As part of enabling hCaptcha for the MobileFrontend, we should update the configuration to enable hCaptcha for API requests originating on the MobileFrontend.
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| In Progress | hector.arroyo | T407339 hCaptcha: Implement hCaptcha on edits made through the MobileFrontend | |||
| Resolved | hector.arroyo | T419125 hCaptcha: Update mediawiki-config to enforce checks for API edits coming from the MobileFrontend |
This can't be done until T419572: hCaptcha: Identify edits coming from the MobileFrontend is deployed.
Unblocking this: Starting to work on the patch for the config repository, as the changes for T419572: hCaptcha: Identify edits coming from the MobileFrontend are now being reviewed and all other code changes for T407339: hCaptcha: Implement hCaptcha on edits made through the MobileFrontend are already waiting for review.
Change #1250575 had a related patch set uploaded (by Harroyo-wmf; author: Harroyo-wmf):
[operations/mediawiki-config@master] hcaptcha: Enforce hCaptcha checks on API edits coming from the MobileFrontend
This change can't be applied until https://gerrit.wikimedia.org/r/c/mediawiki/extensions/MobileFrontend/+/1250002 gets merged
Change #1250575 merged by jenkins-bot:
[operations/mediawiki-config@master] hcaptcha: Enforce hCaptcha on API edits coming from the MobileFrontend
Mentioned in SAL (#wikimedia-operations) [2026-03-17T08:43:34Z] <kharlan@deploy2002> Started scap sync-world: Backport for [[gerrit:1250575|hcaptcha: Enforce hCaptcha on API edits coming from the MobileFrontend (T419125)]]
Mentioned in SAL (#wikimedia-operations) [2026-03-17T08:48:59Z] <kharlan@deploy2002> harroyo-wmf, kharlan: Backport for [[gerrit:1250575|hcaptcha: Enforce hCaptcha on API edits coming from the MobileFrontend (T419125)]] synced to the testservers (see https://wikitech.wikimedia.org/wiki/Mwdebug). Changes can now be verified there.
Change #1254114 had a related patch set uploaded (by Kosta Harlan; author: Kosta Harlan):
[operations/mediawiki-config@master] Revert "hcaptcha: Enforce hCaptcha on API edits coming from the MobileFrontend"
Change #1254114 merged by jenkins-bot:
[operations/mediawiki-config@master] Revert "hcaptcha: Enforce hCaptcha on API edits coming from the MobileFrontend"
Mentioned in SAL (#wikimedia-operations) [2026-03-17T08:57:23Z] <kharlan@deploy2002> Started scap sync-world: Backport for [[gerrit:1254114|Revert "hcaptcha: Enforce hCaptcha on API edits coming from the MobileFrontend" (T419125)]]
Mentioned in SAL (#wikimedia-operations) [2026-03-17T09:02:47Z] <kharlan@deploy2002> kharlan: Backport for [[gerrit:1254114|Revert "hcaptcha: Enforce hCaptcha on API edits coming from the MobileFrontend" (T419125)]] synced to the testservers (see https://wikitech.wikimedia.org/wiki/Mwdebug). Changes can now be verified there.
Mentioned in SAL (#wikimedia-operations) [2026-03-17T09:10:00Z] <kharlan@deploy2002> Finished scap sync-world: Backport for [[gerrit:1254114|Revert "hcaptcha: Enforce hCaptcha on API edits coming from the MobileFrontend" (T419125)]] (duration: 12m 36s)
Change #1254889 had a related patch set uploaded (by Harroyo-wmf; author: Harroyo-wmf):
[operations/mediawiki-config@master] Reapply "hcaptcha: Enforce hCaptcha on API edits coming from the MobileFrontend"
The original patch https://gerrit.wikimedia.org/r/c/operations/mediawiki-config/+/1250575 was merged, then reverted on https://gerrit.wikimedia.org/r/c/operations/mediawiki-config/+/1254114.
I've opened another patch to reapply the change for testwiki: https://gerrit.wikimedia.org/r/c/operations/mediawiki-config/+/1254889. It is scheduled to be deployed later today: https://schedule-deployment.toolforge.org/window/1773864000
Change #1254889 merged by jenkins-bot:
[operations/mediawiki-config@master] Reapply "hcaptcha: Enforce hCaptcha on API edits coming from the MobileFrontend"
Mentioned in SAL (#wikimedia-operations) [2026-03-18T20:57:30Z] <jdlrobson@deploy2002> Started scap sync-world: Backport for [[gerrit:1255013|Guard for JS null deref on empty Parsoid sections (T419721)]], [[gerrit:1254889|Reapply "hcaptcha: Enforce hCaptcha on API edits coming from the MobileFrontend" (T419125)]]
Mentioned in SAL (#wikimedia-operations) [2026-03-18T20:59:36Z] <jdlrobson@deploy2002> jdlrobson, harroyo-wmf: Backport for [[gerrit:1255013|Guard for JS null deref on empty Parsoid sections (T419721)]], [[gerrit:1254889|Reapply "hcaptcha: Enforce hCaptcha on API edits coming from the MobileFrontend" (T419125)]] synced to the testservers (see https://wikitech.wikimedia.org/wiki/Mwdebug). Changes can now be verified there.
Mentioned in SAL (#wikimedia-operations) [2026-03-18T21:08:50Z] <jdlrobson@deploy2002> Finished scap sync-world: Backport for [[gerrit:1255013|Guard for JS null deref on empty Parsoid sections (T419721)]], [[gerrit:1254889|Reapply "hcaptcha: Enforce hCaptcha on API edits coming from the MobileFrontend" (T419125)]] (duration: 11m 20s)