Page MenuHomePhabricator
Create Task
Maniphest T332286

Login to Diff blog with Wikimedia account ends with SSO error
Closed, ResolvedPublicBUG REPORT
Actions

Description

Steps to replicate the issue (include links if applicable):

  • go to diff.wikimedia.org (meanwhile logged in to WMF projects)
  • go to post, e.g. this and scroll down
  • click on "Login with your Wikimedia account"
  • then click on "Login with MediaWiki"
  • click on Allow (or basically the blue bottom - I am not having the site in English right now) of the pop-up window according to the point 1 of What happens as described below.

What happens?:

  1. After clicking on "Login with MediaWiki" one is transferred to meta.wikimedia.org OAuth. The pop-up window comes asking whether to declare access to personal information to the Diff application.
  2. After that one is taken back to diff.wikimedia.org and there is an error on the top of the log in windows staying SSO Error:

What should have happened instead?:
One should be logged in with their MediaWiki account.

Other information (browser name/version, screenshots, etc.):
Browsers used: Firefox 110.0.1, Edge 110.0.1587.63

Related Objects

Event Timeline

Juandev created this task.Mar 16 2023, 8:59 AM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMar 16 2023, 8:59 AM
Aklapper renamed this task from Login to with MediaWiki account to Diff blog ends with SSO error to Login to Diff blog with Wikimedia account ends with SSO error.Mar 16 2023, 4:11 PM
RAdimer-WMF subscribed.Mar 16 2023, 5:33 PM
CKoerner_WMF subscribed.Mar 16 2023, 5:33 PM

Hmm, looks like OAuth is not having a good day. If folks have an existing account they can request a password reset and login via the WordPress authentication at https://diff.wikimedia.org/wp-login.php

I'll see if anything has changed on the OAuth side of things. On the Diff side I'm not aware of any changes.

Tgr subscribed.Mar 16 2023, 7:05 PM

This is fallout from T321160: Lcobucci\JWT\Signer\InvalidKeyProvided: Key cannot be empty.

Tgr mentioned this in T321160: Lcobucci\JWT\Signer\InvalidKeyProvided: Key cannot be empty.Mar 16 2023, 7:10 PM
CKoerner_WMF closed this task as Resolved.Mar 17 2023, 12:10 AM
CKoerner_WMF claimed this task.

According to T321160#8703886 this is resolved. I'm able to confirm and test as well. Big thanks to @Juandev for making us aware and to @Tgr for pinpointing the cause.

Juandev added a comment.EditedMar 21 2023, 3:45 PM
In T332286#8704181, @CKoerner_WMF wrote:

According to T321160#8703886 this is resolved. I'm able to confirm and test as well. Big thanks to @Juandev for making us aware and to @Tgr for pinpointing the cause.

Cannot confirm that @CKoerner_WMF I am receiving the following error message:

SSO Error: Sorry, that username already exists!

And the result is I am not logged on to the login page. But I wonder whether this is the same error or not. May it be linked to the fact I have the same account on WordPress created separately?

CKoerner_WMF added a comment.Mar 28 2023, 5:18 PM

May it be linked to the fact I have the same account on WordPress created separately?

Yes. I think that is the issue. You can continue to login with your local WordPress account or, if you want to login with our Wikimedia account, I can do a little moving around of user accounts on the backend and you can then log in normally.

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits