WIkiGrok doesn't save when not logged in
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	• bmansurov
	Apr 13 2015, 9:37 PM

Description

When $wgWikiGrokUIEnableForAnons is set to True, I see a WikiGrok dialog, but when submitting my response, I get the following error:

Anonymous users cannot obtain a centralauthtoken

Details

	Subject	Repo	Branch	Lines +/-
	ForeignApi: Allow posting for anonymous users	mediawiki/extensions/MobileFrontend	master	+76 -10

Customize query in gerrit

Related Objects

Mentioned In: rEMFR0941fc8553ff: ForeignApi: Allow posting for anonymous users
rMEXTf41dd2dbeb53: Updated mediawiki/extensions Project: mediawiki/extensions/MobileFrontend…
T98142: Turn off (disable) WikiGrok in WMF Production
T97103: Hide wikigrok from anon users on en wiki

Event Timeline

• bmansurov created this task.Apr 13 2015, 9:37 PM

• bmansurov raised the priority of this task from to Needs Triage.

• bmansurov updated the task description. (Show Details)

• bmansurov added projects: WikiGrok, Web-Team-Backlog.

• bmansurov subscribed.

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptApr 13 2015, 9:37 PM

Jdlrobson moved this task from Incoming to Current Sprint (and resolved 2018-19 Q1) pre-milestone on the Web-Team-Backlog board.Apr 16 2015, 8:01 PM

• bmansurov triaged this task as Unbreak Now! priority.Apr 24 2015, 12:27 AM

@Jdlrobson says that ForeignApi doesn't work for anonymous users.

• JKatzWMF mentioned this in T97103: Hide wikigrok from anon users on en wiki.Apr 24 2015, 12:45 AM

This is because you can't do CORs requests (cross domain requests) for anonymous users. CentralAuth only allows you to do that when logged in.
In our terms this means ForeignApi postWithToken will only work when you are logged in

You'll need to move this API to English Wikipedia...

• bmansurov added subscribers: MaxSem, phuedx, kaldari.Apr 24 2015, 12:50 AM

Temporary fix here: https://en.wikipedia.org/w/index.php?title=MediaWiki%3AMobile.css&diff=658921233&oldid=657494561

greg mentioned this in T98142: Turn off (disable) WikiGrok in WMF Production.May 15 2015, 12:56 AM

In T95960#1233051, @Jdlrobson wrote:

This is because you can't do CORs requests (cross domain requests) for anonymous users. CentralAuth only allows you to do that when logged in.

Yes, CentralAuth is for logged in users only. Just use a normal logged out token (+\) and it should work.

• bmansurov claimed this task.May 18 2015, 8:49 PM

Change 211884 had a related patch set uploaded (by Bmansurov):
ForeignApi: Allow posting for anonymous users

https://gerrit.wikimedia.org/r/211884

gerritbot added a project: Patch-For-Review.May 18 2015, 8:52 PM

• bmansurov added a project: Mobile-Web-Sprint-47-Undercover-Brother.May 18 2015, 8:54 PM

• bmansurov set Security to None.

• bmansurov moved this task from Needs Analysis to Code Review on the Mobile-Web-Sprint-47-Undercover-Brother board.

phuedx moved this task from Code Review to -1 (Needs More Work) on the Mobile-Web-Sprint-47-Undercover-Brother board.May 19 2015, 10:33 AM

• bmansurov moved this task from -1 (Needs More Work) to Doing on the Mobile-Web-Sprint-47-Undercover-Brother board.May 19 2015, 5:13 PM

• bmansurov moved this task from Doing to Code Review on the Mobile-Web-Sprint-47-Undercover-Brother board.May 19 2015, 10:01 PM