Change Details

Most of our documentation on MediaWiki is PHP and MediaWiki core/extension specific. We have few explicit recommendations for new services. We should have some guidance for teams on setting up: * appropriate segmentation * CSP and other headers * appropriate use of CORS * when to use OAuth Some of this will change based on the outcome of the SOA Auth RFC, but we should start with some basic guidance now.

Most of our documentation on MediaWiki is PHP and MediaWiki core/extension specific. We have few explicit recommendations for new services. We should have some guidance for teams on setting up: * appropriate segmentation * [[https://www.mediawiki.org/wiki/Content_Security_Policy|CSP]] and other headers * appropriate use of [[https://www.mediawiki.org/wiki/Manual:CORS|CORS]] * when to use [[https://www.mediawiki.org/wiki/Extension:OAuth|OAuth]] Some of this will change based on the outcome of the SOA Auth RFC, but we should start with some basic guidance now.

Most of our documentation on MediaWiki is PHP and MediaWiki core/extension specific. We have few explicit recommendations for new services. We should have some guidance for teams on setting up: * appropriate segmentation * CSP* [[https://www.mediawiki.org/wiki/Content_Security_Policy|CSP]] and other headers * appropriate use of [[https://www.mediawiki.org/wiki/Manual:CORS|CORS]] * when to use [[https://www.mediawiki.org/wiki/Extension:OAuth|OAuth]] Some of this will change based on the outcome of the SOA Auth RFC, but we should start with some basic guidance now.