hCaptcha: Instrument call to /siteverify
Closed, ResolvedPublic0.5 Estimated Story Points
Actions

Assigned To

Authored By

	kostajh
	Aug 21 2025, 7:33 AM

Project Tags

Referenced Files

None

Subscribers

Aklapper

kostajh

Description

Summary

When verifying the token used for an hCaptcha backed submission, we make an API call to hCaptcha to validate the token. We should instrument the latency for this call, to better understand if the effort needed for on-premise verification is worthwhile.

Technical notes

Use StatsLib to log timings for this API call and plot the results in Grafana, in a private dashboard https://github.com/wikimedia/mediawiki-extensions-ConfirmEdit/blob/5b09d01924cd13a2d4169e09c3e783ad5d9cfd11/includes/hCaptcha/HCaptcha.php#L128

Acceptance criteria

API call to hCaptcha verification is instrumented
Data is plotted in a private dashboard in Grafana

Details

Related Changes in Gerrit:

	Subject	Author	Repo	Branch	Lines +/-
	hcaptcha: Instrument siteverify API call	Samuel (WMF)	mediawiki/extensions/ConfirmEdit	master	+20 -0
	hcaptcha: Instrument siteverify API call	Kosta Harlan	mediawiki/extensions/ConfirmEdit	wmf/1.45.0-wmf.15	+20 -0

Customize query in gerrit

Related Objects

Mentioned In: T402767: hCaptcha: Log hCaptcha error codes to Logstash and Prometheus
Mentioned Here: T402767: hCaptcha: Log hCaptcha error codes to Logstash and Prometheus

Event Timeline

kostajh created this task.Aug 21 2025, 7:33 AM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptAug 21 2025, 7:33 AM

kostajh updated the task description. (Show Details)Aug 21 2025, 7:34 AM

kostajh set the point value for this task to 0.5.

• sguebo_WMF claimed this task.Aug 21 2025, 4:49 PM

Change #1181309 had a related patch set uploaded (by Samuel (WMF); author: Samuel (WMF)):

[mediawiki/extensions/ConfirmEdit@master] [WIP] hcaptcha: Instrument API call for token validation

https://gerrit.wikimedia.org/r/1181309

gerritbot added a project: Patch-For-Review.Aug 25 2025, 12:48 AM

• sguebo_WMF changed the task status from Open to In Progress.Aug 25 2025, 1:08 AM

• sguebo_WMF moved this task from Backlog to In progress on the Bot detection and mitigation (WE4.2 hCaptcha account creation trial) board.

Change #1181309 merged by jenkins-bot:

[mediawiki/extensions/ConfirmEdit@master] hcaptcha: Instrument siteverify API call

https://gerrit.wikimedia.org/r/1181309

Maintenance_bot removed a project: Patch-For-Review.Aug 25 2025, 9:30 AM

ReleaseTaggerBot added a project: MW-1.45-notes (1.45.0-wmf.16; 2025-08-26).Aug 25 2025, 10:00 AM

Change #1181664 had a related patch set uploaded (by Kosta Harlan; author: Samuel (WMF)):

[mediawiki/extensions/ConfirmEdit@wmf/1.45.0-wmf.15] hcaptcha: Instrument siteverify API call

https://gerrit.wikimedia.org/r/1181664

gerritbot added a project: Patch-For-Review.Aug 25 2025, 10:36 AM

Change #1181664 merged by jenkins-bot:

[mediawiki/extensions/ConfirmEdit@wmf/1.45.0-wmf.15] hcaptcha: Instrument siteverify API call

https://gerrit.wikimedia.org/r/1181664

Mentioned in SAL (#wikimedia-operations) [2025-08-25T10:50:21Z] <kharlan@deploy1003> Started scap sync-world: Backport for [[gerrit:1181664|hcaptcha: Instrument siteverify API call (T402492)]], [[gerrit:1181665|hCaptcha: Log errors to Logstash (T402767)]]

Mentioned in SAL (#wikimedia-operations) [2025-08-25T10:56:32Z] <kharlan@deploy1003> kharlan: Backport for [[gerrit:1181664|hcaptcha: Instrument siteverify API call (T402492)]], [[gerrit:1181665|hCaptcha: Log errors to Logstash (T402767)]] synced to the testservers (see https://wikitech.wikimedia.org/wiki/Mwdebug). Changes can now be verified there.

ReleaseTaggerBot edited projects, added: MW-1.45-notes (1.45.0-wmf.15; 2025-08-19); removed: MW-1.45-notes (1.45.0-wmf.16; 2025-08-26).Aug 25 2025, 11:00 AM

Mentioned in SAL (#wikimedia-operations) [2025-08-25T11:04:48Z] <kharlan@deploy1003> Finished scap sync-world: Backport for [[gerrit:1181664|hcaptcha: Instrument siteverify API call (T402492)]], [[gerrit:1181665|hCaptcha: Log errors to Logstash (T402767)]] (duration: 14m 26s)

Maintenance_bot removed a project: Patch-For-Review.Aug 25 2025, 11:31 AM

kostajh closed this task as Resolved.Aug 26 2025, 1:26 PM

kostajh updated the task description. (Show Details)

hCaptcha: Instrument call to /siteverifyClosed, ResolvedPublic0.5 Estimated Story PointsActions