Oh, sorry, I had it deprovisioned over the weekend, as it wouldn't allow for any logging in. It is enabled again.

On Sun, Apr 25, 2021 at 8:19 AM Bryan Davis <bd808@wikimedia.org> wrote:
On Fri, Apr 23, 2021 at 4:07 PM Denny Vrandečić
<dvrandecic@wikimedia.org> wrote:
> The settings in 10-WSOAuth.php end as follows:
> $wgOAuthAuthProvider = "mediawiki";
> $wgOAuthClientId = "[token]";
> $wgOAuthClientSecret = "[secret]";
> $wgOAuthRedirectUri = "http://annotation.wmcloud.org/w/index.php?title=Special:PluggableAuthLogin";
> $wgOAuthUri = "https://meta.wikimedia.org/w/index.php?title=Special:OAuth";
> and the OAuth settings on meta are as follows:
> OAuth "callback URL"https://annotation.wmcloud.org/w/index.php?title=Special:PluggableAuthLoginAllow consumer to specify a callback in requests and use "callback" URL above as a required prefix.NoApplicable grantsUser identity verification only, no ability to read pages or act on a user's behalf.
> I can see that meta states the callback URL with https and the settings without. Changing it in the settings doesn't seem to make a difference. I don't know if I can change it on Meta, or if I need to make a new application, but it doesn't look like the right solution anyway.

Your `$wgOAuthRedirectUri` should use the https protocol, but I don't
think this is you root problem.
says "No such special page" and
https://annotation.wmcloud.org/wiki/Special:Version shows no
extensions at all installed. Did you maybe miss the step of running
`vagrant provision` after you setup the roles and hiera config?

Bryan Davis              Technical Engagement      Wikimedia Foundation
Principal Software Engineer                               Boise, ID USA
[[m:User:BDavis_(WMF)]]                                      irc: bd808

Wikimedia Cloud Services mailing list
Cloud@lists.wikimedia.org (formerly labs-l@lists.wikimedia.org)