Re: [Wikitech-l] Session cookie name

2013-08-20 Thread Yuvi Panda
https://www.mediawiki.org/wiki/API:Login#Construct_cookies probably needs to be updated - perhaps by removing the 'Construct cookies manually' part entirely (since that sounds like asking for trouble!) -- Yuvi Panda T http://yuvi.in/blog ___

Re: [Wikitech-l] Session cookie name

2013-08-20 Thread Yuvi Panda
On Tue, Aug 20, 2013 at 6:57 PM, Yuvi Panda yuvipa...@gmail.com wrote: https://www.mediawiki.org/wiki/API:Login#Construct_cookies probably needs to be updated - perhaps by removing the 'Construct cookies manually' part entirely (since that sounds like asking for trouble!) Max already

[Wikitech-l] Session cookie name

2013-08-19 Thread Tim Starling
Please note that the session cookie name on WMF wikis has changed from wiki_session to wikiSession. That is, for example, enwiki_session to enwikiSession. This was done in response to a security issue -- we had to find some way to rapidly cause all session IDs to be regenerated. Changing the

Re: [Wikitech-l] Session cookie name

2013-08-19 Thread Arthur Richards
Head's up that this has broken login for mobile - the varnish conf for mobilefrontend needs to be updated: https://gerrit.wikimedia.org/r/#/c/79837/ On Mon, Aug 19, 2013 at 9:14 PM, Tim Starling tstarl...@wikimedia.orgwrote: Please note that the session cookie name on WMF wikis has changed