I think the point of the approval process is that I don't install OAuth

On Tue, Oct 27, 2015 at 11:23 PM, Brian Wolff <bawolff(a)gmail.com> wrote: https://meta.wikimedia.org/w/index.php?title=Special%3AListUsers&userna… Yes, bug one of us for now. I talked with the Stewards about taking on the process last week, and we're in the process of making that transition. _______________________________________________ Wikitech-l mailing list Wikitech-l(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

On Wed, Oct 28, 2015 at 10:10 AM, Aaron Halfaker <ahalfaker(a)wikimedia.org> wrote: Yes! https://meta.wikimedia.org/wiki/Requests_for_comment/OAuth_handover Bryan -- Bryan Davis Wikimedia Foundation <bd808(a)wikimedia.org> [[m:User:BDavis_(WMF)]] Sr Software Engineer Boise, ID USA irc: bd808 v:415.839.6885 x6855 _______________________________________________ Wikitech-l mailing list Wikitech-l(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

On Wed, Oct 28, 2015 at 9:10 AM, Aaron Halfaker <ahalfaker(a)wikimedia.org> wrote: down they this I'm very happy for other people to join this process. I believe there's an open bug about making approvals automatic for non-controversial rights. Patches welcome. Not defined yet. About what? If you have something that's not controversial, ping one of the admins, and I'm sure you can get your Consumer approved today. The RFC is the correct place. The Stewards are just getting back from travelling so I don't think we've started updating it to account for our conversations last week, but that is where we will work out the details. _______________________________________________ Wikitech-l mailing list Wikitech-l(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Ricordisamoa wrote: Hi. This rant doesn't seem very random. :-) This sounds like <https://phabricator.wikimedia.org/T67750> (you're already subscribed). Also <https://phabricator.wikimedia.org/T61772> and <https://phabricator.wikimedia.org/T103587>. I don't really understand why an approvals process exists. When I asked in 2014, the answer was "we weren't sure how it was going to be used, and what way we would need to extend the protocol." It's been over a year and I still don't really know what that means. That same note indicated a willingness to fully re-examine the OAuth workflow, so given that it's now late 2015, here are the options I see, in order of preference: * kill the approvals queue altogether; * distribute the approvals process to the Wikimedia stewards; * distribute the approvals process to additional Wikimedia Foundation employees; or * keep the status quo. It's difficult for me to figure out how realistic option 1 (killing the queue) is because I continue to have an incomplete understanding of OAuth and specifically why an approvals process was ever put into place. Given that several Wikimedians have complained about the speed of the approvals process, it seems like option 4 (keeping the current situation) is a no-go. That leaves us with options 2 and 3 (expanding the pool of approvers) as the most straightforward choices. Even if we implemented options 2 or 3 immediately, the lack of external visibility into the queue and the lack of notifications for queue submissions would very likely also need to be addressed. Option 1 would obviate the need for such additional features, of course. MZMcBride _______________________________________________ Wikitech-l mailing list Wikitech-l(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

I think the point of the approval process is that I don't install OAuth app key in the application like Vicuña ( https://github.com/yarl/vicuna). There is no clear consensus what to do with apps like this. One idea would be ever user needs to register it for themselves, but that of course wouldn't work with the permission queue.