Page MenuHomePhabricator

hCaptcha: Add support for hCaptcha in the MobileFrontend editor
Closed, ResolvedPublic10 Estimated Story Points

Description

Summary

  • MobileFrontend uses the API to edit
  • When an edit is made using the MobileFrontend, the edit should be prevented unless the user solves an hCaptcha challenge

Acceptance criteria

  • An hCaptcha captcha challenge is triggered when the user edits a page using the mobile frontend
  • When the challenge is shown, the edit is not made unless the user correctly solves it
  • The captcha challenge should be shown in the same screen used for providing the edit summary (instead of having an additional step as it happens for other captcha types)
  • If the user clicks outside the popup that contains the captcha, it goes back to the form that prompts for the edit summary; trying to submit the edit again will show the captcha again

Related Objects

StatusSubtypeAssignedTask
In Progresshector.arroyo
Resolvedhector.arroyo
ResolvedDreamy_Jazz
ResolvedDreamy_Jazz
Declinedhector.arroyo
Resolvedhector.arroyo
Resolvedhector.arroyo
Resolvedhector.arroyo
Resolvedhector.arroyo
Resolvedhector.arroyo
Resolvedhector.arroyo
ResolvedMPostoronca-WMF
Resolvedhector.arroyo

Event Timeline

There are a very large number of changes, so older changes are hidden. Show Older Changes
hector.arroyo renamed this task from hCaptcha: Add support for hCaptcha in the MoileFrontend to hCaptcha: Add support for hCaptcha in the MoileFrontend editor.Oct 15 2025, 2:18 PM
hector.arroyo added a project: MobileFrontend.
hector.arroyo moved this task from Untriaged to MobileFrontend (Editor) on the MobileFrontend board.
hector.arroyo renamed this task from hCaptcha: Add support for hCaptcha in the MoileFrontend editor to hCaptcha: Add support for hCaptcha in the MobileFrontend editor.Oct 15 2025, 2:21 PM
hector.arroyo changed the task status from Open to Stalled.Oct 17 2025, 9:45 AM

Change #1196889 had a related patch set uploaded (by Harroyo-wmf; author: Harroyo-wmf):

[mediawiki/extensions/MobileFrontend@master] WiP Currently not working, requires previous patches to be merged

https://gerrit.wikimedia.org/r/1196889

It is getting really confusing to work on this feature without having the previous patches merged first

The current solution has just been downvoted by the Editing team, raising the estination for this task.

hector.arroyo changed the point value for this task from 1 to 6.Oct 21 2025, 3:25 PM

Change #1198289 had a related patch set uploaded (by Harroyo-wmf; author: Harroyo-wmf):

[mediawiki/extensions/MobileFrontend@master] editor: Add hooks required for supporting hCaptcha on edits

https://gerrit.wikimedia.org/r/1198289

The solution has been reworked.

hector.arroyo changed the point value for this task from 6 to 10.Oct 24 2025, 3:37 PM

Change #1196056 had a related patch set uploaded (by Harroyo-wmf; author: Harroyo-wmf):

[mediawiki/extensions/ConfirmEdit@master] hCaptcha: Support hCaptcha when using the MobileFrontend

https://gerrit.wikimedia.org/r/1196056

hector.arroyo changed the task status from Stalled to In Progress.Oct 28 2025, 4:40 PM

There's a change pending to be done in https://gerrit.wikimedia.org/r/c/mediawiki/extensions/ConfirmEdit/+/1196056 to make the popup with the challenge close when the user clicks outside it.

I'm updating the ACs to reflect this.

Change #1196889 abandoned by Harroyo-wmf:

[mediawiki/extensions/MobileFrontend@master] editor: Add support for hCaptcha

Reason:

Superseded by I09fa5d5d00755425b1ac3e56d9714a56333ffef6

https://gerrit.wikimedia.org/r/1196889

There's a change pending to be done in https://gerrit.wikimedia.org/r/c/mediawiki/extensions/ConfirmEdit/+/1196056 to make the popup with the challenge close when the user clicks outside it.

I'm updating the ACs to reflect this.

This was already fixed back in the day, and I verified it still works as expected after rebasing the old patches on top of the master branches.

The patch at https://gerrit.wikimedia.org/r/c/mediawiki/extensions/ConfirmEdit/+/1196056 has been updated after adressing a first batch of review comments (shared privately), and is now ready to be reviewed again.

Moving back to In Progress since the topmost patch in ConfirmEdit https://gerrit.wikimedia.org/r/c/mediawiki/extensions/ConfirmEdit/+/1196056 needs to be rebased after moving some of its functionality into smaller patches uder separate subtasks

Change #1198289 merged by jenkins-bot:

[mediawiki/extensions/MobileFrontend@master] editor: Add hooks required for supporting hCaptcha on edits

https://gerrit.wikimedia.org/r/1198289

Change #1196056 merged by jenkins-bot:

[mediawiki/extensions/ConfirmEdit@master] hCaptcha: Support hCaptcha when using MobileFrontend

https://gerrit.wikimedia.org/r/1196056

Change #1255691 had a related patch set uploaded (by Harroyo-wmf; author: Harroyo-wmf):

[mediawiki/extensions/ConfirmEdit@master] hcaptcha: Use the global edit sitekey for MobileFrontend edits if available

https://gerrit.wikimedia.org/r/1255691

Submitted an additional patch to fix how keys are handled by the MobileFrontend integration when each action is configured to use a different key: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/ConfirmEdit/+/1255691

hector.arroyo changed the task status from In Progress to Stalled.Mar 19 2026, 5:32 PM

QA can't proceed until the the fix T420574: hcaptcha: Make edits coming from the MobileFrontend use the sitekey for edits is deployed and it is verified that it works.

hector.arroyo changed the task status from Stalled to In Progress.Mar 23 2026, 9:12 AM
dom_walden subscribed.

This can be moved on as testing has been/is being done elsewhere.

Closing as per Dom's comment.