Help:OAuth/ru

OAuth is a means of giving outside ("connected") applications the ability to perform edits and other actions on your behalf. Using this authentication protocol, you can authorize ("grant") a connected application the ability to act on your behalf without the need to divulge your password. The OAuth protocol is widely used by other websites, including major sites such as Google and Flickr.

Часто задаваемые вопросы
Если на ваш вопрос нет ответа здесь, задайте вопрос на странице обсуждения, и кто-нибудь ответит вам на него.

Безопасен ли OAuth?
Да, протокол OAuth разработан так, чтобы быть безопасным методом авторизации третьей стороны.

Firstly, OAuth allows third-party websites to access your account without you having to give them your password. Applications are able to access your account if and only if you authorize them to do so, and if you revoke that right then application will immediately be unable to take actions on your behalf.

Secondly, each third-party website you authorize is only allowed to take the specific actions you authorized it to. This means that, for example, if you are an administrator and you authorize an application that asks only for "Basic rights", if the application tries to delete a page (which requires admin rights) then that wiki will reject the request. Previously, if an application had your password, you were relying on the assurances of the author of the application that it would not use your advanced rights.

How does this affect me right now?
Applications cannot take any actions on your behalf without authorization, so until you decide you want to use an application which uses OAuth, you're not affected at all.

Как я могу подключить приложение к моему аккаунту?


If an application wishes to use OAuth to take actions on your behalf, you will have to authorize it to do so. Applications cannot take any actions on your behalf without authorization.

Когда приложение попросит вас авторизовать его, вы увидите диалоговое окно, сообщающее вам, какие права запрашивает приложение (на картинке справа). Если вы нажмёте "Отмена", процесс авторизации будет отклонён. Если вы нажмёте "Разрешить", приложение будет авторизовано для выполнения действий, приведённых в диалоговом окне.

A list of currently approved applications is available at Special:OAuthListConsumers.

Как я могу увидеть, какие приложения подключены к моему аккаунту?
The page Special:OAuthManageMyGrants (which is also accessible from the "User profile" tab in your preferences) lists all the applications you have authorized to access your account. From this page, you can also adjust and revoke grants.

How do I remove an application's ability to access my account?
Go to Special:OAuthManageMyGrants, find the application you want to remove access for, and click "revoke access". Then, on the page that opens, click the "Deauthorize" button.

Once an application is deauthorized, it will no longer be able to access your account or take any actions on your behalf. You will have to go through that application's authorization process again in order for it to access your account.

How do I change what actions an application can take with my account?
Go to Special:OAuthManageMyGrants, find the application you want to modify the permissions for, and click "manage access". From here you can revoke any individual permissions, excluding "Basic rights" which are the minimal rights required by all connected applications to function.

Please note that altering or removing permissions from an application's grant may cause the application to stop working properly for you.

Могу ли я увидеть пример работы OAuth?
Brad Jorsch has put together an example of how OAuth works called "OAuth Hello World!". To try it, go to https://tools.wmflabs.org/oauth-hello-world/.

Где я могу зарегистрировать своё собственное приложение?
Здесь. (Удостоверьтесь, что включили протокол (напрмер, « http:// » или « https:// ») в «callback URL», в противном случае обратный вызов не будет работать!)

См. также

 * OAuth Hello World application written in PHP
 * flask-mwoauth library


 * OAuth/For_Developers