Yeah I've noticed. I decided to start with reading the OAuth IETF document first so I'm totally familiarized with the protocol. Then I'm going to look at the PHP extension (although in the long run I don't want to have it as a dependency), and finally I'm going to look through the mailing list and other stuff. Then I'll draft some stuff and put it out here for discussion. *--* *Tyler Romeo* Stevens Institute of Technology, Class of 2015 Major in Computer Science www.whizkidztech.com | tylerromeo(a)gmail.com On Thu, Aug 16, 2012 at 3:02 PM, Daniel Friesen &lt;lists(a)nadir-seen-fire.com&gt;wrote;wrote: > On Thu, 16 Aug 2012 11:39:54 -0700, Tyler Romeo &lt;tylerromeo(a)gmail.com&gt; > wrote: > > Is anybody working on OAuth for MediaWiki? Because if not I might put >> something together (i.e., start putting together design documents >> based on >> http://www.mediawiki.org/wiki/**OAuth<http://www.mediawiki.org/wiki/OAut… >> ). >> >> *--* >> *Tyler Romeo* >> >> Stevens Institute of Technology, Class of 2015 >> Major in Computer Science >> www.whizkidztech.com | tylerromeo(a)gmail.com >> > > That OAuth page is actually quite old. > > You should read over all the mailing list and Talk:OAuth topics. > Especially the stuff on writing this type of auth into core as an > abstract > system. > As well please take a good long read over: > https://www.mediawiki.org/**wiki/OAuth/Issues<https://www.mediawiki.org/… > > Also note I don't think we've had a real discussion over OAuth yet. The > OAuth discussions I've tried to spark up haven't gone far. And whoever > is > in the subgroup here that actually understands OAuth haven't even had a > discussion over it. > > -- > ~Daniel Friesen (Dantman, Nadir-Seen-Fire) [http://daniel.friesen.name]

Read both OAuth 2 (and it's Bearer and MAC specs) and the OAuth 1 RFC. I would probably avoid reading the PHP code for it. I have a feeling that it's going to do nothing but give you some wrong ideas about how OAuth should be implemented.

I indeed meant the OAuth extension for PHP (the PECL one). *--* *Tyler Romeo* Stevens Institute of Technology, Class of 2015 Major in Computer Science www.whizkidztech.com | tylerromeo(a)gmail.com On Thu, Aug 16, 2012 at 3:41 PM, Derric Atzrott < datzrott(a)alizeepathology.com&gt; wrote: _______________________________________________ Wikitech-l mailing list Wikitech-l(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l