It keeps telling me "Invalid signature".
I have to use https://www.mediawiki.org/w/index.php?title=Special:OAuth/initiate&format=&oauth_callback=
Version: unspecified
Severity: enhancement
Description
Description
Details
Details
- Reference
- bz57500
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Duplicate | None | T59576 GET call to Special:OAuth/$par without query strings (but with Authorization header) shouldn't be redirected to pretty URLs | |||
| Open | Feature | None | T59500 Impossible to use https://www.mediawiki.org/wiki/Special:OAuth/initiate?format=&oauth_callback= style URL |
Event Timeline
Comment Actions
This is due to MediaWiki core adding title to the list of incoming parameters, even when it wasn't requested. I'll add that to some developer notes I'm putting together.
Comment Actions
I think the most realistic path foward is to have the extension generate the pretty URL (or maybe have something like MWOAuthRequest::fromRequestVariants() which returns an array or MWOAuthRequest objects), and if OAuth signature verification fails, try it with other URLs. Same in the opposite direction with T59576.
Comment Actions
Note that I'm baking this bug into the ATS config in gerrit 817086. If this bug is ever fixed, the rule will have to be updated.
Comment Actions
There are ~1000 failed requests to nice URLs in the last 90 days, from several different applications. We only log errors, so that doesn't necessarily mean the nice URL works (in some cases?) but it's at least suggestive. We should probably support it just in case.