Centralize API error handling for bad authorization tokens between OAuth and CentralAuth
Open, Needs TriagePublic
Actions

Assigned To

None

Authored By

	matmarex
	Wed, Apr 8, 8:33 PM

Details

Related Changes in Gerrit:

	Subject	Repo	Branch	Lines +/-
	SessionProvider: Improve makeException()	mediawiki/core	master	+36 -39
	CentralAuthTokenSessionProvider: Use core code for exception-throwing sessions	mediawiki/extensions/CentralAuth	master	+29 -117

Status	Assigned	Task
Open	None	T422738 Centralize API error handling for bad authorization tokens between OAuth and CentralAuth
Open	None	T421777 Passing an invalid token via "Authorization: CentralAuthToken …" header should result in an error, not an anonymous session
Open	matmarex	T421778 Action API requests with centralauthtoken=… should produce CORS headers if the token is invalid

Restricted Application added a subscriber: Aklapper. · View Herald Transcript

Change #1269051 had a related patch set uploaded (by Bartosz Dziewoński; author: Bartosz Dziewoński):

[mediawiki/core@master] SessionProvider: Improve makeException()

Change #1264746 had a related patch set uploaded (by Bartosz Dziewoński; author: Bartosz Dziewoński):

[mediawiki/extensions/CentralAuth@master] CentralAuthTokenSessionProvider: Use core code for exception-throwing sessions