WMDE-leszek created this task. WMDE-leszek added projects: Wikidata, wmde-wikidata-tech, wdwb-tech, Wikibase Product Platform. Restricted Application added a subscriber: Aklapper.
TASK DESCRIPTION Wikibase REST API, based on Mediawiki REST API, intends to rely on Mediawiki's OAuth protocol to authenticate and authorize users making API requests, which is the recommended way of user authorization in Mediawiki REST API <https://www.mediawiki.org/wiki/API:REST_API#Authorization>. In order to authenticate/authorize with OAuth Wikibase REST API requires an OAuth consumer to be registered for its use on Mediawiki instance. (per Mediawiki OAuth developer instructions <https://www.mediawiki.org/wiki/OAuth/For_Developers>) Currently none is provided for Wikibase REST API on Beta Wikidata, we think. While currently if the API request is made in the browser/client session where user has previously authenticated as a Beta Wikidata user and has auth cookies, REST API requests will also be authenticated/authorized as long as cookies are provided. (this happens e.g. when making GET REST API requests in the browser session where user logged in on Beta Wikidata first) This is only considered a happy coincidence though. As OAuth is the recommended and the intended long-term way of user authentication/authorization it make sense that early experimental API clients have ability to use the "right" way early on. TASK DETAIL https://phabricator.wikimedia.org/T313897 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: WMDE-leszek Cc: Lydia_Pintscher, ItamarWMDE, WMDE-leszek, Aklapper, Astuthiodit_1, karapayneWMDE, Invadibot, maantietaja, Akuckartz, Nandana, Lahi, Gq86, GoranSMilovanovic, QZanden, LawExplorer, _jensen, rosalieper, Scott_WUaS, Wikidata-bugs, aude, Mbch331
_______________________________________________ Wikidata-bugs mailing list -- wikidata-bugs@lists.wikimedia.org To unsubscribe send an email to wikidata-bugs-le...@lists.wikimedia.org
