Maniphest T400365

Support multiple session stores
Open, Needs TriagePublic
Actions

Assigned To

None

Authored By

	JTweed-WMF
	Jul 24 2025, 2:17 PM

Tags

Referenced Files

None

Subscribers

Description

Context

Outcomes

Success criteria

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Open		JTweed-WMF	T398814 WE5.1.1 Session storage protection
		Open		None	T400365 Support multiple session stores
		Resolved		DAlangi_WMF	T394075 Investigate using different stores for different kinds of sessions
		Resolved		• matmarex	T265400 Research to create service for SessionManager::singleton()/getGlobalSession()
		Resolved		DAlangi_WMF	T399192 Create new session store abstraction to replace BagOStuff in SessionManager
		Resolved		DAlangi_WMF	T399195 Update logging and monitoring for multiple session storage backends
		Resolved		• matmarex	T362324 Disable PHPSessionHandler in Wikimedia production
		Resolved		Tgr	T124371 Clean up usage of $_SESSION in WMF-deployed extensions
		Resolved		Florian	T132251 CentralNotice shouldn't use wfSetupSession() anymore
		Resolved	PRODUCTION ERROR	pmiazga	T162910 Update Collection not to use deprecated wfSetupSession call
		Resolved	PRODUCTION ERROR	Jdforrester-WMF	T186339 Update SecurePoll not to use deprecated wfSetupSession call
		Resolved	PRODUCTION ERROR	Tgr	T393963 PHP Deprecated: Use of $_SESSION was deprecated in MediaWiki 1.27. [Called from session_write_close in (internal function)]
		Resolved		Hokwelum	T400667 Make all SessionManager tests pass with PHPSessionHandler disabled
		Resolved		• matmarex	T400668 Debug warnings that were recorded with $wgPHPSessionHandling = 'warn' in WMF production
		Resolved		• matmarex	T402602 Storing objects in session data causes unnecessary session writes, and emits spurious warnings with $wgPHPSessionHandling = 'warn'
		Resolved		• matmarex	T403519 Several mwapi (Python) based tools are failing to edit: badtoken: Invalid CSRF token.

Event Timeline

JTweed-WMF created this task.Jul 24 2025, 2:17 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJul 24 2025, 2:17 PM

JTweed-WMF added a subtask: T394075: Investigate using different stores for different kinds of sessions.Jul 24 2025, 2:17 PM

JTweed-WMF added a project: MediaWiki-Core-AuthManager.

Restricted Application added a project: MediaWiki-Platform-Team. · View Herald TranscriptJul 24 2025, 2:19 PM

JTweed-WMF added a parent task: T398814: WE5.1.1 Session storage protection.Jul 24 2025, 2:20 PM

JTweed-WMF added a subtask: T399192: Create new session store abstraction to replace BagOStuff in SessionManager.Jul 24 2025, 2:38 PM

JTweed-WMF added a subtask: T399195: Update logging and monitoring for multiple session storage backends.

JTweed-WMF added a subtask: T362324: Disable PHPSessionHandler in Wikimedia production.Jul 28 2025, 2:43 PM

JTweed-WMF removed projects: MediaWiki-Core-AuthManager, MediaWiki-Platform-Team.Jul 28 2025, 2:46 PM

Tgr closed subtask T399192: Create new session store abstraction to replace BagOStuff in SessionManager as Resolved.Aug 25 2025, 1:56 PM

DAlangi_WMF closed subtask T394075: Investigate using different stores for different kinds of sessions as Resolved.Aug 25 2025, 3:34 PM

• matmarex closed subtask T362324: Disable PHPSessionHandler in Wikimedia production as Resolved.Sep 15 2025, 6:47 PM

DAlangi_WMF closed subtask T399195: Update logging and monitoring for multiple session storage backends as Resolved.Sep 26 2025, 10:51 AM