User Details
User Details
- User Since
- Oct 8 2024, 12:28 PM (79 w, 3 d)
- Availability
- Available
- LDAP User
- Jonathan Tweed
- MediaWiki User
- JTweed-WMF [ Global Accounts ]
Yesterday
Yesterday
Tue, Apr 14
Tue, Apr 14
JTweed-WMF updated the task description for T423320: Ad hoc analysis of API request data to inform rate limits and potential impact.
JTweed-WMF edited projects for T208668: Do not ask for password on reauthentication when 2FA is enabled, added: MediaWiki-Platform-Team (Radar); removed MediaWiki-Platform-Team.
JTweed-WMF moved T187283: Improve ping limiter error message from Inbox, needs triage to Not planned / Patches welcome on the MediaWiki-Platform-Team board.
JTweed-WMF moved T257703: Clean up Cache-Control handling in MediaWiki from Inbox, needs triage to Needs refinement on the MediaWiki-Platform-Team board.
JTweed-WMF edited projects for T422586: MediaViewer downloads high-res image twice if original is a medium-size JPEG, added: MediaWiki-Platform-Team (Q3 Kanban Board); removed MediaWiki-Platform-Team.
JTweed-WMF edited projects for T422656: CentralAuth: Add globaluser.gu_email_normalized column, added: MediaWiki-Platform-Team (Radar); removed MediaWiki-Platform-Team.
JTweed-WMF edited projects for T154946: Trying to log in using a BotPassword from the wrong IP gives incorrect password error, added: MediaWiki-Platform-Team (Radar); removed MediaWiki-Platform-Team.
JTweed-WMF edited projects for T422984: Improve the display of the user links on Special:Contributions, added: MediaWiki-Platform-Team (Radar); removed MediaWiki-Platform-Team.
Mon, Mar 23
Mon, Mar 23
JTweed-WMF edited projects for T419621: Move site JS reauth code out into WikimediaCustomizations, added: MediaWiki-Platform-Team (Radar); removed MediaWiki-Platform-Team.
Mon, Mar 23, 3:59 PM · MW-1.46-notes (1.46.0-wmf.24; 2026-04-14), Product Safety and Integrity (Sprint Forsythia (Mar 23 - Apr 10))), WikimediaCustomizations, MediaWiki-Platform-Team (Radar), Sustainability (Incident Followup), MediaWiki-Core-AuthManager, SecTeam-Processed, 2026-user-javascript-incident, Security, Security-Team
JTweed-WMF moved T208823: Support asynchronous reauthentication from Inbox, needs triage to Needs refinement on the MediaWiki-Platform-Team board.
JTweed-WMF edited projects for T419152: Editing user JS/CSS pages of another user should require elevated security, added: MediaWiki-Platform-Team (Radar); removed MediaWiki-Platform-Team.
JTweed-WMF edited projects for T419336: CentralAuth lock bypass on usernames that have md5 collisions, added: MediaWiki-Platform-Team (Q3 Kanban Board); removed MediaWiki-Platform-Team.
JTweed-WMF moved T299869: Per-permission wiki set restrictions from Inbox, needs triage to Not planned / Patches welcome on the MediaWiki-Platform-Team board.
JTweed-WMF edited projects for T154552: ApiLogin should not open master connection to centralauth DB, added: MediaWiki-Platform-Team (Q3 Kanban Board); removed MediaWiki-Platform-Team.
JTweed-WMF edited projects for T420672: Implement separate reauthentication state for different actions, added: MediaWiki-Platform-Team (Radar); removed MediaWiki-Platform-Team.
JTweed-WMF edited projects for T420689: OAuth can register tokens with empty scopes (which subsequently error out), added: MediaWiki-Platform-Team (Q3 Kanban Board); removed MediaWiki-Platform-Team.
JTweed-WMF moved T387860: Clean up SUL3 global opt-in flag from In Progress to Next on the MediaWiki-Platform-Team (Q3 Kanban Board) board.
JTweed-WMF moved T301050: Bot password login does not autocreate accounts from In Progress to Blocked on the MediaWiki-Platform-Team (Q3 Kanban Board) board.
Mar 13 2026
Mar 13 2026
JTweed-WMF added a comment to T420011: Intermittent rate limiting at hackathon-northwestern-europe-2026.
Just to confirm that we are looking into this. Apologies for the inconvenience.
Feb 9 2026
Feb 9 2026
JTweed-WMF edited projects for T395459: Use OAuth rather than password-based login for Wikimedia mobile apps, added: MediaWiki-Platform-Team (Q3 Kanban Board); removed MediaWiki-Platform-Team.
JTweed-WMF edited projects for T412185: Indicate it clearly to OAuth developers when their apps require approval, added: MediaWiki-Platform-Team (Q3 Kanban Board); removed MediaWiki-Platform-Team.
JTweed-WMF edited projects for T412186: Hide uncommon scopes on OAuth app registration form, added: MediaWiki-Platform-Team (Q3 Kanban Board); removed MediaWiki-Platform-Team.
JTweed-WMF edited projects for T412197: Test screen reader accessibility of OAuth authorization dialog, added: MediaWiki-Platform-Team (Q3 Kanban Board); removed MediaWiki-Platform-Team.
JTweed-WMF edited projects for T395365: Modernise and unify UI for Special:UserRights and Special:GlobalUserRights, added: MediaWiki-Platform-Team (Radar); removed MediaWiki-Platform-Team.
JTweed-WMF edited projects for T383586: Update Preference Persistence Cookie Expiration, added: MediaWiki-Platform-Team (Radar); removed MediaWiki-Platform-Team.
JTweed-WMF edited projects for T412350: Improve AbuseFilter handling of CreateLocalAccount autocreations, added: MediaWiki-Platform-Team (Q3 Kanban Board); removed MediaWiki-Platform-Team.
Feb 5 2026
Feb 5 2026
Feb 2 2026
Feb 2 2026
JTweed-WMF added a comment to T415588: Add rate limit class for accounts that are in a local bot group on any wiki.
It's worth confirming with @daniel, but I'm pretty sure that the answer to (5) is that nothing is relying on this and we should change it to approved-bot asap so that we can update the Envoy config to look for it.
Jan 28 2026
Jan 28 2026
JTweed-WMF added a comment to T414778: Silent bulk update for MediaWiki Platform.
Predates me, but I think it would sense to move them back to the inbox and go through triage again. They're things we intended to do, so I think it makes sense to revisit them and discuss where they now fit in.
Jan 27 2026
Jan 27 2026
JTweed-WMF added a comment to T415588: Add rate limit class for accounts that are in a local bot group on any wiki.
Agreed with @daniel, I think that abstraction is useful here as keeps complexity with the authorisation logic inside MediaWiki. I don't see us needing a distinction between true "global" bots vs "local" bots in terms of limiting, as the signal we're looking for is that a given user/application has undergone some form of human review and deemed useful by community process.
Jan 26 2026
Jan 26 2026
JTweed-WMF edited projects for T415178: Need to log in twice in a row for reauthentication, added: MediaWiki-Platform-Team (Q3 Kanban Board); removed MediaWiki-Platform-Team.
JTweed-WMF edited projects for T341759: Create functional tests for core OAuth functionality, added: MediaWiki-Platform-Team (Q3 Kanban Board); removed MediaWiki-Platform-Team.
JTweed-WMF edited projects for T415281: [EPIC] OAuth extension critical workflows (for automated tests enhancement), added: MediaWiki-Platform-Team (Q3 Kanban Board); removed MediaWiki-Platform-Team.
Jan 20 2026
Jan 20 2026
Jan 13 2026
Jan 13 2026
JTweed-WMF moved T398919: Epic: API rate limiting dry run (WE5.1.3b) from Essential Work to OKR Work on the MediaWiki-Platform-Team (Q3 Kanban Board) board.
JTweed-WMF moved T282107: Make OAuthToken JsonDeserializable from Essential Work to OKR Work on the MediaWiki-Platform-Team (Q3 Kanban Board) board.
Jan 12 2026
Jan 12 2026
JTweed-WMF added a project to T414337: Identify requests for media files from logged-in users: OKR-Work.
Jan 9 2026
Jan 9 2026
JTweed-WMF added a comment to T409018: JWT cookie causing anonymous session writes.
Do we still have concerns here or have we determined that this is expected?
JTweed-WMF added a comment to T399631: Deploy JWT cookies to production.
Were these followups done? Maybe they should be a separate task so we can close this?
Dec 17 2025
Dec 17 2025
JTweed-WMF renamed T381096: Hide the search form in the skin during login, signup, and other auth-domain workflows from Hide the search form in the skin during login, signup, and other auth-domain workflows to Hide the search form in the skin during login, signup, and other auth-domain workflows.