Feature summary (what you would like to be able to do and where):
Provide a method for internal services to run read-only api requests on private wikis
Use case(s)
As a developer of a supporting application to mediawiki I need to be able to make read-only api calls against private wikis.
The CirrusSearch streaming updater, due to replace the existing job-based search updater, needs to perform a specific api call to collect the information that needs to be indexed into the search engine. For the majority of wikis, such as mediawiki.org, we could query the public api. But that would fail on the private wikis.
See T345185 for initial design planning of the access method.
Needed for deployment of the extensions:
- A review from the product owner for the affected area, if applicable. General concept reviewed by multiple members of core platform, who own Authentication and Authorization. Code review from Gergő Tisza, documented individual maintainer of same.
- Application security review – T357353: Application Security Review Request : NetworkSession MediaWiki extension
- Add to the json make-wmf-branch release tool
- Wait until wmf.15 and wmf.16 are the branches in prod (or later)
- Add to extension-list
- Add loading flag to InitialiseSettings.php, default false, and use flag in CommonSettings.php with other config as appropriate
- Set live in InitialiseSettings-labs.php to test on Beta Cluster
- Set live in InitialiseSettings.php