returntoquery is a bit too sticky
Open, Needs TriagePublic
Actions

Assigned To

None

Authored By

	Reedy
	Oct 3 2025, 9:50 AM

Project Tags

Referenced Files

None

Subscribers

Aklapper

Reedy

Description

Create a 2FA device with the new UI

The log out link will be /w/index.php?title=Special:UserLogout&returnto=Special%3AAccountSecurity&returntoquery=addsuccess%3DSecurity%2Bkey -- the returntoquery part is a bit too sticky... So you can immediately log out, log in again, and it will follow you through...

The return to link will have /w/index.php?title=Special:AccountSecurity&addsuccess=Security+key

And then the login link will have /w/index.php?title=Special:UserLogin&returnto=Special%3AAccountSecurity&returntoquery=addsuccess%3DSecurity%2Bkey

So when you then log in again, are taken back to Special:AccountSecurity, the success box is still appearing...

Event Timeline

Reedy created this task.Oct 3 2025, 9:50 AM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptOct 3 2025, 9:51 AM

Reedy updated the task description. (Show Details)Oct 3 2025, 9:51 AM

Reedy moved this task from Backlog to Bugs on the MediaWiki-extensions-OATHAuth board.Oct 3 2025, 11:31 AM

Catrope moved this task from Inbox to Bugs on the FY2025-26 WE 4.6 - Account Security (WE 4.6.4 - 2FA improvements and passkey support) board.Oct 22 2025, 5:06 AM

Reedy moved this task from Bugs to User Experience on the MediaWiki-extensions-OATHAuth board.Oct 28 2025, 11:54 AM

returntoquery is a bit too stickyOpen, Needs TriagePublicActions

Description

Event Timeline

returntoquery is a bit too sticky
Open, Needs TriagePublic
Actions