With the completion of T427955 and T429986, we have introduced two new approaches for re-authentication UX with AuthPopup (an interstitial / popup window that opens on top of EditPage.php) and a fallback approach which uses the new DataStash trait to employ a more traditional step-through with separate URL/page loads, especially when JavaScript is disabled or restricted. We are working to improve the consistency and user-facing messages for these approaches in T430197, T431503, T431504 and related tasks. But we currently are not logging any usage metrics around these UX flows. We should add some basic logging of users passing through these flows to better understand how often each UX flow happens and to better surface related issues for these experiences.
Description
Details
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | None | T197160 All security-sensitive MediaWiki functionality should require elevated security | |||
| Resolved | sbassett | T432042 Add logging for various re-authentication methods (AuthPopup vs DataStash flow) |
Event Timeline
Change #1310611 had a related patch set uploaded (by SBassett; author: SBassett):
[mediawiki/core@master] Add logging for various re-authentication methods
Change #1310611 merged by jenkins-bot:
[mediawiki/core@master] Add logging for various re-authentication methods
Change #1310625 had a related patch set uploaded (by SBassett; author: SBassett):
[mediawiki/core@wmf/1.47.0-wmf.10] Add logging for various re-authentication methods
Mentioned in SAL (#wikimedia-operations) [2026-07-14T20:21:45Z] <sbassett@deploy2003> Started scap sync-world: Backport for [[gerrit:1310625|Add logging for various re-authentication methods (T432042)]]
Mentioned in SAL (#wikimedia-operations) [2026-07-14T20:23:39Z] <sbassett@deploy2003> sbassett: Backport for [[gerrit:1310625|Add logging for various re-authentication methods (T432042)]] synced to the testservers (see https://wikitech.wikimedia.org/wiki/Mwdebug). Changes can now be verified there.
Mentioned in SAL (#wikimedia-operations) [2026-07-14T20:28:32Z] <sbassett@deploy2003> Finished scap sync-world: Backport for [[gerrit:1310625|Add logging for various re-authentication methods (T432042)]] (duration: 06m 47s)
Change #1311093 had a related patch set uploaded (by SBassett; author: SBassett):
[mediawiki/core@master] Cleanup: remove reauth indicator from log message
Change #1311093 merged by jenkins-bot:
[mediawiki/core@master] Cleanup: remove reauth indicator from log message
Change #1311127 had a related patch set uploaded (by SBassett; author: SBassett):
[mediawiki/core@master] Use non-sampled authentication log channel instead of authevents
Change #1311127 merged by jenkins-bot:
[mediawiki/core@master] Use non-sampled authentication log channel instead of authevents
Change #1311481 had a related patch set uploaded (by SBassett; author: SBassett):
[mediawiki/core@wmf/1.47.0-wmf.11] Cleanup: remove reauth indicator from log message
Change #1311482 had a related patch set uploaded (by SBassett; author: SBassett):
[mediawiki/core@wmf/1.47.0-wmf.11] Use non-sampled authentication log channel instead of authevents
Change #1311482 abandoned by SBassett:
[mediawiki/core@wmf/1.47.0-wmf.11] Use non-sampled authentication log channel instead of authevents
Reason:
See: I8c60d8a90
Change #1311482 restored by SBassett:
[mediawiki/core@wmf/1.47.0-wmf.11] Use non-sampled authentication log channel instead of authevents
Change #1311481 merged by jenkins-bot:
[mediawiki/core@wmf/1.47.0-wmf.11] Cleanup: remove reauth indicator from log message
Mentioned in SAL (#wikimedia-operations) [2026-07-16T21:22:08Z] <sbassett@deploy2003> Started scap sync-world: Backport for [[gerrit:1311481|Cleanup: remove reauth indicator from log message (T432042)]]
Mentioned in SAL (#wikimedia-operations) [2026-07-16T21:23:51Z] <sbassett@deploy2003> sbassett: Backport for [[gerrit:1311481|Cleanup: remove reauth indicator from log message (T432042)]] synced to the testservers (see https://wikitech.wikimedia.org/wiki/Mwdebug). Changes can now be verified there.
Mentioned in SAL (#wikimedia-operations) [2026-07-16T21:30:28Z] <sbassett@deploy2003> Finished scap sync-world: Backport for [[gerrit:1311481|Cleanup: remove reauth indicator from log message (T432042)]] (duration: 08m 19s)
Change #1311482 merged by jenkins-bot:
[mediawiki/core@wmf/1.47.0-wmf.11] Use non-sampled authentication log channel instead of authevents
Mentioned in SAL (#wikimedia-operations) [2026-07-16T21:38:29Z] <sbassett@deploy2003> Started scap sync-world: Backport for [[gerrit:1311482|Use non-sampled authentication log channel instead of authevents (T432042)]]
Mentioned in SAL (#wikimedia-operations) [2026-07-16T21:40:13Z] <sbassett@deploy2003> sbassett: Backport for [[gerrit:1311482|Use non-sampled authentication log channel instead of authevents (T432042)]] synced to the testservers (see https://wikitech.wikimedia.org/wiki/Mwdebug). Changes can now be verified there.
Mentioned in SAL (#wikimedia-operations) [2026-07-16T21:45:00Z] <sbassett@deploy2003> Finished scap sync-world: Backport for [[gerrit:1311482|Use non-sampled authentication log channel instead of authevents (T432042)]] (duration: 06m 31s)