Adding QS-Test-Automation to keep aware of this, this is a great effort. Where's test coverage going to be documented? Will it flow to https://doc.wikimedia.org/cover-extensions/ or somewhere else?

In T416490#11585616, @SLong-WMF wrote:

Adding QS-Test-Automation to keep aware of this, this is a great effort. Where's test coverage going to be documented? Will it flow to https://doc.wikimedia.org/cover-extensions/ or somewhere else?

Ack! It'll flow to the site you linked above. Specifically: https://doc.wikimedia.org/cover-extensions/OAuth/src/index.html

For /propose:

• owner-only / non-owner-only workflow is very different
• OAuth 1 and 2 are quite different
• should test consumers using RSA keys vs. a secret
• need separate tests for auto-approved ($wgOAuthAutoApprove) and non-auto-approved consumers
• there are a bunch of error conditions that should have tests, like using http: for OAuth 2 (although maybe better handled in ConsumerSubmitControl unit tests)

For /update, I think the only meaningful difference is RSA keys vs. secrets (and even that only when the reset option is used).

Change #1238314 had a related patch set uploaded (by D3r1ck01; author: Derick Alangi):

[mediawiki/extensions/OAuth@master] tests: Add integration tests for Special:MWOAuthConsumerRegistration

https://gerrit.wikimedia.org/r/1238314

(17/02/2026): A measure of code coverage report generated locally for this class: