The following throw a notloggedin error for anonymous users, and should do the same for temporary users:
- ApiChangeAuthenticationData
- ApiRemoveAuthenticationData
- ApiLinkAccount
- TemporaryPasswordPrimaryAuthenticationProvider
- ApiValidatePassword
Description
Description
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | • Niharika | T324492 IP Masking - MVP | |||
| Open | None | T326816 Update features for IP Masking | |||
| Open | None | T331637 Update features in MediaWiki core for IP Masking | |||
| Open | None | T332411 Make some authentication APIs unavailable to temporary users |
Event Timeline
Comment Actions
@tstarling Before we pick this up, is there any reason why a temporary account should have access to any of these?