Page MenuHomePhabricator
Create Task
Maniphest T91699

Create AuthManager framework and core classes
Closed, ResolvedPublic
Actions

Description

Provide a patch for the basic building blocks of the AuthManager RfC (the provider interfaces and the implementations needed for existing core MediaWiki functionality).

Details

SubjectRepoBranchLines +/-
Hard-deprecate password handling in Usermediawiki/coremaster+5 -0
Add AuthManagermediawiki/coreREL1_27+17 K -238
Add AuthManagermediawiki/coremaster+17 K -238
Customize query in gerrit

Related Objects
Search...

View Standalone Graph
This task is connected to more than 200 other tasks. Only direct parents and subtasks are shown here. Use View Standalone Graph to show more of the graph.
StatusSubtypeAssignedTask
· · ·
OpenNoneT89459 Modernize MediaWiki authentication system (AuthManager)
OpenNoneT110278 Improve interaction between AuthManager and the UI layer
OpenNoneT110291 Update all extensions to use AuthManager
ResolvedAnomieT110282 Update extensions which are deployed on the Wikimedia cluster to use AuthManager
ResolvedAnomieT110276 Rewrite the login API to use AuthManager
ResolvedTgrT110277 Rewrite Special:UserLogin (and signup) and Special:UserLogout to use AuthManager
ResolvedTgrT110280 Rewrite password management to use AuthManager
ResolvedTgrT110281 Rewrite email management to use AuthManager
OpenNoneT110627 Implement AuthManager::canAutoCreate()
ResolvedTgrT47716 Password hashes should not be stored in live User objects
ResolvedTgrT42024 $wgAuth->getCanonicalName() is evil and should die in a fire
ResolvedTgrT25802 Let AuthPlugin decide whether a specific user (name) can be auto created
ResolvedTgrT18524 Allow authentication plugins to report error messages
ResolvedTgrT13734 AddNewAccount hook isn't run when auto-creating external accounts
Resolved• csteippT5348 Passwords should be checked for strength before being set
ResolvedTgrT4027 Create AuthPlugin methods to capture every aspect of MW user object
ResolvedAnomieT111296 Get rid of FauxRequest support in AuthManager
ResolvedAnomieT111305 Handle multiple session "traits" in AuthManager
ResolvedTgrT111299 Create convenience base classes for AuthManager providers
ResolvedAnomieT111302 Handle central user IDs in AuthManager
OpenNoneT111480 Allow AuthManager providers to skip email address verification when creating a local account for an existing remote account
ResolvedAnomieT111736 Security levels for AuthManager
ResolvedAnomieT91699 Create AuthManager framework and core classes
ResolvedJoeT97675 Custom session handler corrupted by session_destroy, "Failed to initialize storage module"
Resolvedbd808T95864 Mocking abstract objects fails on HHVM
ResolvedAnomieT110274 Fix PHPUnit version incompatibility between AuthManager and Jenkins
ResolvedTgrT110628 Improve AuthManager documentation
· · ·

Event Timeline

bd808 created this task.Mar 5 2015, 9:29 PM
bd808 assigned this task to Anomie.
bd808 raised the priority of this task from to Medium.
bd808 updated the task description. (Show Details)
bd808 added projects: MediaWiki-Core-AuthManager, MediaWiki-Core-Team.
bd808 added subscribers: Anomie, • csteipp, Legoktm and 2 others.
Anomie moved this task from Backlog to In Dev/Progress on the MediaWiki-Core-Team board.Mar 7 2015, 3:07 PM
gerritbot subscribed.Mar 9 2015, 4:33 PM

Change 195297 had a related patch set uploaded (by Anomie):
WIP: AuthManager skeleton

https://gerrit.wikimedia.org/r/195297

gerritbot added a project: Patch-For-Review.Mar 9 2015, 4:33 PM
bd808 edited projects, added Reading-Infrastructure-Team-Old (Don't use); removed MediaWiki-Core-Team.Mar 25 2015, 12:47 AM
bd808 set Security to None.
bd808 moved this task from Backlog to In Dev/Progress on the Reading-Infrastructure-Team-Old (Don't use) board.
Anomie mentioned this in T97675: Custom session handler corrupted by session_destroy, "Failed to initialize storage module".Apr 30 2015, 6:07 PM
Anomie added a subtask: T97675: Custom session handler corrupted by session_destroy, "Failed to initialize storage module".
Anomie added a subtask: T95864: Mocking abstract objects fails on HHVM.
Joe closed subtask T97675: Custom session handler corrupted by session_destroy, "Failed to initialize storage module" as Resolved.Jul 27 2015, 7:38 AM
Tgr added a subtask: T110274: Fix PHPUnit version incompatibility between AuthManager and Jenkins.Aug 26 2015, 4:57 AM
Tgr subscribed.Aug 26 2015, 5:48 AM

Not really a strawman at this point.

Tgr renamed this task from Start gerrit patch to outline public interfaces of authentication system to Create AuthManager framework and core classes.Aug 26 2015, 5:50 AM
Tgr updated the task description. (Show Details)
Tgr added a parent task: T110276: Rewrite the login API to use AuthManager.Aug 26 2015, 5:52 AM
Tgr added a parent task: T110278: Improve interaction between AuthManager and the UI layer.Aug 26 2015, 6:00 AM
Tgr added a parent task: T110277: Rewrite Special:UserLogin (and signup) and Special:UserLogout to use AuthManager.
Tgr added a parent task: T110279: Rewrite core classes which need to be clients of AuthManager.Aug 26 2015, 6:03 AM
Tgr added a parent task: T110280: Rewrite password management to use AuthManager.Aug 26 2015, 6:10 AM
Tgr added a parent task: T110281: Rewrite email management to use AuthManager.Aug 26 2015, 6:19 AM
Tgr added a parent task: T110282: Update extensions which are deployed on the Wikimedia cluster to use AuthManager.Aug 26 2015, 6:22 AM
Tgr mentioned this in T110282: Update extensions which are deployed on the Wikimedia cluster to use AuthManager.Aug 26 2015, 6:27 AM
Tgr mentioned this in T110291: Update all extensions to use AuthManager.Aug 26 2015, 6:42 AM
Tgr added a parent task: T110291: Update all extensions to use AuthManager.
Billinghurst subscribed.Aug 26 2015, 7:20 AM
Florian subscribed.Aug 26 2015, 8:06 AM
Krenair subscribed.Aug 26 2015, 1:09 PM
bd808 moved this task from Backlog to AuthManager Backlog on the MediaWiki-Core-AuthManager board.Aug 26 2015, 5:36 PM
Tgr added a parent task: T110627: Implement AuthManager::canAutoCreate().Aug 28 2015, 1:00 AM
Tgr added a subtask: T110628: Improve AuthManager documentation.Aug 28 2015, 1:16 AM
Tgr removed a parent task: T110279: Rewrite core classes which need to be clients of AuthManager.Aug 28 2015, 1:27 AM
bd808 moved this task from AuthManager Backlog to AuthManager Needs Review on the MediaWiki-Core-AuthManager board.Aug 28 2015, 5:23 PM
Tgr added a comment.Aug 28 2015, 10:35 PM

Might want to include adding email support to LocalPasswordPrimaryAuthenticationProvider (T30085).

Anomie added a comment.Aug 31 2015, 2:52 PM
In T91699#1585816, @Tgr wrote:

Might want to include adding email support to LocalPasswordPrimaryAuthenticationProvider (T30085).

I think we should pass on that for now, the change is already big enough without succumbing to featuritis.

Tgr added a parent task: T47716: Password hashes should not be stored in live User objects.Sep 1 2015, 4:15 AM
Tgr mentioned this in T47716: Password hashes should not be stored in live User objects.
Tgr added a parent task: T42024: $wgAuth->getCanonicalName() is evil and should die in a fire.Sep 2 2015, 8:40 PM
Tgr mentioned this in T42024: $wgAuth->getCanonicalName() is evil and should die in a fire.
Tgr added a parent task: T25802: Let AuthPlugin decide whether a specific user (name) can be auto created.Sep 2 2015, 8:46 PM
Tgr mentioned this in T25802: Let AuthPlugin decide whether a specific user (name) can be auto created.Sep 2 2015, 8:48 PM
Tgr mentioned this in T18524: Allow authentication plugins to report error messages.Sep 2 2015, 8:50 PM
Tgr added a parent task: T18524: Allow authentication plugins to report error messages.
Tgr mentioned this in T13734: AddNewAccount hook isn't run when auto-creating external accounts.Sep 2 2015, 9:05 PM
Tgr added a parent task: T13734: AddNewAccount hook isn't run when auto-creating external accounts.
Tgr added a parent task: T5348: Passwords should be checked for strength before being set.Sep 2 2015, 9:21 PM
Tgr mentioned this in T5348: Passwords should be checked for strength before being set.Sep 2 2015, 9:25 PM
Tgr added a parent task: T4027: Create AuthPlugin methods to capture every aspect of MW user object.
Tgr mentioned this in T4027: Create AuthPlugin methods to capture every aspect of MW user object.Sep 2 2015, 9:27 PM
Tgr mentioned this in T111296: Get rid of FauxRequest support in AuthManager.Sep 3 2015, 1:08 AM
Tgr mentioned this in T111736: Security levels for AuthManager.Sep 7 2015, 10:46 PM
Tgr added a parent task: T111296: Get rid of FauxRequest support in AuthManager.
Tgr added a parent task: T111305: Handle multiple session "traits" in AuthManager.
Tgr added a parent task: T111302: Handle central user IDs in AuthManager.
Tgr added a parent task: T111299: Create convenience base classes for AuthManager providers.
Tgr added a parent task: T111480: Allow AuthManager providers to skip email address verification when creating a local account for an existing remote account.
Tgr added a parent task: T111736: Security levels for AuthManager.
bd808 closed subtask T95864: Mocking abstract objects fails on HHVM as Resolved.Oct 14 2015, 5:32 PM
mgrabovsky subscribed.Oct 15 2015, 7:41 PM
Liuxinyu970226 subscribed.Nov 16 2015, 8:53 AM
Anomie closed subtask T110274: Fix PHPUnit version incompatibility between AuthManager and Jenkins as Resolved.Dec 10 2015, 4:16 PM
gerritbot added a comment.Jan 15 2016, 12:06 AM

Change 264215 had a related patch set uploaded (by Gergő Tisza):
Hard-deprecate password handling in User

https://gerrit.wikimedia.org/r/264215

Billinghurst unsubscribed.Jan 15 2016, 10:05 AM
daniel mentioned this in T30085: RFC: Allow user login with email address in addition to username.Apr 13 2016, 8:20 PM
gerritbot added a comment.May 16 2016, 4:33 PM

Change 195297 merged by jenkins-bot:
Add AuthManager

https://gerrit.wikimedia.org/r/195297

gerritbot added a comment.May 16 2016, 10:22 PM

Change 289094 had a related patch set uploaded (by Gergő Tisza):
Add AuthManager

https://gerrit.wikimedia.org/r/289094

gerritbot added a comment.May 16 2016, 11:13 PM

Change 289094 merged by jenkins-bot:
Add AuthManager

https://gerrit.wikimedia.org/r/289094

Anomie closed this task as Resolved.May 25 2016, 6:51 PM
mgrabovsky unsubscribed.May 25 2016, 6:59 PM
Liuxinyu970226 unsubscribed.May 28 2016, 10:37 AM
Tgr closed subtask T110628: Improve AuthManager documentation as Resolved.Aug 30 2016, 7:17 PM
gerritbot added a comment.Oct 1 2018, 11:33 PM

Change 264215 merged by jenkins-bot:
[mediawiki/core@master] Hard-deprecate password handling in User

https://gerrit.wikimedia.org/r/264215

ReleaseTaggerBot added a project: MW-1.32-notes (WMF-deploy-2018-10-02 (1.32.0-wmf.24)).Oct 2 2018, 12:00 AM
Aklapper removed a subscriber: Anomie.Oct 16 2020, 5:42 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL