When the "This consumer is for use only by..." checkbox is checked, a bunch of form fields get hidden as irrelevant for owner-only consumers, but the confidential checkbox doesn't. But it isn't really conceptually meaningful (what does it mean for a client tied to a single user to be public? it's usually defined as being able to keep the client secret secret; but while owner-only clients do receive a client secret, they are banned from all the endpoints where they could actually make use aof it), and it has no practical application (the only impact of the checkbox is forcing PKCE when using the authorization code flow, but owner-only clients cannot use the authorization code flow).
Description
Description
Details
Details
Related Changes in Gerrit:
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | None | T142282 Improve consumer registration experience for bot owners (owner-only consumers) | |||
| Open | None | T142279 Simplify OAuth registration form for owner-only consumers | |||
| Resolved | SD0001 | T431943 Hide "client is confidential" checkbox for OAuth 2 owner-only clients |
Event Timeline
Comment Actions
Change #1309847 had a related patch set uploaded (by SD0001; author: SD0001):
[mediawiki/extensions/OAuth@master] Hide "client is confidential" checkbox for owner-only clients
Comment Actions
Change #1309848 had a related patch set uploaded (by SD0001; author: SD0001):
[mediawiki/extensions/OAuth@master] Hide grant types radio input for owner-only clients
Comment Actions
Change #1309847 merged by jenkins-bot:
[mediawiki/extensions/OAuth@master] Hide "client is confidential" checkbox for owner-only clients