Page MenuHomePhabricator
Create Task
Maniphest T382148

Enable hCaptcha on test2wiki
Closed, ResolvedPublic
Actions

Description

Summary

Enable hCaptcha on test2wiki to provide a controlled environment for testing hCaptcha’s behavior with on-wiki features.

Background

  • We need a shared environment to test hCaptcha’s integration with MediaWiki.
  • Need to test on mobile web.
  • Need to test accessibility support.
  • Need to test multi-captcha support: multiple endpoints or other integration options.

User story

As staff, I want to enable hCaptcha on test2wiki to test its behavior across different wiki features and platforms.

Acceptance criteria

  • hCaptcha deployed to test2wiki
  • hCaptcha is enabled through account creation flow
  • QA can be performed on hCaptcha work once on test2wiki

Details

Related Changes in Gerrit:
SubjectAuthorRepoBranchLines +/-
CommonSettings: Add hcaptcha.wikimedia.org to $wgCrossSiteAJAXdomainsReedyoperations/mediawiki-configmaster+1 -0
Enable hCaptcha on test2wikiDreamy Jazzoperations/mediawiki-configmaster+1 -0
Set hCaptcha configReedyoperations/mediawiki-configmaster+59 -2
Revert^2 "extension-list: Add ConfirmEdit/hCaptcha/extension.json"Reedyoperations/mediawiki-configmaster+1 -0
extension-list: Add ConfirmEdit/hCaptcha/extension.jsonReedyoperations/mediawiki-configmaster+1 -0
Customize query in gerrit

Related Objects
Search...

Event Timeline

• acooper created this task.Dec 13 2024, 2:30 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptDec 13 2024, 2:30 PM
• acooper updated the task description. (Show Details)Dec 13 2024, 2:37 PM
• acooper updated the task description. (Show Details)
• acooper updated the task description. (Show Details)
Reedy added a comment.Dec 13 2024, 2:45 PM

We can probably just create an instance under https://openstack-browser.toolforge.org/project/security-tools

So we have hcaptcha.security-tools.wmflabs.org or similar, rather than creating a new instance

Reedy renamed this task from Create hcaptcha test wiki to Create hCaptcha test wiki.Mar 14 2025, 2:44 PM
• acooper renamed this task from Create hCaptcha test wiki to Enable hCaptcha on test wiki.Mar 24 2025, 11:50 AM
• acooper edited projects, added: Bot detection and mitigation (WE4.2 hCaptcha account creation trial); removed: Bot detection and mitigation.
kostajh renamed this task from Enable hCaptcha on test wiki to Enable hCaptcha on test2wiki.May 19 2025, 10:37 AM
• Jly subscribed.May 19 2025, 11:01 AM

Legal has confirmed that we are good to enable hCaptcha on test2wiki and we will provide movement communications before the rollout.

gerritbot added a comment.May 20 2025, 4:57 PM

Change #1148389 had a related patch set uploaded (by Reedy; author: Reedy):

[operations/mediawiki-config@master] extension-list: Add ConfirmEdit/hCaptcha/extension.json

https://gerrit.wikimedia.org/r/1148389

gerritbot added a project: Patch-For-Review.May 20 2025, 4:57 PM

Change #1148390 had a related patch set uploaded (by Reedy; author: Reedy):

[operations/mediawiki-config@master] WIP: Prep hCaptcha config

https://gerrit.wikimedia.org/r/1148390

gerritbot added a comment.May 20 2025, 4:59 PM

Change #1148389 merged by jenkins-bot:

[operations/mediawiki-config@master] extension-list: Add ConfirmEdit/hCaptcha/extension.json

https://gerrit.wikimedia.org/r/1148389

Reedy mentioned this in T394814: Unable to have multiple captcha implementations in extension-list.May 20 2025, 5:09 PM
Reedy added a subtask: T394814: Unable to have multiple captcha implementations in extension-list.May 20 2025, 5:27 PM
gerritbot added a comment.May 21 2025, 1:18 PM

Change #1148398 had a related patch set uploaded (by Reedy; author: Reedy):

[operations/mediawiki-config@master] Revert^2 "extension-list: Add ConfirmEdit/hCaptcha/extension.json"

https://gerrit.wikimedia.org/r/1148398

gerritbot added a comment.May 21 2025, 1:20 PM

Change #1148398 merged by jenkins-bot:

[operations/mediawiki-config@master] Revert^2 "extension-list: Add ConfirmEdit/hCaptcha/extension.json"

https://gerrit.wikimedia.org/r/1148398

Stashbot added a comment.May 21 2025, 1:26 PM

Mentioned in SAL (#wikimedia-operations) [2025-05-21T13:26:40Z] <reedy@deploy1003> Started scap sync-world: Backport for [[gerrit:1148398|Revert^2 "extension-list: Add ConfirmEdit/hCaptcha/extension.json" (T382148 T394814)]]

Stashbot added a comment.May 21 2025, 1:56 PM

Mentioned in SAL (#wikimedia-operations) [2025-05-21T13:56:51Z] <reedy@deploy1003> reedy: Backport for [[gerrit:1148398|Revert^2 "extension-list: Add ConfirmEdit/hCaptcha/extension.json" (T382148 T394814)]] synced to the testservers (see https://wikitech.wikimedia.org/wiki/Mwdebug). Changes can now be verified there.

Stashbot added a comment.May 21 2025, 2:12 PM

Mentioned in SAL (#wikimedia-operations) [2025-05-21T14:12:33Z] <reedy@deploy1003> Finished scap sync-world: Backport for [[gerrit:1148398|Revert^2 "extension-list: Add ConfirmEdit/hCaptcha/extension.json" (T382148 T394814)]] (duration: 45m 53s)

Reedy closed subtask T394814: Unable to have multiple captcha implementations in extension-list as Resolved.May 21 2025, 2:13 PM
• sguebo_WMF added a project: Trust and Safety Product Sprint.Jun 25 2025, 1:01 AM
• sguebo_WMF updated the task description. (Show Details)
• sguebo_WMF moved this task from Backlog to In progress on the Bot detection and mitigation (WE4.2 hCaptcha account creation trial) board.Jun 25 2025, 2:27 AM
EMill-WMF subscribed.Jun 25 2025, 2:52 AM
• sguebo_WMF subscribed.EditedJun 26 2025, 2:56 AM

Based on the patch, current ticket seems to be blocked by T397793 and T388891

• sguebo_WMF changed the task status from Open to Stalled.Jun 26 2025, 2:57 AM
• sguebo_WMF added parent tasks: T397793: Implement hCaptcha enterprise trial configuration, T388891: Decide hCaptcha enterprise trial configuration.
• sguebo_WMF removed a subscriber: • acooper.
• sguebo_WMF changed the task status from Stalled to In Progress.Jun 26 2025, 5:11 PM

For test2wiki, the plan is to proceed with a single site key.

• sguebo_WMF reassigned this task from Reedy to Dreamy_Jazz.Jun 27 2025, 6:38 AM
• sguebo_WMF added a subscriber: Reedy.
Dreamy_Jazz added a subtask: T398026: Don't add hCaptcha score to debug logs unless configured.Jun 27 2025, 11:37 AM
• sguebo_WMF added a parent task: T397841: Implement an hCaptcha IP blinding proxy prototype.Jul 4 2025, 1:04 AM
Dreamy_Jazz changed the task status from In Progress to Stalled.Jul 7 2025, 1:12 PM
Dreamy_Jazz removed a parent task: T397841: Implement an hCaptcha IP blinding proxy prototype.
Dreamy_Jazz added a subtask: T397841: Implement an hCaptcha IP blinding proxy prototype.

Stalled until T397841 is complete.

Dreamy_Jazz moved this task from In progress to Backlog on the Bot detection and mitigation (WE4.2 hCaptcha account creation trial) board.Jul 7 2025, 9:03 PM
Dreamy_Jazz added a subtask: T399028: ConfirmEdit hCaptcha: Implement support for invisible mode.Jul 8 2025, 9:16 PM
Dreamy_Jazz added a subtask: T398991: hCaptcha integration with secure enclave mode enabled causes all account creations to fail the captcha check.
Dreamy_Jazz closed subtask T398991: hCaptcha integration with secure enclave mode enabled causes all account creations to fail the captcha check as Resolved.Jul 9 2025, 10:30 PM
Dreamy_Jazz changed the task status from Stalled to Open.Jul 11 2025, 11:01 AM
Dreamy_Jazz moved this task from Backlog to In progress on the Bot detection and mitigation (WE4.2 hCaptcha account creation trial) board.
Dreamy_Jazz edited projects, added: Trust and Safety Product Sprint (Sprint Cannoli (July 7 - July 25)); removed: Trust and Safety Product Sprint.
gerritbot added a comment.Jul 11 2025, 1:21 PM

Change #1168178 had a related patch set uploaded (by Dreamy Jazz; author: Dreamy Jazz):

[operations/mediawiki-config@master] Enable hCaptcha on test2wiki

https://gerrit.wikimedia.org/r/1168178

gerritbot added a comment.Jul 14 2025, 8:10 PM

Change #1148390 merged by jenkins-bot:

[operations/mediawiki-config@master] Set hCaptcha config

https://gerrit.wikimedia.org/r/1148390

Stashbot added a comment.Jul 14 2025, 8:11 PM

Mentioned in SAL (#wikimedia-operations) [2025-07-14T20:11:09Z] <dreamyjazz@deploy1003> Started scap sync-world: Backport for [[gerrit:1148390|Set hCaptcha config (T382148)]]

Stashbot added a comment.Jul 14 2025, 8:13 PM

Mentioned in SAL (#wikimedia-operations) [2025-07-14T20:13:07Z] <dreamyjazz@deploy1003> dreamyjazz, reedy: Backport for [[gerrit:1148390|Set hCaptcha config (T382148)]] synced to the testservers (see https://wikitech.wikimedia.org/wiki/Mwdebug). Changes can now be verified there.

Stashbot added a comment.Jul 14 2025, 8:24 PM

Mentioned in SAL (#wikimedia-operations) [2025-07-14T20:24:23Z] <dreamyjazz@deploy1003> Finished scap sync-world: Backport for [[gerrit:1148390|Set hCaptcha config (T382148)]] (duration: 13m 14s)

Dreamy_Jazz moved this task from Priority Backlog to In Progress on the Trust and Safety Product Sprint (Sprint Cannoli (July 7 - July 25)) board.Jul 15 2025, 2:55 PM
Dreamy_Jazz moved this task from In Progress to Priority Backlog on the Trust and Safety Product Sprint (Sprint Cannoli (July 7 - July 25)) board.Jul 18 2025, 10:35 AM
kostajh edited projects, added: Trust and Safety Product Sprint (Sprint Rum baba (July 28 - August 15)); removed: Trust and Safety Product Sprint (Sprint Cannoli (July 7 - July 25)).Jul 28 2025, 4:37 AM
Dreamy_Jazz updated the task description. (Show Details)Jul 28 2025, 12:04 PM
Dreamy_Jazz closed subtask T399028: ConfirmEdit hCaptcha: Implement support for invisible mode as Resolved.Jul 29 2025, 1:11 PM
Dreamy_Jazz closed subtask T398026: Don't add hCaptcha score to debug logs unless configured as Resolved.
OKryva-WMF triaged this task as Low priority.Aug 1 2025, 1:42 PM
Dreamy_Jazz edited projects, added: Trust and Safety Product Sprint; removed: Trust and Safety Product Sprint (Sprint Rum baba (July 28 - August 15)).Aug 12 2025, 11:57 AM

Removing the sprint tag as we haven't actively planned this to happen during this sprint.

kostajh edited projects, added: Trust and Safety Product Sprint (Sprint Princess Tarta (August 18 - September 5)); removed: Trust and Safety Product Sprint.Aug 20 2025, 5:28 AM
kostajh updated the task description. (Show Details)
kostajh claimed this task.Aug 20 2025, 5:31 AM
kostajh added a subscriber: Dreamy_Jazz.

Claiming to handle the deployment and monitoring, etc.

gerritbot added a comment.Aug 20 2025, 5:50 AM

Change #1168178 merged by jenkins-bot:

[operations/mediawiki-config@master] Enable hCaptcha on test2wiki

https://gerrit.wikimedia.org/r/1168178

Stashbot added a comment.Aug 20 2025, 5:50 AM

Mentioned in SAL (#wikimedia-operations) [2025-08-20T05:50:57Z] <kharlan@deploy1003> Started scap sync-world: Backport for [[gerrit:1168178|Enable hCaptcha on test2wiki (T382148)]]

Stashbot added a comment.Aug 20 2025, 5:53 AM

Mentioned in SAL (#wikimedia-operations) [2025-08-20T05:53:14Z] <kharlan@deploy1003> dreamyjazz, kharlan: Backport for [[gerrit:1168178|Enable hCaptcha on test2wiki (T382148)]] synced to the testservers (see https://wikitech.wikimedia.org/wiki/Mwdebug). Changes can now be verified there.

Stashbot added a comment.Aug 20 2025, 6:02 AM

Mentioned in SAL (#wikimedia-operations) [2025-08-20T06:02:44Z] <kharlan@deploy1003> Finished scap sync-world: Backport for [[gerrit:1168178|Enable hCaptcha on test2wiki (T382148)]] (duration: 11m 48s)

kostajh closed this task as Resolved.Aug 20 2025, 6:06 AM
kostajh updated the task description. (Show Details)
Maintenance_bot removed a project: Patch-For-Review.Aug 20 2025, 6:30 AM
gerritbot added a comment.Aug 21 2025, 8:39 PM

Change #1180970 had a related patch set uploaded (by Reedy; author: Reedy):

[operations/mediawiki-config@master] CommonSettings: Add hcaptcha.wikimedia.org to $wgCrossSiteAJAXdomains

https://gerrit.wikimedia.org/r/1180970

gerritbot added a project: Patch-For-Review.Aug 21 2025, 8:39 PM
gerritbot added a comment.Aug 21 2025, 8:43 PM

Change #1180970 merged by jenkins-bot:

[operations/mediawiki-config@master] CommonSettings: Add hcaptcha.wikimedia.org to $wgCrossSiteAJAXdomains

https://gerrit.wikimedia.org/r/1180970

Stashbot added a comment.Aug 21 2025, 9:09 PM

Mentioned in SAL (#wikimedia-operations) [2025-08-21T21:09:32Z] <reedy@deploy1003> Started scap sync-world: Backport for [[gerrit:1180970|CommonSettings: Add hcaptcha.wikimedia.org to $wgCrossSiteAJAXdomains (T382148)]]

Stashbot added a comment.Aug 21 2025, 9:15 PM

Mentioned in SAL (#wikimedia-operations) [2025-08-21T21:15:21Z] <reedy@deploy1003> reedy: Backport for [[gerrit:1180970|CommonSettings: Add hcaptcha.wikimedia.org to $wgCrossSiteAJAXdomains (T382148)]] synced to the testservers (see https://wikitech.wikimedia.org/wiki/Mwdebug). Changes can now be verified there.

Stashbot added a comment.Aug 21 2025, 9:21 PM

Mentioned in SAL (#wikimedia-operations) [2025-08-21T21:21:11Z] <reedy@deploy1003> Finished scap sync-world: Backport for [[gerrit:1180970|CommonSettings: Add hcaptcha.wikimedia.org to $wgCrossSiteAJAXdomains (T382148)]] (duration: 11m 39s)

Maintenance_bot removed a project: Patch-For-Review.Aug 21 2025, 9:31 PM
kostajh closed subtask T397841: Implement an hCaptcha IP blinding proxy prototype as Resolved.Aug 26 2025, 1:29 PM
• hector.arroyo moved this task from Priority Backlog to Done on the Trust and Safety Product Sprint (Sprint Princess Tarta (August 18 - September 5)) board.Sep 3 2025, 9:13 AM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits