Hi! We're trying to use the collections (a beta wikipedia feature) on a wikimedia external website, http://wikijourney.eu, which delivers wikipedia-driven tourist tours. In order to use the collections' API, we need the user to log in his wikipedia account, and it would be nice to have a log-in form directly on the website. Does anyone know if it's possible?
Hi,
What about using OAuth[1] to get a specific scope of rights of the user? For Gather (the extension, that provides the collection feature) the view and edit watchlist rights _should_ be enough (I haven't tested it). That would be more accurate as requesting the user to enter the username and password from another project on a foreign page :) You can find some information on the OAuth extension page[2].
[1] https://www.mediawiki.org/wiki/Help:OAuth [2] https://www.mediawiki.org/wiki/Extension:OAuth
Best, Florian
Freundliche Grüße Florian Schmidt
-----Original-Nachricht----- Betreff: [Wikitech-l] Wikimedia authentication on an external website? Datum: Wed, 15 Jul 2015 13:34:29 +0200 Von: Paul Arzelier paul.arzelier@free.fr An: wikitech-l@lists.wikimedia.org
Hi! We're trying to use the collections (a beta wikipedia feature) on a wikimedia external website, http://wikijourney.eu, which delivers wikipedia-driven tourist tours. In order to use the collections' API, we need the user to log in his wikipedia account, and it would be nice to have a log-in form directly on the website. Does anyone know if it's possible?
_______________________________________________ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
On Wed, Jul 15, 2015 at 4:33 AM, Paul Arzelier paul.arzelier@free.fr wrote:
We're trying to use the collections (a beta wikipedia feature) on a wikimedia external website, http://wikijourney.eu, which delivers wikipedia-driven tourist tours. In order to use the collections' API, we need the user to log in his wikipedia account, and it would be nice to have a log-in form directly on the website. Does anyone know if it's possible?
Please don't do that, it's a horrible violation of password security, it will make most people avoid your site, and it will probably get your site blocked from interacting with Wikipedia. Use OAuth, as Florian explained.
Gergo Tisza <gtisza <at> wikimedia.org> writes:
Please don't do that, it's a horrible violation of password security, it will make most people avoid your site, and it will probably get your site blocked from interacting with Wikipedia. Use OAuth, as Florian explained.
Okay, we'll use OAuth then. Thanks very much!
Keen to see what you guys come up with :) Please share when you have this up and running!
On Thu, Jul 16, 2015 at 5:52 AM, Paul Arzelier paul.arzelier@free.fr wrote:
Gergo Tisza <gtisza <at> wikimedia.org> writes:
Please don't do that, it's a horrible violation of password security, it will make most people avoid your site, and it will probably get your site blocked from interacting with Wikipedia. Use OAuth, as Florian explained.
Okay, we'll use OAuth then. Thanks very much!
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
wikitech-l@lists.wikimedia.org