Page MenuHomePhabricator

Impossible to use https://www.mediawiki.org/wiki/Special:OAuth/initiate?format=&oauth_callback= style URL
Open, NormalPublic

Description

It keeps telling me "Invalid signature".

I have to use https://www.mediawiki.org/w/index.php?title=Special:OAuth/initiate&format=&oauth_callback=


Version: unspecified
Severity: enhancement

Details

Reference
bz57500

Event Timeline

bzimport raised the priority of this task from to Normal.Nov 22 2014, 2:41 AM
bzimport set Reference to bz57500.
bzimport added a subscriber: Unknown Object (MLST).
liangent created this task.Nov 24 2013, 8:06 AM

This is due to MediaWiki core adding title to the list of incoming parameters, even when it wasn't requested. I'll add that to some developer notes I'm putting together.

Tgr added a subscriber: Tgr.Oct 31 2017, 9:49 PM

I think the most realistic path foward is to have the extension generate the pretty URL (or maybe have something like MWOAuthRequest::fromRequestVariants() which returns an array or MWOAuthRequest objects), and if OAuth signature verification fails, try it with other URLs. Same in the opposite direction with T59576.