See T410484: Link to Special:AccountRecovery in 2FA verification page for reason. This will also succeed T407727: Add WMF-specific help link for account recovery in Special:PasswordReset.
Description
Related Objects
- Mentioned In
- T411441: EmailAuth and ReportIncident both implement a Zendesk Client
- Mentioned Here
- T414597: AccountRecovery: Collect certain data from the MW backend
T414602: AccountRecovery: Collect certain data from Logstash (and figure out where to put it)
T411441: EmailAuth and ReportIncident both implement a Zendesk Client
T410486: Make AccountRecovery send an email to a specific mail address if creation of Zendesk ticket failed (or no Zendesk URL is configured)
T399742: Integrated on-page form for EmailAuth recovery requests
T401939: Create a Wikimedia* extension for site customizations
T407727: Add WMF-specific help link for account recovery in Special:PasswordReset
T410484: Link to Special:AccountRecovery in 2FA verification page
Event Timeline
ext:WikimediaCustomizations is being created in T401939: Create a Wikimedia* extension for site customizations… my first thought would be to maybe move it in there, as on its face it seems quite WMF-specific / based/designed around WMF-specific workflows. Maybe it's just me, but having it in ext:EmailAuth feels kinda forced, and not that much in line with (how I'd personally interpreted) the previous scope of the extension. (But again, this might just be me :))
xref T399742#11087060, where something similar to this was mentioned previously by @Tgr.
ext:WikimediaCustomizations is being created in T401939: Create a Wikimedia* extension for site customizations
But it is not yet deployed anywhere.
as on its face it seems quite WMF-specific / based/designed around WMF-specific workflows
See T410486: Make AccountRecovery send an email to a specific mail address if creation of Zendesk ticket failed (or no Zendesk URL is configured) which will make it a more generally useful extension.
I know - it'd presumably only be able to be moved there after it's deployed :)
as on its face it seems quite WMF-specific / based/designed around WMF-specific workflows
See T410486: Make AccountRecovery send an email to a specific mail address if creation of Zendesk ticket failed (or no Zendesk URL is configured) which will make it a more generally useful extension.
I'm sort of unsure on whether it seems like it'd be worth the (e.g.) development time to make Special:AccountRecovery (more) generic for third-parties, versus just moving it into a WMF-specific extension. (Disclaimer: whether or not to do this is not my decision!)
WikimediaCustomizations will be deployed next week, but IMO this is a sufficiently well-contained and useful feature that a separate extension would make sense.
Alternatively, per T411441#11423029, maybe the ContactPage extension could incorporate this functionality.
So we can built in a "sample" account recovery form in ContactPage. Things to consider:
- T414597 and T414602 proposed to collect some data to send to the target (whether Zendesk or after T410486, a specific mail address). Some of them are useful for 3rd party wiki usage (though we may allow 3rd wiki to disable sending them), some are WMF-specific. So we may define hooks to alter message to send and let WikimediaCustomizations implement it.