* Update extensions/OATHAuth from branch 'REL1_43'
to cf039f8e5a199b9fd2a093ef3a35b7c7aca76221
- Fix multi-key handling
Follow up on the multiple-authenticators work by replacing
the user's 2FA module (of which there could only be one) with
the user's 2FA keys in various places.
Functional changes:
* Add OATHUser::getKeysForModule() and a shortcut for the TOTP
module (for typehint friendliness)
* Filter modules for TOTP only in various places:
** ApiOATHValidate (which could maybe be more generic in the
longer term, but would need some sort of support flag - it
will definitely not work with WebAuthn).
** Lots of places that did the same filtering manually.
* Do not throw in various places when the user has multiple kinds
of keys:
** OATHUser::addKey()
** OATHUserRepository::loadKeysFromDatabase()
* Keep throwing in OATHUserRepository::createKey() (which is what
gates the use of multiple authenticators currently, and we want
to preserve that until further UX improvements) but use an error
page rather than an error.
Code cleanup:
* Replace OATHUser::setKeys() (only used in a single place, to
remove a key) with removeKey().
* Hard-deprecate OATHUser::getModule() and remove its uses.
* Remove OATHUser::setModule(). Instead, use the first key in
getModule().
WebAuthn part of the change: Ib9a686171da67b334e80524629df406d10903391
Bug: T242031
Change-Id: I70241b9cfc036ea6439bf30ed724c1377a78d5c0
(cherry picked from commit 511127a8edea3c6ac390fb8ff1269d6e07a2f845)
|
||
|---|---|---|
| .phan | ||
| cache | ||
| docs | ||
| extensions | ||
| images | ||
| includes | ||
| languages | ||
| maintenance | ||
| mw-config | ||
| resources | ||
| skins | ||
| tests | ||
| vendor@ff925b8b4d | ||
| .dockerignore | ||
| .editorconfig | ||
| .eslintignore | ||
| .eslintrc.json | ||
| .fresnel.yml | ||
| .git-blame-ignore-revs | ||
| .gitattributes | ||
| .gitignore | ||
| .gitmessage | ||
| .gitmodules | ||
| .gitreview | ||
| .mailmap | ||
| .phpcs.xml | ||
| .stylelintrc.json | ||
| .svgo.config.js | ||
| .vsls.json | ||
| api.php | ||
| autoload.php | ||
| CODE_OF_CONDUCT.md | ||
| composer.json | ||
| composer.local.json-sample | ||
| COPYING | ||
| CREDITS | ||
| DEVELOPERS.md | ||
| docker-compose.yml | ||
| FAQ | ||
| Gruntfile.js | ||
| HISTORY | ||
| img_auth.php | ||
| index.php | ||
| INSTALL | ||
| jsdoc.json | ||
| load.php | ||
| opensearch_desc.php | ||
| package-lock.json | ||
| package.json | ||
| phpunit.xml.dist | ||
| README.md | ||
| RELEASE-NOTES-1.43 | ||
| rest.php | ||
| SECURITY | ||
| thumb.php | ||
| thumb_handler.php | ||
| UPGRADE | ||
MediaWiki
MediaWiki is a free and open-source wiki software package written in PHP. It serves as the platform for Wikipedia and the other Wikimedia projects, used by hundreds of millions of people each month. MediaWiki is localised in over 350 languages and its reliability and robust feature set have earned it a large and vibrant community of third-party users and developers.
MediaWiki is:
- feature-rich and extensible, both on-wiki and with hundreds of extensions;
- scalable and suitable for both small and large sites;
- simple to install, working on most hardware/software combinations; and
- available in your language.
For system requirements, installation, and upgrade details, see the files RELEASE-NOTES, INSTALL, and UPGRADE.
- Ready to get started?
- Setting up your local development environment?
- Looking for the technical manual?
- Seeking help from a person?
- Looking to file a bug report or a feature request?
- Interested in helping out?
MediaWiki is the result of global collaboration and cooperation. The CREDITS file lists technical contributors to the project. The COPYING file explains MediaWiki's copyright and license (GNU General Public License, version 2 or later). Many thanks to the Wikimedia community for testing and suggestions.