Hi:

Sounds great (as geek-developer), but, we have non-editors as jury, How will work oAuth if they don't have WMF account?. A problem to be analized in the future :)

Regards!


On Mon, Oct 21, 2013 at 3:47 PM, Maarten Dammers <maarten@mdammers.nl> wrote:
Should be on this list.

valhallasw@arctus.nl schreef op 20-10-2013 12:46:
Hi Nemo,

-----Oorspronkelijk bericht-----
From: Federico Leva (Nemo) Sent: Sunday, October 20, 2013 11:53 AM To: Wiki Loves Monuments Photograph Competition Cc: Maarten Dammers Subject: Re: [Wiki Loves Monuments] Next generation jury tool Oauth?

I got an error 500 there, but anyway.

This is caused by a combination of two bugs - first of all, the OAuth implementation on the uploader end redirects you to https://tools.wmflabs.org instead of https://tools.wmflabs.org/gerrit-patch-uploader. Secondly, https://tools.wmflabs.org 500's (for a reason unknown to me). If you go to https://tools.wmflabs.org/gerrit-patch-uploader, you will see you are logged in.


 I don't remember the outcome of the ever-repeating discussions on the topic: this works only for web applications as of now, right? Because each app needs to have a secret key which can't be distributed as, well, it's secret.

Correct. I'm also not sure if the oauth team is making any progress on this issue. However, obtaining a secret token that works for the logged in user is possible (although not completely trivial). That would basically make the process comparable to Google's one-app passwords.

Merlijn



--
Dennis Tobar Calderón
Ingeniero en Informática UTEM