https://bugzilla.wikimedia.org/show_bug.cgi?id=54195

--- Comment #22 from Brad Jorsch <[email protected]> ---
Unless the client lacks/blocks localStorage and cookies, it should be one
pageview per client per site visited per day that is hitting
/start?type=script, /checkLoggedIn?wikiid=*&proto=http(s)&type=script, and
/createSession?gu_id=0&type=script&proto=http(s). There will also be extra hits
coming from the login form, but those hits will include "&return=1" and likely
returnto and returntoquery parameters.

As long as each of those URLs is varied on the CentralAuth cookies, they all
should be fully cacheable.

We can't just not have anons hit these, though, because anons hitting them is
an integral part of the SUL2 login scheme: browsers will no longer allow us to
set cookies for (e.g.) wikivoyage.org on login if the user has never visited
wikivoyage.org before, so when a user does visit wikivoyage.org anonymously we
need to somehow check whether they're logged in centrally.

/start?type=1x1 does appear on anon pageviews, but there it's wrapped in
<noscript> tags so it should only be hit when the browser lacks JavaScript.
/start?type=1x1&from=* appears on the pageview after login.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to