[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

Multichill added a comment. Phabricator task to remove authentication: T297995 TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: EBernhardson,

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 724821 **abandoned** by Ryan Kemper: [operations/puppet@production] wcqs: enable oauth Reason: https://gerrit.wikimedia.org/r/724821 TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 743499 **merged** by Ryan Kemper: [operations/puppet@production] rdf-query-service: Allow logback config to load outside the blazegraph war https://gerrit.wikimedia.org/r/743499 TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 743499 had a related patch set uploaded (by Ryan Kemper; author: Ebernhardson): [operations/puppet@production] rdf-query-service: Allow logback config to load outside the blazegraph war https://gerrit.wikimedia.org/r/743499 TASK DETAIL

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

Gehel closed this task as "Resolved". TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: EBernhardson, Gehel Cc: RKemper, hnowlan, sdkim, BPirkle, Zache, Aklapper, Gehel, CBogen, ttaylor, Zbyszko,

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

EBernhardson moved this task from To Be Deployed to Needs Reporting on the Discovery-Search (Current work) board. EBernhardson added a comment. Authentication is deployed and appears to be working as desired. TASK DETAIL https://phabricator.wikimedia.org/T280006 WORKBOARD

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

EBernhardson closed subtask T290299: Replace token store in MW OAuth WCQS proxy with JWT as Resolved. TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: EBernhardson Cc: RKemper, hnowlan, sdkim,

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 734702 **merged** by Ryan Kemper: [operations/puppet@production] query_service: jvm defines are provided with -D https://gerrit.wikimedia.org/r/734702 TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 734702 had a related patch set uploaded (by Ebernhardson; author: Ebernhardson): [operations/puppet@production] query_service: jvm defines are provided with -D https://gerrit.wikimedia.org/r/734702 TASK DETAIL

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 732801 **merged** by Ryan Kemper: [operations/puppet@production] query_service: Add new oauth related configuration https://gerrit.wikimedia.org/r/732801 TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 734418 **merged** by Ryan Kemper: [labs/private@master] wcqs: add dummy oauth_access_token_secret https://gerrit.wikimedia.org/r/734418 TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 734418 had a related patch set uploaded (by Ryan Kemper; author: Ryan Kemper): [labs/private@master] wcqs: add dummy oauth_access_token_secret https://gerrit.wikimedia.org/r/734418 TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 732800 **merged** by Ryan Kemper: [wikidata/query/deploy@master] runBlazegraph.sh: Add env vars for new oauth properties https://gerrit.wikimedia.org/r/732800 TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 732801 had a related patch set uploaded (by Ebernhardson; author: Ebernhardson): [operations/puppet@production] query_service: Add new oauth related configuration https://gerrit.wikimedia.org/r/732801 TASK DETAIL

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 732800 had a related patch set uploaded (by Ebernhardson; author: Ebernhardson): [wikidata/query/deploy@master] runBlazegraph.sh: Add env vars for new oauth properties https://gerrit.wikimedia.org/r/732800 TASK DETAIL

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 732797 **merged** by Ryan Kemper: [wikidata/query/deploy@master] Reduce config in wcqs environment to only that necessary https://gerrit.wikimedia.org/r/732797 TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 732797 had a related patch set uploaded (by Ebernhardson; author: Ebernhardson): [wikidata/query/deploy@master] Reduce config in wcqs environment to only that necessary https://gerrit.wikimedia.org/r/732797 TASK DETAIL

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 732772 **merged** by Ryan Kemper: [wikidata/query/deploy@master] Use a separate scap environment for wcqs deploy https://gerrit.wikimedia.org/r/732772 TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 732772 had a related patch set uploaded (by Ebernhardson; author: Ebernhardson): [wikidata/query/deploy@master] Use a separate scap environment for wcqs deploy https://gerrit.wikimedia.org/r/732772 TASK DETAIL

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 732742 **merged** by Ryan Kemper: [wikidata/query/deploy@master] deploy version 0.3.90 https://gerrit.wikimedia.org/r/732742 TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 732735 **merged** by Ryan Kemper: [wikidata/query/deploy@master] Add wcqs group for scap deployment https://gerrit.wikimedia.org/r/732735 TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 732742 had a related patch set uploaded (by Ebernhardson; author: Ebernhardson): [wikidata/query/deploy@master] deploy version 0.3.90 https://gerrit.wikimedia.org/r/732742 TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 732735 had a related patch set uploaded (by Ebernhardson; author: Ebernhardson): [wikidata/query/deploy@master] Add wcqs group for scap deployment https://gerrit.wikimedia.org/r/732735 TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

dcausse assigned this task to EBernhardson. dcausse moved this task from Ready for Development to In Progress on the Discovery-Search (Current work) board. TASK DETAIL https://phabricator.wikimedia.org/T280006 WORKBOARD https://phabricator.wikimedia.org/project/board/1227/ EMAIL

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 725120 **merged** by Ryan Kemper: [operations/puppet@production] query_service: Exempt health check url from oauth https://gerrit.wikimedia.org/r/725120 TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 725120 had a related patch set uploaded (by Ryan Kemper; author: Ebernhardson): [operations/puppet@production] query_service: Exempt health check url from oauth https://gerrit.wikimedia.org/r/725120 TASK DETAIL

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 725110 **merged** by Ryan Kemper: [operations/puppet@production] wcqs: disable oauth while fixing readiness probe https://gerrit.wikimedia.org/r/725110 TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 725110 had a related patch set uploaded (by Ryan Kemper; author: Ryan Kemper): [operations/puppet@production] wcqs: disable oauth while fixing readiness probe https://gerrit.wikimedia.org/r/725110 TASK DETAIL

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 725104 **merged** by Ryan Kemper: [operations/puppet@production] query_service: default oauth_settings in gui to {} https://gerrit.wikimedia.org/r/725104 TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 725104 had a related patch set uploaded (by Ryan Kemper; author: Ryan Kemper): [operations/puppet@production] query_service: default oauth_settings to {} https://gerrit.wikimedia.org/r/725104 TASK DETAIL https://phabricator.wikimedia.org/T280006

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 724830 **merged** by Ryan Kemper: [operations/puppet@production] query_service: Parameterize oauth redirect url https://gerrit.wikimedia.org/r/724830 TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 724829 **merged** by Ryan Kemper: [operations/puppet@production] query_service: Split oauth secret from settings https://gerrit.wikimedia.org/r/724829 TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 724832 **abandoned** by Ryan Kemper: [labs/private@master] query_service: Remove non-secret values from secrets repo Reason: obsoleted by https://gerrit.wikimedia.org/r/c/labs/private/+/725049/1/hieradata/common.yaml

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 725084 **merged** by Ryan Kemper: [labs/private@master] query_service: keep oauth secret in both paths https://gerrit.wikimedia.org/r/725084 TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 725084 had a related patch set uploaded (by Ryan Kemper; author: Ryan Kemper): [labs/private@master] query_service: keep oauth secret in both paths https://gerrit.wikimedia.org/r/725084 TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 725049 **merged** by Ryan Kemper: [labs/private@master] Move query_service secrets to profile-specific file https://gerrit.wikimedia.org/r/725049 TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 725049 had a related patch set uploaded (by Ebernhardson; author: Ebernhardson): [labs/private@master] Move query_service secrets to profile-specific file https://gerrit.wikimedia.org/r/725049 TASK DETAIL https://phabricator.wikimedia.org/T280006

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 724832 had a related patch set uploaded (by Ryan Kemper; author: Ebernhardson): [labs/private@master] query_service: Remove non-secret values from secrets repo https://gerrit.wikimedia.org/r/724832 TASK DETAIL

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 724831 **merged** by Ryan Kemper: [labs/private@master] query_service: Split consumer secret out of oauth_settings https://gerrit.wikimedia.org/r/724831 TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 724831 had a related patch set uploaded (by Ryan Kemper; author: Ebernhardson): [labs/private@master] query_service: Split consumer secret out of oauth_settings https://gerrit.wikimedia.org/r/724831 TASK DETAIL

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 724830 had a related patch set uploaded (by Ebernhardson; author: Ebernhardson): [operations/puppet@production] query_service: Parameterize url redirected to after oauth success https://gerrit.wikimedia.org/r/724830 TASK DETAIL

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 724829 had a related patch set uploaded (by Ryan Kemper; author: Ebernhardson): [operations/puppet@production] query_service: Split oauth secret from settings https://gerrit.wikimedia.org/r/724829 TASK DETAIL

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a project: Patch-For-Review. TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: gerritbot Cc: RKemper, hnowlan, sdkim, BPirkle, Zache, Aklapper, Gehel, CBogen, ttaylor, Zbyszko,

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

gerritbot added a comment. Change 724821 had a related patch set uploaded (by Ryan Kemper; author: Ryan Kemper): [operations/puppet@production] wcqs: enable oauth https://gerrit.wikimedia.org/r/724821 TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

MPhamWMF set the point value for this task to "5". TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: MPhamWMF Cc: RKemper, hnowlan, sdkim, BPirkle, Zache, Aklapper, Gehel, CBogen, ttaylor, Zbyszko,

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

Zbyszko added a comment. We should figure out who is the holder of the auth consumer - we probably should have a service account for mediawiki TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To:

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

Zbyszko updated the task description. TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: Zbyszko Cc: RKemper, hnowlan, sdkim, BPirkle, Zache, Aklapper, Gehel, CBogen, ttaylor, Zbyszko, Invadibot,

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

RKemper added a comment. Zbyszko, Erik, and I discussed the current status of this effort. We've realized that there's some open questions around how to actually implement the oauth, particularly with stuff like the callback URL given the way our routing logic works currently.

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

Zbyszko added a comment. Plan right now assumes that WCQS API will be provided via https://api.wikimedia.org/ - technical feasibility is still to be assessed. This will allow us to provide an OAuth 2.0 flow and standardised experience similar to other future

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

Gehel added a project: Discovery-Search (Current work). TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: Gehel Cc: Zache, Aklapper, Gehel, CBogen, ttaylor, Zbyszko, Invadibot, MPhamWMF,

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

MPhamWMF triaged this task as "High" priority. TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: MPhamWMF Cc: Aklapper, Gehel, CBogen, ttaylor, Zbyszko, Invadibot, MPhamWMF, maantietaja, Akuckartz,

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

Zbyszko updated the task description. TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: Zbyszko Cc: Aklapper, Gehel, CBogen, ttaylor, Zbyszko, Invadibot, MPhamWMF, maantietaja, Akuckartz, Nandana,

[Wikidata-bugs] [Maniphest] T280006: Set up the application authentication for WCQS on commons-query.wikimedia.org

Zbyszko renamed this task from "Set up the application authentication for WCQS" to "Set up the application authentication for WCQS on commons-query.wikimedia.org". Zbyszko updated the task description. TASK DETAIL https://phabricator.wikimedia.org/T280006 EMAIL PREFERENCES