Feature summary (what you would like to be able to do and where):

Provide a method for internal services to run read-only api requests on private wikis

Use case(s)

As a developer of a supporting application to mediawiki I need to be able to make read-only api calls against private wikis.

The CirrusSearch streaming updater, due to replace the existing job-based search updater, needs to perform a specific api call to collect the information that needs to be indexed into the search engine. For the majority of wikis, such as mediawiki.org, we could query the public api. But that would fail on the private wikis.

See T345185 for initial design planning of the access method.

Needed for deployment of the extensions:

• A review from the product owner for the affected area, if applicable. General concept reviewed by multiple members of core platform, who own Authentication and Authorization. Code review from Gergő Tisza, documented individual maintainer of same.
• Application security review