Platonides wrote:
CORS does seem to be the way to go. I have drafted a new proposal below which attempts to fix several bug in our way of doing central login.
Two questions and a comment about this.
First, would this impede the ability to switch to an AJAX login interface in the future? LiquidThreads development is working toward this goal.[1]
Second, would this impede the ability to remove the "you've been logged in" screen? Aryeh mentioned an idea that would allow MediaWiki to remove this horrible workflow interrupter.[2]
Lastly, due to the large nature of this project, the fact that it involves both sysadmins and developers, and the fact that there are high-level principles[3] that need to be kept in mind (as well as the need to track a variety of bugs and mailing list posts), I'd strongly recommend creating a "Requests for comment" subpage for this.[4]
MZMcBride
[1] http://www.mediawiki.org/wiki/File:LQT-v2-Editor-LoginPrompt-Login.png [2] http://mail.wikimedia.org/pipermail/wikitech-l/2011-February/051946.html [3] http://mail.wikimedia.org/pipermail/wikitech-l/2011-February/051939.html [4] http://www.mediawiki.org/wiki/Requests_for_comment