Page MenuHomePhabricator

Impossible to use https://www.mediawiki.org/wiki/Special:OAuth/initiate?format=&oauth_callback= style URL
Open, MediumPublicFeature

Description

It keeps telling me "Invalid signature".

I have to use https://www.mediawiki.org/w/index.php?title=Special:OAuth/initiate&format=&oauth_callback=


Version: unspecified
Severity: enhancement

Details

Reference
bz57500

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 22 2014, 2:41 AM
bzimport set Reference to bz57500.
bzimport added a subscriber: Unknown Object (MLST).

This is due to MediaWiki core adding title to the list of incoming parameters, even when it wasn't requested. I'll add that to some developer notes I'm putting together.

I think the most realistic path foward is to have the extension generate the pretty URL (or maybe have something like MWOAuthRequest::fromRequestVariants() which returns an array or MWOAuthRequest objects), and if OAuth signature verification fails, try it with other URLs. Same in the opposite direction with T59576.

Aklapper changed the subtype of this task from "Task" to "Feature Request".Feb 4 2022, 12:23 PM

Note that I'm baking this bug into the ATS config in gerrit 817086. If this bug is ever fixed, the rule will have to be updated.

Note that I'm baking this bug into the ATS config in gerrit 817086. If this bug is ever fixed, the rule will have to be updated.

There are ~1000 failed requests to nice URLs in the last 90 days, from several different applications. We only log errors, so that doesn't necessarily mean the nice URL works (in some cases?) but it's at least suggestive. We should probably support it just in case.