Because pretty URLs don't work. See T59500: Impossible to use https://www.mediawiki.org/wiki/Special:OAuth/initiate?format=&oauth_callback= style URL.
Version: unspecified
Severity: normal
Description
Description
Details
Details
- Reference
- bz57576
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Duplicate | None | T59576 GET call to Special:OAuth/$par without query strings (but with Authorization header) shouldn't be redirected to pretty URLs | |||
| Open | Feature | None | T59500 Impossible to use https://www.mediawiki.org/wiki/Special:OAuth/initiate?format=&oauth_callback= style URL |
Event Timeline
Comment Actions
The signature will not validate if it's been redirected because the request url has changed. It has nothing to do with pretty urls, which can work just fine as long as you sign a "title=whatever" parameter when generating the signature.