Hi Brad,
On Wed, Nov 27, 2013 at 02:38:04PM -0500, Brad Jorsch (Anomie) wrote:
On Wed, Nov 27, 2013 at 1:00 PM, Erik Zachte
<ezachte at wikimedia.org> wrote:
Special:CentralAutoLogin/createSession
Special:CentralAutoLogin/start
You should also remove anything else beginning with Special:CentralAutoLogin/.
Maybe Special:MWOAuth/ and Special:OAuth/ too.
Thanks for pointing that out.
I have not fully caught up on reading up on the internals of our OAuth
implementation, but when looking at the sampled 1:1000 logs, I could
only find two requests to
Special:OAuth/initiate
. No other requests to Special:MWOAuth/ , Special:OAuth/ . Should we
already see traffic to those endpoints?
Best regards,
Christian
--
---- quelltextlich e.U. ---- \\ ---- Christian Aistleitner ----
Companies' registry: 360296y in Linz
Christian Aistleitner
Gruendbergstrasze 65a Email: christian(a)quelltextlich.at
4040 Linz, Austria Phone: +43 732 / 26 95 63
Fax: +43 732 / 26 95 63
Homepage:
http://quelltextlich.at/
---------------------------------------------------------------