wikimedia/mediawiki-extensions-OATHAuth
1
0
Fork 0
mirror of https://gerrit.wikimedia.org/r/mediawiki/extensions/OATHAuth synced 2024-11-28 10:10:19 +00:00
Code Issues Packages Projects Releases Wiki Activity
423 commits 11 branches 24 tags 23 MiB
Commit graph

185 commits

Author SHA1 Message Date
Translation updater bot b32ed77760 Localisation updates from https://translatewiki.net. 
Change-Id: Idbd83461fc44cec5859e3beca0206dd92859a7e2
 2017-01-06 23:11:51 +01:00
Translation updater bot c192a14844 Localisation updates from https://translatewiki.net. 
Change-Id: I2513055db7c200aa3a7efb01e00d3961d2df44b7
 2017-01-05 23:47:25 +01:00
Translation updater bot c670c8b1b9 Localisation updates from https://translatewiki.net. 
Change-Id: I868255f361437d189a380d9bc61a54945ec3630e
 2017-01-04 22:35:21 +01:00
Umherirrender f338a1489e Rename api example message of oathvalidate 
To make clear from the message name which module it belongs to, two
example messages should be renamed.

Change-Id: Idd329e77d5c7082eb8097309fb89f82c7a37cf68
 2017-01-01 16:25:19 +01:00
Translation updater bot da80cd7417 Localisation updates from https://translatewiki.net. 
Change-Id: Ie5774a9490852d63700af74777a9efd9329694ac
 2017-01-01 10:04:50 +01:00
Translation updater bot b5e39da6bf Localisation updates from https://translatewiki.net. 
Change-Id: If1e2ae07e8d102d04b41db4930f3725862d1df0a
 2016-12-28 10:48:39 +01:00
Translation updater bot f5f6e21471 Localisation updates from https://translatewiki.net. 
Change-Id: Ic28408662fbd3c41cc3a770145e675ce46af31c5
 2016-12-25 22:19:02 +01:00
Translation updater bot 0ede909adb Localisation updates from https://translatewiki.net. 
Change-Id: I9804fb0fa3a33ce919875c4b9e9954d79520194a
 2016-12-24 22:38:52 +01:00
Translation updater bot c05c2d384a Localisation updates from https://translatewiki.net. 
Change-Id: Ic11b152624e516c0469cb5146e892d7d4a07d39c
 2016-12-23 22:32:14 +01:00
Translation updater bot f63f0b1b6e Localisation updates from https://translatewiki.net. 
Change-Id: Ia02b8274728b47b7c910434fc26c4d439248f91b
 2016-12-22 22:55:46 +01:00
Translation updater bot 23c6dae239 Localisation updates from https://translatewiki.net. 
Change-Id: I09200437d4a0311bff4c65d57d5e731c2fd2b497
 2016-12-16 22:16:11 +01:00
Translation updater bot c7bfed3e14 Localisation updates from https://translatewiki.net. 
Change-Id: I10346ea51999c0a1eb9b601ecbb4ae5a07227eef
 2016-12-15 23:17:53 +01:00
Translation updater bot 0226a78a19 Localisation updates from https://translatewiki.net. 
Change-Id: I8efd39be13bc2a1af52046b1b2efc092968222c8
 2016-12-14 22:24:57 +01:00
Translation updater bot 25c8b5dcdd Localisation updates from https://translatewiki.net. 
Change-Id: I3d8a9f103b95a56839d3f8ae886512d561767148
 2016-12-13 22:44:13 +01:00
Translation updater bot 6e407e6873 Localisation updates from https://translatewiki.net. 
Change-Id: Id09c3d6a1462c4c89b95939d4eeaa4d96b783e13
 2016-12-12 22:34:25 +01:00
Brad Jorsch 47d7c04496 Update for API error i18n 
See Iae0e2ce3.

Change-Id: Ie30549363b079ea23d6eab5959d10ada8f74acdf
 2016-12-10 00:26:48 +00:00
MarcoAurelio 628af8fad4 Replace references to mobile apps to more generic 'authentication device' 
Desktop programs for TOTP authentication also exist, so lets replace
'mobile app' to more generic 'authentication device' to cover all of
them. Improvements on the wording are welcome.

Change-Id: Id19ac30dc7ac36616b8e00b1b4c9e95eec8afc06
 2016-12-07 14:28:28 +00:00
L10n-bot b8e146c4b2 Merge "Localisation updates from https://translatewiki.net." 2016-12-06 21:49:51 +00:00
jenkins-bot 9f2600331e Merge "Typo fix" 2016-12-06 21:49:08 +00:00
Translation updater bot 9e5b1563cb Localisation updates from https://translatewiki.net. 
Change-Id: I2273265e7da610d5cdbb393073d5490003e0fe88
 2016-12-06 22:45:54 +01:00
Translation updater bot 18b85f70b7 Localisation updates from https://translatewiki.net. 
Change-Id: I2c89802a838cc3bced29fc244f9d6d19979d0281
 2016-12-05 22:50:36 +01:00
Translation updater bot 432f5fac0e Localisation updates from https://translatewiki.net. 
Change-Id: Iaaf1d7fea076ac09fcf3d85e27d3450d584f6879
 2016-12-04 22:38:44 +01:00
MarcoAurelio a7ee83ece6 Typo fix 
Change-Id: Idb28f4d1963ba7fa75496444d864a9e199e9b86e
 2016-12-03 17:27:26 +00:00
Translation updater bot e3091e4b98 Localisation updates from https://translatewiki.net. 
Change-Id: I6fa16004100d4b146191dd0f11e5e90085f9f937
 2016-12-02 22:18:43 +01:00
Translation updater bot e67a635e5c Localisation updates from https://translatewiki.net. 
Change-Id: I64444bc217693e07dfff23637e8ece7a5f5fc6f4
 2016-11-30 22:20:26 +01:00
Translation updater bot 7374d6740f Localisation updates from https://translatewiki.net. 
Change-Id: I201e7deb6ae9df3e211be01af071295f0a47a8bf
 2016-11-29 22:23:25 +01:00
Translation updater bot bc24aa63a3 Localisation updates from https://translatewiki.net. 
Change-Id: I4261e2ad85dde546e78dd59a8be76631836d92f6
 2016-11-28 22:30:22 +01:00
Translation updater bot e92097d375 Localisation updates from https://translatewiki.net. 
Change-Id: I855db4b2d62c50d701673067045f92039f4bfdbe
 2016-11-27 22:30:42 +01:00
Translation updater bot e0d8b84e2e Localisation updates from https://translatewiki.net. 
Change-Id: I83c0bbe57cb4898f0f7e0528fbf0320fee90bf30
 2016-11-25 22:52:16 +01:00
Translation updater bot fc87866530 Localisation updates from https://translatewiki.net. 
Change-Id: I1c5b9698a22b45897bb76187eb881dd58fc0c19d
 2016-11-24 22:21:14 +01:00
Translation updater bot 4500b4a257 Localisation updates from https://translatewiki.net. 
Change-Id: Idc34e1e770203b719661b74e3b103c8aca5a064e
 2016-11-22 23:25:43 +01:00
Translation updater bot a25bd92061 Localisation updates from https://translatewiki.net. 
Change-Id: I2f9a19c619f6495090dfabc2698828355ae4ee2b
 2016-11-21 22:41:00 +01:00
Translation updater bot d538555366 Localisation updates from https://translatewiki.net. 
Change-Id: Id06612a31df71c502d000e87317a48a645ee1897
 2016-11-20 22:20:00 +01:00
Translation updater bot a2811f3cd8 Localisation updates from https://translatewiki.net. 
Change-Id: I31df306260cb8b3faf2e5016a13eb5f636804a32
 2016-11-19 22:07:35 +01:00
Translation updater bot 7dea978967 Localisation updates from https://translatewiki.net. 
Change-Id: Id9398a726b88c0e52e20a2434fca5cae67eb6114
 2016-11-18 22:15:50 +01:00
Translation updater bot 29a310f5eb Localisation updates from https://translatewiki.net. 
Change-Id: I654a945028f7673735c4df29e486ca279ead40b0
 2016-11-17 22:54:29 +01:00
MarcoAurelio 0ac5c0fb71 Make OATHAuth messages use consistent "two-factor authentication" wording 
Bug: T150597
Change-Id: I0fed5a9b3fd747b6f2f71834c0bfe9dc88bbefb8
 2016-11-17 11:19:11 +01:00
Reedy 8e70c98ed7 Rename openstackmanager- to oathauth- 
Change-Id: If0378e0c0a3fc08de410be0d0e39273df1002391
 2016-11-16 22:49:31 +00:00
Translation updater bot 49a7f75244 Localisation updates from https://translatewiki.net. 
Change-Id: I5097d595eda9f16b5ee69d9377af1e50fd3263f7
 2016-11-15 22:57:09 +01:00
Translation updater bot 044d469af2 Localisation updates from https://translatewiki.net. 
Change-Id: I23b091e822c4a3b27383b4591b33626009e3f1eb
 2016-11-14 22:57:29 +01:00
Translation updater bot 0e0a6c95d8 Localisation updates from https://translatewiki.net. 
Change-Id: I5c8e5e443d8f12e8822b2f4c6d8b5816c718cc0e
 2016-11-13 22:50:13 +01:00
Translation updater bot dffa6b689f Localisation updates from https://translatewiki.net. 
Change-Id: Id51db40cfe516ca52e84ce9cdc655dafd36c8d82
 2016-11-12 22:55:22 +01:00
Translation updater bot e785a0f891 Localisation updates from https://translatewiki.net. 
Change-Id: I2cd8706e96f2c2bfc5b49380300f6a072c8424b1
 2016-11-03 23:32:06 +01:00
Translation updater bot e4d6061cbf Localisation updates from https://translatewiki.net. 
Change-Id: I49df9415bac6212938f90acb1ed8621f14a505ac
 2016-11-01 22:47:09 +01:00
Translation updater bot 56523b60cc Localisation updates from https://translatewiki.net. 
Change-Id: I9c3aefda7209f4b01d3bc1ffcfb1fdf5336bd1bf
 2016-10-25 23:15:42 +02:00
Translation updater bot 647b68c0fc Localisation updates from https://translatewiki.net. 
Change-Id: Ibcb0a0657db806c066c11f0557a88dd36fba1a47
 2016-10-22 22:46:35 +02:00
Translation updater bot a82d4aedd9 Localisation updates from https://translatewiki.net. 
Change-Id: I465baf8d66a8b705366fd36d26eb5d8aa1eaa03d
 2016-10-18 22:38:34 +02:00
Translation updater bot 1164ea58fc Localisation updates from https://translatewiki.net. 
Change-Id: I50d84ab53301a197afd149a87baf93b1c93e99b5
 2016-10-17 22:34:18 +02:00
Translation updater bot 6cfec6bb04 Localisation updates from https://translatewiki.net. 
Change-Id: I2c90c532207ef106e2c893e67d8cefd5334ed5bf
 2016-10-13 22:51:40 +02:00
jenkins-bot 7c11b39942 Merge "Apply rate limits to all token verifications" 2016-10-12 00:07:35 +00:00
jenkins-bot 10ca80f08b Merge "Add an api action to validate an OATH token" 2016-10-12 00:02:19 +00:00
Translation updater bot 745d8a0179 Localisation updates from https://translatewiki.net. 
Change-Id: If7eeee8717eb0bdd16d36622922797295e518f41
 2016-10-10 22:27:58 +02:00
Translation updater bot 905045abc3 Localisation updates from https://translatewiki.net. 
Change-Id: I9f44cc8750d00109d7a8d6a5f2e0999fde550ffd
 2016-10-09 22:53:34 +02:00
jenkins-bot e4003d99d6 Merge "Add a query meta api option to check for OATH" 2016-10-08 00:44:39 +00:00
Bryan Davis a6b60d2465 Apply rate limits to all token verifications 
Extend the token validation failure checks introduced in I4884f6e to the
other interactions where OATHAuthKey::verifyToken is used.

Depends-On: Ia3add8bbbab0307f036e9b77e752c382da3a0d04
Change-Id: Icbe5cdf561c683dc971a099d61cedff311b26b43
 2016-10-07 17:24:32 -07:00
Bryan Davis 36c523ab23 Add an api action to validate an OATH token 
Add a new internal action=oathvalidate Action API module that can be
used to validate an OATH token collected from a user. Using the module
requires the 'oathauth-api-all' permission introduced in I4884f6e.

Attempts to call the action for a given user are rate limited to only
allow 10 failures per minute using the new 'badoath' key.

The check is primarily useful as an internal network service in an
environment where MediaWiki and other applications are sharing the same
backing authentication store (e.g. LDAP) and the non-MediaWiki
applications would like to respect the OATH protections enabled on the
MediaWiki install.

Complete usage in an LDAP shared auth environment would look something
like:
* Authenticate a user with the LDAP server via auth-bind
* Call action=query&meta=oath as a privileged user to check for OATH
  protection.
* If OATH is active for the account, prompt the user for their current
  OATH token.
* Call action=oathvalidate as a privileged user to validate the token.
* If validation succeeds, complete authentication.
* If validation fails, do not authenticate the user.

Bug: T144712
Change-Id: I1b18d9f3b99364fc47c760bdfc2047c1cbb5c04a
 2016-10-07 16:55:50 -07:00
Bryan Davis 766e18bca1 Add a query meta api option to check for OATH 
Add a new internal action=query&meta=oath Action API module that can be
used to check for OATH protection on a given user account. Using the
module requires a new 'oathauth-api-all' permission which is not granted
to any group by default. The permission is also added to the new
'oath' grant so that it can be used via OAuth and bot passwords.

Use of this API is security sensitive and should not be granted lightly.
Configuring a special 'oathauth' user group to grant the needed
'oathauth-api-all' permission is recommended.

This check is primarily useful as an internal network service in an
environment where MediaWiki and other applications are sharing the same
backing authentication store (e.g. LDAP) and the non-MediaWiki
applications would like to respect the OATH protections enabled on the
MediaWiki install.

Bug: T144712
Change-Id: I4884f6efdfa42db82c25eadb70c7aefa98c370e9
 2016-10-07 12:10:18 -07:00
Translation updater bot 00c8e5338c Localisation updates from https://translatewiki.net. 
Change-Id: I60dd1befac5dc36205db2f5bc3574fa7c496ab16
 2016-10-05 22:43:08 +02:00
Translation updater bot 69506832f0 Localisation updates from https://translatewiki.net. 
Change-Id: I554f993eb9618e78f218991fc055c774c7052346
 2016-08-17 22:40:18 +02:00
Translation updater bot 57e3f9dc24 Localisation updates from https://translatewiki.net. 
Change-Id: Ica4440bb1aaa56ad3f03fe8f79c9b165b5b6bf1e
 2016-08-08 22:33:45 +02:00
Translation updater bot fc051bc05c Localisation updates from https://translatewiki.net. 
Change-Id: I623e2a0557fd9fc0ff57085c47bda4fcb7eda6e3
 2016-07-21 22:58:30 +02:00
Translation updater bot ea689f5d2a Localisation updates from https://translatewiki.net. 
Change-Id: I77817bd893810391acb502fca85d33e7eb55ce40
 2016-07-01 23:24:55 +02:00
Translation updater bot d2d3697633 Localisation updates from https://translatewiki.net. 
Change-Id: Ic1be648a908693328f0273fefa67c0c95e8be3e5
 2016-06-26 14:19:07 +02:00
Translation updater bot a5c444d64e Localisation updates from https://translatewiki.net. 
Change-Id: I90c756dca597df34afb9d920490ec3135c3ee33a
 2016-06-25 14:54:47 +02:00
Translation updater bot ebf96d3484 Localisation updates from https://translatewiki.net. 
Change-Id: I8642cb55ddef7ecbb4fee677a68865d8fff8643a
 2016-06-24 11:13:41 +02:00
Translation updater bot 23700f0d28 Localisation updates from https://translatewiki.net. 
Change-Id: Ib5c91bf3c441ae9c35cf034e3b22c4c0d606fc0c
 2016-06-21 23:31:04 +02:00
Translation updater bot 04ba11bf3a Localisation updates from https://translatewiki.net. 
Change-Id: I4215be1d92514c1c2c418e23dc00f15569c07cc8
 2016-06-18 22:47:39 +02:00
Translation updater bot cdce14b143 Localisation updates from https://translatewiki.net. 
Change-Id: I8d3c874594758bd784c386fc34ebc696862e46b8
 2016-06-17 22:30:34 +02:00
Translation updater bot be61d58740 Localisation updates from https://translatewiki.net. 
Change-Id: Ie7c37eafa53b7ad3d2f63df0c4a86e8e2c2e0dcf
 2016-06-15 22:37:02 +02:00
Translation updater bot e90196325a Localisation updates from https://translatewiki.net. 
Change-Id: I74da4777405f214fc38d086a1098b9016e8dba78
 2016-06-10 22:18:39 +02:00
Translation updater bot 71a049cc64 Localisation updates from https://translatewiki.net. 
Change-Id: I6dde00bcf1c7fd3777adc7796e108c871c8d0bc6
 2016-06-09 22:39:34 +02:00
Translation updater bot cfcfe47081 Localisation updates from https://translatewiki.net. 
Change-Id: I43bc4e6eaf0e913ceb6e2c5e454cc5a1b99b09cb
 2016-06-07 22:45:10 +02:00
Translation updater bot 47b7dd8019 Localisation updates from https://translatewiki.net. 
Change-Id: Ie8a83530c9435d7f3a829882065c69ab92ff9787
 2016-06-06 22:59:19 +02:00
Translation updater bot 853bc6ca00 Localisation updates from https://translatewiki.net. 
Change-Id: Id8b4cdc210412ae8001c6f1d03ef912cc5e93591
 2016-06-05 22:21:54 +02:00
Translation updater bot 847a4b9209 Localisation updates from https://translatewiki.net. 
Change-Id: I91f32000206bc70b62744f28343a9cc56fa87568
 2016-06-04 22:24:01 +02:00
Translation updater bot 5c24b3b3df Localisation updates from https://translatewiki.net. 
Change-Id: I4621c364ff464bb333f11dea846f8ed26c21bee3
 2016-06-03 23:21:42 +02:00
Translation updater bot f3533feac3 Localisation updates from https://translatewiki.net. 
Change-Id: I4414aa077fd438e77680911151ebf292a76d25de
 2016-06-02 22:24:52 +02:00
Translation updater bot a4be5669a2 Localisation updates from https://translatewiki.net. 
Change-Id: Ic9c994bf5ab7c0b4c4469dba2563cf4242aeb381
 2016-06-01 23:12:11 +02:00
Gergő Tisza 563796a98c Update for AuthManager 
Handling enabling/disabling via AuthManager is left to a separate
patch.

Bug: T110457
Change-Id: Ic492b8f2477c475f8414b61505139e9a1df2ba5b
 2016-05-31 19:38:41 +00:00
Translation updater bot 1b6780b8e7 Localisation updates from https://translatewiki.net. 
Change-Id: Id04818d138b280580c7d643e8fb4d97df0a481ca
 2016-05-10 22:28:41 +02:00
Translation updater bot 1432439b17 Localisation updates from https://translatewiki.net. 
Change-Id: Ib94b65a67b164520eb8e97459ea5b6e3024abb0a
 2016-04-18 22:21:26 +02:00
Translation updater bot 71a09d79fc Localisation updates from https://translatewiki.net. 
Change-Id: I23da81e04fe56170ed748279acfc0fe3a5c9a2af
 2016-04-10 20:05:02 +02:00
Translation updater bot 093f81551e Localisation updates from https://translatewiki.net. 
Change-Id: Ifbb40f4200c8c27089820b68379f003b34032ba5
 2016-04-07 23:03:30 +02:00
Translation updater bot fb6f9ebf17 Localisation updates from https://translatewiki.net. 
Change-Id: I1f0ac20dafa8ae40eae0667e4bb6f376d821ccbb
 2016-04-03 23:22:23 +02:00
Translation updater bot cfc7e3849f Localisation updates from https://translatewiki.net. 
Change-Id: I8115023f19aab2126c7c0a54ec98cfb6facad983
 2016-04-01 22:28:06 +02:00
Translation updater bot cb3d55f37c Localisation updates from https://translatewiki.net. 
Change-Id: I5b11fc314d4ae3df385259bfc478e524319de3be
 2016-03-31 22:45:35 +02:00
csteipp 07f99656dc Fix i18n merge errors 
Address comments by Raimond Spekking on
I39859cc59f1811de42b72f6167d332ea48812f97

Change-Id: Ib17f1a2f0e70e5fd286d7ea441b13f79da3743c5
 2016-03-31 07:51:26 -07:00
jenkins-bot 1dd09985d0 Merge "Move token login to separate page" 2016-03-31 04:31:39 +00:00
Translation updater bot 1c95cc53cd Localisation updates from https://translatewiki.net. 
Change-Id: I9e6ab33a2722ed40cfd5e6ee95ac95731c3625fd
 2016-03-30 22:41:05 +02:00
Tyler Anthony Romeo 1a8006317d Move token login to separate page 
Rather than have an extraneous form on the login page,
move the token input to a separate page. The actual
logic for logging in is identical, the only difference
is that the token is added to the form data on a second
page request.

Bug: 53195
Change-Id: I39859cc59f1811de42b72f6167d332ea48812f97
 2016-03-29 16:02:54 -07:00
Translation updater bot 25828bfd82 Localisation updates from https://translatewiki.net. 
Change-Id: Ie0229f920eea9591bfca9b4b53d7fc70e61e2b9b
 2016-03-29 22:38:09 +02:00
Translation updater bot 9fbf9d037a Localisation updates from https://translatewiki.net. 
Change-Id: I1d1d8089142ce378f95eb0b326821da57864aa0b
 2016-03-28 22:44:27 +02:00
Translation updater bot 5a98aff998 Localisation updates from https://translatewiki.net. 
Change-Id: I8bff7a23ae61c5640079757c04b4c481add03a1f
 2016-03-27 21:20:30 +02:00
Translation updater bot fe38684597 Localisation updates from https://translatewiki.net. 
Change-Id: I7d94dbe7e7acef698e31c97eb8c31718009890d2
 2016-03-24 22:37:49 +01:00
Tyler Romeo 4e9ad22469 Add user right for enabling two-factor auth 
Make new right oathauth-enable that the user must have to enable two
factor authentication (disabling and logging in, of course, are still
allowed).

Bug: T100376
Change-Id: I18d43f8b2cf2c2ce9c2309a43961686498b5c999
 2016-03-24 12:45:41 -07:00
Translation updater bot a161c3122c Localisation updates from https://translatewiki.net. 
Change-Id: I37c58596e845f958a1337193fbabca36b843209a
 2016-03-23 22:23:27 +01:00
Tyler Anthony Romeo 0c389f5025 Refactored special pages into HTMLForm and proxy 
Made new class ProxySpecialPage, which acts as a
proxy object to another SpecialPage object that is
determined based on context information other than
the title.

Then Special:OATH has been split into two separate
special page classes (both FormSpecialPages using
HTMLForm) that are routed to by a ProxySpecialPage
object.

In addition, the form for enabling two-factor auth
has been refactored into vform style, with some
better instructions on how to enable two-factor
authentication.

Change-Id: Ib9117cbc9d7f044de9607db81a157e1b472b5ec0
 2016-03-23 11:26:04 -07:00
Translation updater bot c51c60bfe4 Localisation updates from https://translatewiki.net. 
Change-Id: I1d6912809c20f854ef5c417f2c96889c3c18fa13
 2016-03-22 22:32:28 +01:00
Translation updater bot 7f82fbc7da Localisation updates from https://translatewiki.net. 
Change-Id: I0497b07e506df76bb039b3222597274e5fdb83cc
 2016-03-17 23:20:10 +01:00
Translation updater bot b682faa013 Localisation updates from https://translatewiki.net. 
Change-Id: Ie29359fb73a217ca8ab196075d0562e88fdad780
 2016-03-09 22:44:37 +01:00