Currently, https://www.mediawiki.org/wiki/Special:OAuth/grants#useoauth , doesn't provide any special grant for accessing user's private info such as real name and email address, kindly fix it so that grant can be used. So uiprops = 'realname|email' are not working.
This bug is a major blocker in my GSoC 2014 project of Wikidata Annotation Tool
Version: unspecified
Severity: normal
| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| Add grant for access to private information | mediawiki/core | master | +9 -1 |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | None | T90925 General authentication improvements for MediaWiki | |||
| Open | None | T86869 Support a nice sso experience with MediaWiki's OAuth | |||
| Resolved | • dpatrick | T68493 Special:OAuth doesn't provide a grant to access to private info of users | |||
| Open | None | T64686 Replace link to WMF privacy policy with link to app's privacy policy on OAuth authorize dialog | |||
| Open | None | T98843 Store a link to app's privacy policy in OAuth consumer registration form | |||
| Open | None | T64687 Add warning for user on /authorize about privacy policy |
OAuth doesn't have a grant for 'viewmyprivateinfo'.
It seems like we should make this a separate grant, since most consumers really shouldn't have access to PII.
Bikeshed on grant name, or bundling this with an existing grant?
Change 139042 had a related patch set uploaded by CSteipp:
Add grant for access to private information
We now have an authonlyprivate grant / special mode. Is this resolved? (I guess no since that still does not allow consumers to get private data and also do actions in the name of the user.)
IMO you guess correctly.
https://gerrit.wikimedia.org/r/139042 is what we need to do, although Chris mentioned there that it should be blocked on T64686 and T64687.
IMO you guess correctly.
https://gerrit.wikimedia.org/r/139042 is what we need to do, although Chris mentioned there that it should be blocked on T64686 and T64687.
Yes, I think addressing those first is the right thing to do.
Change 139042 restored by Dpatrick:
Add grant for access to private information
Reason:
Restoring
@Tgr I'm not sure how to approach this, given the changes made in 49156df6f8067faa979fe4c102385231dea3fade. Can you take a look?
The equivalent would be:
Change 303720 had a related patch set uploaded (by Dpatrick):
Add grant for access to private information