Page MenuHomePhabricator

hCaptcha: SiteKey mismatch error on "always challenge" workflow
Closed, ResolvedPublicBUG REPORT

Description

Steps to replicate the issue (include links if applicable):

  • Go to test.wikipedia.org as a user without skipcaptcha right
  • Add text to the "Test" page in the wikitext editor on desktop, and add showcaptcha in the edit summary
  • Press submit
  • See the information requesting that you re-submit the form to complete a challenge
  • Press submit again
  • Complete the hCaptcha challenge

What happens?:

  • The challenge is completed, and the page reloads again, requesting that the user re-submit the form

What should have happened instead?:

  • The edit should be saved

Software version (on Special:Version page; skip for WMF-hosted wikis like Wikipedia):

Other information (browser name/version, screenshots, etc.):

Event Timeline

Change #1208333 had a related patch set uploaded (by Harroyo-wmf; author: Harroyo-wmf):

[mediawiki/extensions/ConfirmEdit@master] hCaptcha: Allow providing a set of valid keys for site verify per action

https://gerrit.wikimedia.org/r/1208333

Change #1208333 merged by jenkins-bot:

[mediawiki/extensions/ConfirmEdit@master] hCaptcha: Allow providing a set of valid keys for site verify per action

https://gerrit.wikimedia.org/r/1208333

Change #1210737 had a related patch set uploaded (by Kosta Harlan; author: Harroyo-wmf):

[mediawiki/extensions/ConfirmEdit@wmf/1.46.0-wmf.3] hCaptcha: Allow providing a set of valid keys for site verify per action

https://gerrit.wikimedia.org/r/1210737

Change #1210737 merged by jenkins-bot:

[mediawiki/extensions/ConfirmEdit@wmf/1.46.0-wmf.3] hCaptcha: Allow providing a set of valid keys for site verify per action

https://gerrit.wikimedia.org/r/1210737

Mentioned in SAL (#wikimedia-operations) [2025-11-25T09:32:09Z] <kharlan@deploy2002> Started scap sync-world: Backport for [[gerrit:1210627|hCaptcha: Define valid SiteKeys for account creation and edit triggers (T410657)]], [[gerrit:1210737|hCaptcha: Allow providing a set of valid keys for site verify per action (T410657 T410863)]]

Mentioned in SAL (#wikimedia-operations) [2025-11-25T09:36:24Z] <kharlan@deploy2002> kharlan: Backport for [[gerrit:1210627|hCaptcha: Define valid SiteKeys for account creation and edit triggers (T410657)]], [[gerrit:1210737|hCaptcha: Allow providing a set of valid keys for site verify per action (T410657 T410863)]] synced to the testservers (see https://wikitech.wikimedia.org/wiki/Mwdebug). Changes can now be verified there.

This is being fixed as part of T410657: hCaptcha: Improve support for SiteKey verification, so moving this ticket to code review since patches for that task are currently being reviewed.

Mentioned in SAL (#wikimedia-operations) [2025-11-25T09:43:12Z] <kharlan@deploy2002> Finished scap sync-world: Backport for [[gerrit:1210627|hCaptcha: Define valid SiteKeys for account creation and edit triggers (T410657)]], [[gerrit:1210737|hCaptcha: Allow providing a set of valid keys for site verify per action (T410657 T410863)]] (duration: 11m 03s)

Change #1211073 had a related patch set uploaded (by Kosta Harlan; author: Kosta Harlan):

[mediawiki/extensions/ConfirmEdit@master] hCaptcha: Include AlwaysChallengeSiteKey in list of valid keys

https://gerrit.wikimedia.org/r/1211073

Change #1211073 merged by jenkins-bot:

[mediawiki/extensions/ConfirmEdit@master] hCaptcha: Include AlwaysChallengeSiteKey in list of valid keys

https://gerrit.wikimedia.org/r/1211073

Change #1211174 had a related patch set uploaded (by Kosta Harlan; author: Kosta Harlan):

[mediawiki/extensions/ConfirmEdit@wmf/1.46.0-wmf.4] hCaptcha: Include AlwaysChallengeSiteKey in list of valid keys

https://gerrit.wikimedia.org/r/1211174

Change #1211175 had a related patch set uploaded (by Kosta Harlan; author: Kosta Harlan):

[mediawiki/extensions/ConfirmEdit@wmf/1.46.0-wmf.3] hCaptcha: Include AlwaysChallengeSiteKey in list of valid keys

https://gerrit.wikimedia.org/r/1211175

Change #1211174 merged by jenkins-bot:

[mediawiki/extensions/ConfirmEdit@wmf/1.46.0-wmf.4] hCaptcha: Include AlwaysChallengeSiteKey in list of valid keys

https://gerrit.wikimedia.org/r/1211174

Change #1211175 merged by jenkins-bot:

[mediawiki/extensions/ConfirmEdit@wmf/1.46.0-wmf.3] hCaptcha: Include AlwaysChallengeSiteKey in list of valid keys

https://gerrit.wikimedia.org/r/1211175

Mentioned in SAL (#wikimedia-operations) [2025-11-25T21:17:45Z] <urbanecm@deploy2002> Started scap sync-world: Backport for [[gerrit:1211146|Do not add IPInfo buttons when there is no mw-data-target (T410988)]], [[gerrit:1211174|hCaptcha: Include AlwaysChallengeSiteKey in list of valid keys (T410863)]], [[gerrit:1211175|hCaptcha: Include AlwaysChallengeSiteKey in list of valid keys (T410863)]], [[gerrit:1211240|Fix cache expiration time for parsoid usage (T408741)]]

Mentioned in SAL (#wikimedia-operations) [2025-11-25T21:19:53Z] <urbanecm@deploy2002> kharlan, tchanders, cscott, urbanecm: Backport for [[gerrit:1211146|Do not add IPInfo buttons when there is no mw-data-target (T410988)]], [[gerrit:1211174|hCaptcha: Include AlwaysChallengeSiteKey in list of valid keys (T410863)]], [[gerrit:1211175|hCaptcha: Include AlwaysChallengeSiteKey in list of valid keys (T410863)]], [[gerrit:1211240|Fix cache expiration time for parsoid usage (T408741)]] sy

Mentioned in SAL (#wikimedia-operations) [2025-11-25T21:33:02Z] <urbanecm@deploy2002> Finished scap sync-world: Backport for [[gerrit:1211146|Do not add IPInfo buttons when there is no mw-data-target (T410988)]], [[gerrit:1211174|hCaptcha: Include AlwaysChallengeSiteKey in list of valid keys (T410863)]], [[gerrit:1211175|hCaptcha: Include AlwaysChallengeSiteKey in list of valid keys (T410863)]], [[gerrit:1211240|Fix cache expiration time for parsoid usage (T408741)]] (duration: 15m

✅ The edit should be saved as expected