We used the &usesul3= URL parameter during SUL3 rollout. Today, &usesul3=0 still allows accessing auth-related special pages on the local wiki domains. We probably shouldn't allow that any more.
Description
Description
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | None | T391535 Remove top-level autologin (once SUL2 support is dropped) | |||
| Open | None | T402423 Remove &usesul3= URL parameter | |||
| Open | None | T376021 Migrate WebAuthn on Wikimedia wikis to central domain | |||
| Resolved | pmiazga | T378402 Disallow setting up new WebAuthn passkeys on Wikimedia wikis | |||
| Resolved | Tgr | T389064 Notify WebAuthn users about SUL3 changes | |||
| Resolved | ArielGlenn | T354701 Enable migration of WebAuthn credentials to central domain | |||
| Resolved | None | T248339 Decide how to deal with WebAuthn login/registration flow on Wikimedia wikis in future | |||
| Resolved | Reedy | T248367 Update messages to notify WebAuthn users that they need to login on the same wiki they registered | |||
| Open | None | T405553 Email users to tell them to re-enable WebAuth on central domain (SUL3) | |||
| Restricted Task |
Event Timeline
Comment Actions
We'll need to wrap up T376021: Migrate WebAuthn on Wikimedia wikis to central domain first as it's using that feature. And probably add some logging just in case some gadget etc. uses it.