen subscribed.

This is cropping back up after T330205: 1.40.0-wmf.27 deployment blockers deploy.

jeena raised the priority of this task from High to Unbreak Now!.Mar 15 2023, 9:31 PM
jeena added a parent task: T330205: 1.40.0-wmf.27 deployment blockers.Mar 15 2023, 9:33 PM
brennen mentioned this in T330205: 1.40.0-wmf.27 deployment blockers.Mar 15 2023, 10:56 PM
Tgr added subscribers: Krinkle, Reedy.EditedMar 15 2023, 11:51 PM

So we have three options:

The second seems the most straightforward, but then I have no idea why we were pinning in the first place. @Reedy @Krinkle any thoughts?

Reedy added a comment.Mar 16 2023, 12:50 AM

It's pinned to the exact hash in wikimedia/oauth2-server (rEOAUaf26a29b05e2: composer.json: Pin league/oauth2-server to commit) because when I tried to update it after a rebase, it failed with some errors that looking at the vendor patch, I tagged in T302757: OAuth test failures. https://github.com/thephpleague/oauth2-server/issues/1266 as the upstream which was closed without anything really being resolved, even months later...

The simplest fix was then to just pin it to the last known good working hash.

Should be testable using the OAuth extension commit in gerrit, depending upon a newer commit for the forked library in vendor.

But it doesn't look like upstream have actually fixed the underlying error; at least not on master.

It sounds like it's worth rebasing against the upstream to get the commits that it is currently ahead -
https://github.com/wikimedia/oauth2-server/compare/v9.0.0-alpha...thephpleague:oauth2-server:master (lazily done into https://github.com/wikimedia/oauth2-server/pull/17) but needs some conflicts resolving.

It may help clean up the lot for a bit.

Tgr added a comment.Mar 16 2023, 2:58 AM

But the immediate issue here is not v9.0.0-alpha being outdated, it's that currently our composer.json (both vendor and the extension) pin it to a specific commit that was the state of v9.0.0-alpha circa 2021 and is way behind current v9.0.0-alpha. Using v9.0.0-alpha without commit-level pinning would be fine.

Krinkle added a comment.Mar 16 2023, 6:19 AM

I'd lean toward using current jwt (i.e. no pinning), and using or making a version of oauth2 that works with it - if feasible.

Reedy added a comment.Mar 16 2023, 11:33 AM
In T321160#8700791, @Tgr wrote:

But the immediate issue here is not v9.0.0-alpha being outdated, it's that currently our composer.json (both vendor and the extension) pin it to a specific commit that was the state of v9.0.0-alpha circa 2021 and is way behind current v9.0.0-alpha. Using v9.0.0-alpha without commit-level pinning would be fine.

And as I said above...

In T321160#8700622, @Reedy wrote:

It's pinned to the exact hash in wikimedia/oauth2-server (rEOAUaf26a29b05e2: composer.json: Pin league/oauth2-server to commit) because when I tried to update it after a rebase, it failed with some errors that looking at the vendor patch, I tagged in T302757: OAuth test failures. https://github.com/thephpleague/oauth2-server/issues/1266 as the upstream which was closed without anything really being resolved, even months later...

Removing the hash level pinning might fix this exact issue, but it's not going to pass CI due to the aforementioned issues.

gerritbot added a comment.Mar 16 2023, 5:58 PM

Change 900140 had a related patch set uploaded (by Jforrester; author: Jforrester):

[mediawiki/extensions/OAuth@master] Revert "build: Remove pinning of indirect lcobucci/jwt dependency"

https://gerrit.wikimedia.org/r/900140

gerritbot added a comment.Mar 16 2023, 5:59 PM

Change 900409 had a related patch set uploaded (by Jforrester; author: Jforrester):

[mediawiki/vendor@master] Revert "Upgrading lcobucci/jwt (4.1.5 => 4.3.0)"

https://gerrit.wikimedia.org/r/900409

Tgr mentioned this in T332286: Login to Diff blog with Wikimedia account ends with SSO error.Mar 16 2023, 7:05 PM
Tgr added a comment.Mar 16 2023, 7:10 PM

In hindsight this should probably have been higher priority. OAuth 2 is now broken entirely. It does not affect group 2 yet, but it's pretty common to use meta or mw.org for remote login. See e.g. T332286: Login to Diff blog with Wikimedia account ends with SSO error Sorry for not realizing that in time.

brennen added a subscriber: Jdforrester-WMF.Mar 16 2023, 7:19 PM

We can roll back if necessary, but looks like @Jdforrester-WMF's patch above should be ready shortly...

gerritbot added a comment.Mar 16 2023, 7:29 PM

Change 900425 had a related patch set uploaded (by Jforrester; author: Jforrester):

[mediawiki/vendor@REL1_40] Revert "Upgrading lcobucci/jwt (4.1.5 => 4.3.0)"

https://gerrit.wikimedia.org/r/900425

gerritbot added a comment.Mar 16 2023, 7:29 PM

Change 900425 merged by Jforrester:

[mediawiki/vendor@REL1_40] Revert "Upgrading lcobucci/jwt (4.1.5 => 4.3.0)"

https://gerrit.wikimedia.org/r/900425

gerritbot added a comment.Mar 16 2023, 7:30 PM

Change 900143 had a related patch set uploaded (by Jforrester; author: Jforrester):

[mediawiki/extensions/OAuth@REL1_40] Revert "build: Remove pinning of indirect lcobucci/jwt dependency"

https://gerrit.wikimedia.org/r/900143

gerritbot added a comment.Mar 16 2023, 7:32 PM

Change 900427 had a related patch set uploaded (by Jforrester; author: Jforrester):

[mediawiki/vendor@wmf/1.40.0-wmf.27] Revert "Upgrading lcobucci/jwt (4.1.5 => 4.3.0)"

https://gerrit.wikimedia.org/r/900427

gerritbot added a comment.Mar 16 2023, 7:32 PM

Change 900144 had a related patch set uploaded (by Jforrester; author: Jforrester):

[mediawiki/extensions/OAuth@wmf/1.40.0-wmf.27] Revert "build: Remove pinning of indirect lcobucci/jwt dependency"

https://gerrit.wikimedia.org/r/900144

gerritbot added a comment.Mar 16 2023, 7:36 PM

Change 900409 merged by jenkins-bot:

[mediawiki/vendor@master] Revert "Upgrading lcobucci/jwt (4.1.5 => 4.3.0)"

https://gerrit.wikimedia.org/r/900409

gerritbot added a comment.Mar 16 2023, 7:36 PM

Change 900140 merged by jenkins-bot:

[mediawiki/extensions/OAuth@master] Revert "build: Remove pinning of indirect lcobucci/jwt dependency"

https://gerrit.wikimedia.org/r/900140

gerritbot added a comment.Mar 16 2023, 7:40 PM

Change 900143 merged by jenkins-bot:

[mediawiki/extensions/OAuth@REL1_40] Revert "build: Remove pinning of indirect lcobucci/jwt dependency"

https://gerrit.wikimedia.org/r/900143

ReleaseTaggerBot added a project: MW-1.41-notes (1.41.0-wmf.1; 2023-03-20).Mar 16 2023, 8:00 PM
gerritbot added a comment.Mar 16 2023, 8:10 PM

Change 900427 merged by jenkins-bot:

[mediawiki/vendor@wmf/1.40.0-wmf.27] Revert "Upgrading lcobucci/jwt (4.1.5 => 4.3.0)"

https://gerrit.wikimedia.org/r/900427

Stashbot added a comment.Mar 16 2023, 8:12 PM

Mentioned in SAL (#wikimedia-operations) [2023-03-16T20:12:43Z] <brennen@deploy2002> Started scap: Backport for [[gerrit:900427|Revert "Upgrading lcobucci/jwt (4.1.5 => 4.3.0)" (T321160)]]

Stashbot added a comment.Mar 16 2023, 8:14 PM

Mentioned in SAL (#wikimedia-operations) [2023-03-16T20:14:38Z] <brennen@deploy2002> brennen and jforrester: Backport for [[gerrit:900427|Revert "Upgrading lcobucci/jwt (4.1.5 => 4.3.0)" (T321160)]] synced to the testservers: mwdebug1002.eqiad.wmnet, mwdebug2002.codfw.wmnet, mwdebug1001.eqiad.wmnet, mwdebug2001.codfw.wmnet

Stashbot added a comment.Mar 16 2023, 8:21 PM

Mentioned in SAL (#wikimedia-operations) [2023-03-16T20:21:49Z] <brennen@deploy2002> Finished scap: Backport for [[gerrit:900427|Revert "Upgrading lcobucci/jwt (4.1.5 => 4.3.0)" (T321160)]] (duration: 09m 06s)

Umherirrender mentioned this in T332349: Wikipedia Library /oauth/callback/ Permission denied.Mar 16 2023, 8:33 PM
Umherirrender mentioned this in T332326: Unhelpful "Request failed. Please try again later." error message when failing to create key.
brennen lowered the priority of this task from Unbreak Now! to Needs Triage.Mar 16 2023, 8:54 PM

Seems fixed in production; removing as train blocker, leaving open for any needed followup.

brennen removed a parent task: T330205: 1.40.0-wmf.27 deployment blockers.Mar 16 2023, 8:54 PM
Scardenasmolinar subscribed.Mar 18 2023, 2:30 AM

There are some editors who still cannot log in to their Wikipedia Library account (T332349). We are using mwoauth for authentication.

Tgr mentioned this in T224919: Code Stewardship Review: OAuth extension.Mar 18 2023, 4:48 AM
Tgr closed this task as Resolved.Mar 18 2023, 5:11 AM

Thank you @Jdforrester-WMF for fixing.

logstash says there were 167 errors, which is surprisingly low.

But in general, OAuth is one of the tools (along with some other "global" extensions like CentralAuth) where group1 (meta) is used even for things that are, from a user perspective, Wikipedia-related (e.g. the Wikipedia Library), so we should probably react more aggressively to group1 errors coming from such extensions. @brennen not sure if there's a good place to document that.

The revert has been deployed to production and backported to 1.40 so I think this task is resolved - T261462: Migrate OAuth extension back from wikimedia/oauth2-server fork to upstream can be used for following up.

Tgr mentioned this in T261462: Migrate OAuth extension back from wikimedia/oauth2-server fork to upstream.Mar 18 2023, 5:28 AM
brennen added a comment.Mar 19 2023, 12:32 AM

But in general, OAuth is one of the tools (along with some other "global" extensions like CentralAuth) where group1 (meta) is used even for things that are, from a user perspective, Wikipedia-related (e.g. the Wikipedia Library), so we should probably react more aggressively to group1 errors coming from such extensions. @brennen not sure if there's a good place to document that.

Good thought.

I believe wikitech:Deployments/Holding_the_train#Issues_that_hold_the_train is considered canonical for this, though it could probably use some updating.

gerritbot added a comment.Apr 26 2023, 2:54 PM

Change 900144 abandoned by Jforrester:

[mediawiki/extensions/OAuth@wmf/1.40.0-wmf.27] Revert "build: Remove pinning of indirect lcobucci/jwt dependency"

Reason:

We didn't need to backport so this wasn't needed in the end.

https://gerrit.wikimedia.org/r/900144

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits