Page MenuHomePhabricator
Create Task
Maniphest T411368

Error: Typed property MediaWiki\Extension\WebAuthn\Key\WebAuthnKey::$supportsPasswordless must not be accessed before initialization
Closed, ResolvedPublicPRODUCTION ERROR
Actions

Description

Error
  • mwversion: 1.46.0-wmf.4
  • timestamp: 2025-12-01T13:40:33.127Z
  • phpversion: 8.3.26
  • reqId: 23ec7804-5f07-4251-881f-4afc24069e0f
  • Find reqId in Logstash
normalized_message
[{reqId}] {exception_url}   Error: Typed property MediaWiki\Extension\WebAuthn\Key\WebAuthnKey::$supportsPasswordless must not be accessed before initialization
FrameLocationCall
from/srv/mediawiki/php-1.46.0-wmf.4/extensions/WebAuthn/src/Key/WebAuthnKey.php(162)
#0/srv/mediawiki/php-1.46.0-wmf.4/extensions/WebAuthn/src/Authenticator.php(242)MediaWiki\Extension\WebAuthn\Key\WebAuthnKey->jsonSerialize()
#1/srv/mediawiki/php-1.46.0-wmf.4/extensions/WebAuthn/src/HTMLForm/WebAuthnAddKeyForm.php(100)MediaWiki\Extension\WebAuthn\Authenticator->continueRegistration(stdClass)
#2/srv/mediawiki/php-1.46.0-wmf.4/includes/HTMLForm/HTMLForm.php(812)MediaWiki\Extension\WebAuthn\HTMLForm\WebAuthnAddKeyForm->onSubmit(array, MediaWiki\Extension\WebAuthn\HTMLForm\WebAuthnAddKeyForm)
#3/srv/mediawiki/php-1.46.0-wmf.4/includes/HTMLForm/HTMLForm.php(693)MediaWiki\HTMLForm\HTMLForm->trySubmit()
#4/srv/mediawiki/php-1.46.0-wmf.4/includes/HTMLForm/HTMLForm.php(709)MediaWiki\HTMLForm\HTMLForm->tryAuthorizedSubmit()
#5/srv/mediawiki/php-1.46.0-wmf.4/extensions/OATHAuth/src/HTMLForm/OATHAuthOOUIHTMLForm.php(53)MediaWiki\HTMLForm\HTMLForm->show()
#6/srv/mediawiki/php-1.46.0-wmf.4/extensions/OATHAuth/src/Special/OATHManage.php(453)MediaWiki\Extension\OATHAuth\HTMLForm\OATHAuthOOUIHTMLForm->show(null)
#7/srv/mediawiki/php-1.46.0-wmf.4/extensions/OATHAuth/src/Special/OATHManage.php(371)MediaWiki\Extension\OATHAuth\Special\OATHManage->addCustomContent(MediaWiki\Extension\WebAuthn\Module\WebAuthn)
#8/srv/mediawiki/php-1.46.0-wmf.4/extensions/OATHAuth/src/Special/OATHManage.php(134)MediaWiki\Extension\OATHAuth\Special\OATHManage->addModuleHTML(MediaWiki\Extension\WebAuthn\Module\WebAuthn)
#9/srv/mediawiki/php-1.46.0-wmf.4/includes/SpecialPage/SpecialPage.php(711)MediaWiki\Extension\OATHAuth\Special\OATHManage->execute(null)
#10/srv/mediawiki/php-1.46.0-wmf.4/includes/SpecialPage/SpecialPageFactory.php(1743)MediaWiki\SpecialPage\SpecialPage->run(null)
#11/srv/mediawiki/php-1.46.0-wmf.4/includes/Actions/ActionEntryPoint.php(499)MediaWiki\SpecialPage\SpecialPageFactory->executePath(string, MediaWiki\Context\RequestContext)
#12/srv/mediawiki/php-1.46.0-wmf.4/includes/Actions/ActionEntryPoint.php(143)MediaWiki\Actions\ActionEntryPoint->performRequest()
#13/srv/mediawiki/php-1.46.0-wmf.4/includes/MediaWikiEntryPoint.php(184)MediaWiki\Actions\ActionEntryPoint->execute()
#14/srv/mediawiki/php-1.46.0-wmf.4/index.php(44)MediaWiki\MediaWikiEntryPoint->run()
#15/srv/mediawiki/w/index.php(3)require(string)
#16{main}
Impact

60 of these in the last week https://logstash.wikimedia.org/goto/b06262741f22c008721a944b385c2bb4

Notes

I encountered this while attempting to register a Yubikey

Details

Request URL
https://auth.wikimedia.org/enwiki/wiki/Special:AccountSecurity
Related Changes in Gerrit:
SubjectRepoBranchLines +/-
Make sure WebAuthnKey::$supportsPasswordless is always initializedmediawiki/extensions/WebAuthnwmf/1.46.0-wmf.4+1 -1
Make sure WebAuthnKey::$supportsPasswordless is always initializedmediawiki/extensions/WebAuthnmaster+1 -1
Customize query in gerrit

Related Objects

Event Timeline

kostajh created this task.Mon, Dec 1, 1:41 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMon, Dec 1, 1:41 PM
kostajh updated the task description. (Show Details)Mon, Dec 1, 1:42 PM
kostajh added a project: Product Safety and Integrity (Sprint Mince Pie Dec 1 - Dec 12).
kostajh updated the task description. (Show Details)Mon, Dec 1, 1:45 PM
Reedy added subscribers: Mstyles, Reedy.EditedMon, Dec 1, 1:50 PM

rEWATd049a496be94: Backend support for passkeys is the likely fix...

Reedy added a comment.Mon, Dec 1, 1:52 PM
In T411368#11419332, @Reedy wrote:

rEWATd049a496be94: Backend support for passkeys is the likely fix...

With rEWAT6247fd2df973: Add field for supportsPasswordless the cause.

Reedy added a comment.Mon, Dec 1, 6:03 PM
In T411368#11419332, @Reedy wrote:

rEWATd049a496be94: Backend support for passkeys is the likely fix...

https://gerrit.wikimedia.org/r/c/mediawiki/extensions/WebAuthn/+/1210847 for T410334: Allow users to create passkeys being a better reference because it's not merged yet.

gerritbot added a comment.Mon, Dec 1, 6:17 PM

Change #1213544 had a related patch set uploaded (by Catrope; author: Catrope):

[mediawiki/extensions/WebAuthn@master] Make sure WebAuthnKey::$supportsPasswordless is always initialized

https://gerrit.wikimedia.org/r/1213544

gerritbot added a project: Patch-For-Review.Mon, Dec 1, 6:17 PM
Reedy moved this task from Backlog to Bugs on the MediaWiki-extensions-OATHAuth board.Mon, Dec 1, 6:25 PM
gerritbot added a comment.Mon, Dec 1, 7:28 PM

Change #1213544 merged by jenkins-bot:

[mediawiki/extensions/WebAuthn@master] Make sure WebAuthnKey::$supportsPasswordless is always initialized

https://gerrit.wikimedia.org/r/1213544

Maintenance_bot removed a project: Patch-For-Review.Mon, Dec 1, 7:30 PM
ReleaseTaggerBot added a project: MW-1.46-notes (1.46.0-wmf.5; 2025-12-02).Mon, Dec 1, 8:00 PM
gerritbot added a comment.Mon, Dec 1, 8:15 PM

Change #1213562 had a related patch set uploaded (by Catrope; author: Catrope):

[mediawiki/extensions/WebAuthn@wmf/1.46.0-wmf.4] Make sure WebAuthnKey::$supportsPasswordless is always initialized

https://gerrit.wikimedia.org/r/1213562

gerritbot added a project: Patch-For-Review.Mon, Dec 1, 8:15 PM
gerritbot added a comment.Mon, Dec 1, 11:37 PM

Change #1213562 merged by jenkins-bot:

[mediawiki/extensions/WebAuthn@wmf/1.46.0-wmf.4] Make sure WebAuthnKey::$supportsPasswordless is always initialized

https://gerrit.wikimedia.org/r/1213562

Stashbot added a comment.Mon, Dec 1, 11:38 PM

Mentioned in SAL (#wikimedia-operations) [2025-12-01T23:38:00Z] <catrope@deploy2002> Started scap sync-world: Backport for [[gerrit:1213562|Make sure WebAuthnKey::$supportsPasswordless is always initialized (T411368)]]

Stashbot added a comment.Mon, Dec 1, 11:39 PM

Mentioned in SAL (#wikimedia-operations) [2025-12-01T23:39:54Z] <catrope@deploy2002> catrope: Backport for [[gerrit:1213562|Make sure WebAuthnKey::$supportsPasswordless is always initialized (T411368)]] synced to the testservers (see https://wikitech.wikimedia.org/wiki/Mwdebug). Changes can now be verified there.

Stashbot added a comment.Mon, Dec 1, 11:45 PM

Mentioned in SAL (#wikimedia-operations) [2025-12-01T23:45:36Z] <catrope@deploy2002> Finished scap sync-world: Backport for [[gerrit:1213562|Make sure WebAuthnKey::$supportsPasswordless is always initialized (T411368)]] (duration: 07m 36s)

Catrope closed this task as Resolved.Mon, Dec 1, 11:54 PM
Catrope claimed this task.
Maintenance_bot removed a project: Patch-For-Review.Tue, Dec 2, 12:30 AM
ReleaseTaggerBot edited projects, added MW-1.46-notes (1.46.0-wmf.4; 2025-11-25); removed MW-1.46-notes (1.46.0-wmf.5; 2025-12-02).Tue, Dec 2, 1:00 AM
Dreamy_Jazz moved this task from Backlog to Done on the Product Safety and Integrity (Sprint Mince Pie Dec 1 - Dec 12) board.Tue, Dec 2, 12:11 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits