Last modified: 2011-01-25 01:09:20 UTC

Wikimedia Bugzilla is closed!

Wikimedia has migrated from Bugzilla to Phabricator. Bug reports should be created and updated in Wikimedia Phabricator instead. Please create an account in Phabricator and add your Bugzilla email address to it.
Wikimedia Bugzilla is read-only. If you try to edit or create any bug report in Bugzilla you will be shown an intentional error message.
In order to access the Phabricator task corresponding to a Bugzilla report, just remove "static-" from its URL.
You could still run searches in Bugzilla or access your list of votes but bug reports will obviously not be up-to-date in Bugzilla.
Bug 14450 - Login on secure server is global but doesn't tell you so
Login on secure server is global but doesn't tell you so
Product: MediaWiki extensions
Classification: Unclassified
CentralAuth (Other open bugs)
All All
: Normal normal (vote)
: ---
Assigned To: Nobody - You can work on this!
Depends on:
  Show dependency treegraph
Reported: 2008-06-06 20:18 UTC by Kevin Norris
Modified: 2011-01-25 01:09 UTC (History)
3 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Description Kevin Norris 2008-06-06 20:18:59 UTC
If I login via the secure server, I don't get logged in anywhere else.  I would just use the secure server, but meta and commons don't seem to have secure servers...

To reproduce:
0. have a global account on a Wikimedia wiki other than commons or meta
1. login via the secure server
2. see if you are logged in on meta or commons

No notice regarding being logged into other wikis.  You aren't logged in on meta or commons.

the notice you would get if you had logged in via any other wiki and the associated backend behaviors (i.e. you get logged into meta/commons)
Comment 1 Katie Chan 2008-06-07 00:11:14 UTC
The secure server URL for meta is <> and for commons is <>.

If you are logged into a global login site via secure server, then you are automatically logged into other global login site if you visit it via secure server, but not if you visit it via unsecure server, and vice versa.
Comment 2 Kevin Norris 2008-06-07 07:20:10 UTC
If that's the case, why doesn't it tell me I'm logged in elsewhere?  Whether it actually logs me in is one thing, whether it tells me is another.  On the unsecure server it gives a message like "logging you in on other sites..." or something similar.  No such notice is given on the secure server.  Furthermore, if the secure and insecure servers are that separate, a message to that effect should be given when logging in via the secure server.
Comment 3 Brion Vibber 2008-06-09 18:37:41 UTC
The logo images are a login hack necessary to login across domains. This isn't needed for, which is all on a single domain.
Comment 4 Kevin Norris 2008-06-10 01:40:51 UTC
OK... but they are also a usability thing.  I can't tell that I've been logged in globally unless I get at least a textual message saying so.
Comment 5 Brion Vibber 2008-06-10 19:20:42 UTC
Reopening with changed summary text to clarify the issue.
Comment 6 Andrew Garrett 2009-02-19 21:49:01 UTC
Fixed, r47516.

Note You need to log in before you can comment on or make changes to this bug.