Auth systems/status

Last update on: 2014-05-monthly

2013-03-monthly
This activity kicked off on March 26. We're planning a minimal OpenID implementation and OAuth implementation in the coming months. Very tentative target date is end of May.

2013-04-monthly
During April, the team primarily focused on implementing SUL v2, which will fix issues that users are having with new security features in recent browser releases. SUL v2 is ready for testing and deployment is targeted for early May. In addition, the team worked toward a final design specification for OAuth and will begin working on that pending the successful deployment of SUL v2.

2013-06-monthly
In June, the team worked with the Wikimedia Foundation's user experience team to improve SUL2. The improvements were pushed to test wikis on July 1, and will be rolled out to other wikis in July. Implementation of OAuth is well underway, and planned for roll-out in July as well.

2013-07-monthly
Engineers worked towards for an OAuth deployment to the beta cluster in early August, and aim to roll OAuth out to the test wikis (e.g., test2.wikipedia.org) after Wikimania.

2013-08-20
Chris Steipp just deployed OAuth to the test wikis this morning. The available set of rights that can be authorized to an OAuth Consumer (an application that will be talking to the MediaWiki api on behalf of a user) isn't exhaustive, but it covers most basic usage of the api, including editing. So no, not read only. He'll send out a more detailed announcement with links to documentation for getting started with OAuth in a little bit.

2013-08-monthly
The team deployed OAuth to mediawiki.org on Aug 20th, and are working on enhancement requests before the extension is enabled on the rest of the WMF wikis. Several small bugs were fixed in SUL.

2013-09-monthly
The team improved the user interface of OAuth and deployed these changes to mediawiki.org and test.wikipedia.org. We hope to test and refine the extension with third party developers, and subsequently deploy to all wikis. An initial review of Extension:OpenID was performed, and several issues were brought to the attention of the extension maintainer. Several bugs with CentralAuth/SUL were also fixed.

2013-10-monthly
We continued to refine the OAuth UX with the design team, and completed all major development tasks for the initial OAuth product. The first third-party application approved to use OAuth, "Gerrit Patch Uploader", was successfully used by several end users. We plan to finish the OAuth deployment in November.

2013-11-monthly
<section begin="2013-11-monthly"/>Our preliminary version of OAuth is now live on all Wikimedia wikis. Since the rollout, five OAuth consumers have been accepted. We're hopeful many more consumers will be proposed.<section end="2013-11-monthly"/>

2013-12-monthly
<section begin="2013-12-monthly"/>The team implemented performance fixes for CentralAuth to reduce the number of calls by anonymous users.<section end="2013-12-monthly"/>

2014-01-monthly
<section begin="2014-01-monthly"/>The team focused on minor updates to close some of the high priority OAuth bugs.<section end="2014-01-monthly"/>

2014-03-monthly
<section begin="2014-03-monthly"/>The team prepared the migration of the central OAuth database from mediawiki.org to Meta-Wiki, and got input from the Wikimedia Foundation's legal team regarding the OAuth process.<section end="2014-03-monthly"/>

2014-04-monthly
<section begin="2014-04-monthly"/>We did initial work on Authn/z requirements for RFC architecture, and an initial review of Requests for comment/AuthStack. We also investigated the use of MediaWiki's OAuth for Phabricator, and worked on a proof of concept.<section end="2014-04-monthly"/>

2014-05-monthly
<section begin="2014-05-monthly"/>Worked on SOA Authentication RFC to support Services team. Created MediaWiki vagrant role for CentralAuth, including significant work to support multiple wikis on a single vagrant instance. Continued work on Phabricator-MediaWiki OAuth integration, patch upstreamed. OAuth training at Zurich Hackathon, resulting in several new apps using OAuth.<section end="2014-05-monthly"/>