Page MenuHomeMiraheze

Phabricator MW OAuth broken
Closed, ResolvedPublic

Description

https://phabricator.miraheze.org/auth/config/view/3/

https://meta.miraheze.org/w/index.php?title=Special:OAuthListConsumers/view/d03640aa2b2567d786af4d2752b5bc6c&name=&publisher=John&stage=1

When you try to login using MediaWiki, it fails every time with a callback error. Because of this some users are unable to login, and some can't even create accounts.

Event Timeline

MacFan4000 triaged this task as High priority.Mar 2 2023, 17:09
MacFan4000 created this task.

Private key needs resetting - this has to be done by john.

I can setup a new OAuth consumer in an hour or two if we want to minimize downtime.

That would (probably?) be preferred. I’m stuck logging into Phabricator via GitHub right now, but not all users will have that luxury.

Even if John is available to refresh the key tomorrow, it is still most likely worth changing the owner of the consumer to a shared staff account, such as the existing Miraheze Operations account. This will ensure that any available SRE will have access to modify the OAuth consumer and we won't have to wait on someone becoming available should we ever be in a similar location.

CosmicAlpha or I will take care of it tomorrow.

Unknown Object (User) closed this task as Resolved.Mar 3 2023, 05:19
Unknown Object (User) claimed this task.

I went ahead and did this now, as more users were encountering the issue, and it is a high priority task, plus my own fault for causing it.

In T10564#212732, @Void wrote:

Even if John is available to refresh the key tomorrow, it is still most likely worth changing the owner of the consumer to a shared staff account, such as the existing Miraheze Operations account.

This was definitely a good idea to do.