After authenticating on a content wiki, sometimes have to re-authenticate on authwiki
Open, Needs TriagePublicBUG REPORT
Actions

Assigned To

None

Authored By

	dom_walden
	Oct 7 2025, 2:01 PM

Description

What is the problem?

After I login on enwiki (for example), if I go to the authwiki there are circumstances where I have to authenticate again:

On Firefox (although not in a new private window) and Safari
On Chromium if, after logging in, I go to a wiki on a different project (e.g. wiktionary) and login there before going to authwiki

I can reproduce on Firefox, Chromium and Safari on beta and in Firefox and Chromium on production.

Steps to reproduce problem

On Firefox and Safari:

On Chromium:

Login to https://en.wikipedia.beta.wmcloud.org
Go to https://de.wiktionary.beta.wmcloud.org and click the login button at the top right (on Vector)
Go to https://auth.wikimedia.beta.wmcloud.org/enwiki/wiki/Special:AccountSecurity

Environment

Browser: Debian 12 Firefox 140 and Chromium 141. MacOS Sequoia Firefox 143 and Safari 18.4.
Wiki(s): https://en.wikipedia.org OATHAuth – (bf9d113) 17:34, 29 September 2025. WebAuthn – (9790d01) 11:23, 29 September 2025.

Related Objects

Mentioned In: T410151: Temporary account does not persist across different domains
Mentioned Here: rEWAT9790d018beef: Log navigator.credentials input and return values in debug mode
rEOATbf9d1132be2f: Redirect for new auth methods

Event Timeline

dom_walden created this task.Oct 7 2025, 2:01 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptOct 7 2025, 2:01 PM

dom_walden renamed this task from After authenticating on a content wiki, have to re-authenticate on authwiki on Firefox to After authenticating on a content wiki, sometimes have to re-authenticate on authwiki.Oct 8 2025, 2:58 PM

dom_walden added a project: MediaWiki-Core-AuthManager.

dom_walden updated the task description. (Show Details)

Restricted Application added a project: MediaWiki-Platform-Team. · View Herald TranscriptOct 8 2025, 2:58 PM

Just to clarify, not much time passes between logging in on the local domain and going to the central domain, right?

In T406589#11259513, @Tgr wrote:

Just to clarify, not much time passes between logging in on the local domain and going to the central domain, right?

Yes, I go to the central domain immediately after.

Reedy moved this task from Backlog to Bugs on the MediaWiki-extensions-OATHAuth board.Oct 11 2025, 3:51 PM

JTweed-WMF moved this task from Inbox, needs triage to Next (DO NOT USE) on the MediaWiki-Platform-Team board.Oct 13 2025, 2:26 PM

Catrope removed projects: FY2025-26 WE4.6.2 Multiple Authenticators, FY2025-26 WE 4.6 - Account Security (WE 4.6.4 - 2FA improvements and passkey support), MediaWiki-extensions-OATHAuth.Oct 22 2025, 4:51 AM

OWresch-WMF edited projects, added MediaWiki-Platform-Team (Q3 Kanban Board); removed MediaWiki-Platform-Team.Nov 21 2025, 11:39 AM

matmarex mentioned this in T410151: Temporary account does not persist across different domains.Nov 26 2025, 6:09 PM

Johannnes89 subscribed.Nov 27 2025, 7:43 AM

Una_tantum subscribed.Dec 14 2025, 6:11 AM