Last modified: 2011-01-25 01:09:20 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T16450, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 14450 - Login on secure server is global but doesn't tell you so
Login on secure server is global but doesn't tell you so
Status: RESOLVED FIXED
Product: MediaWiki extensions
Classification: Unclassified
CentralAuth (Other open bugs)
unspecified
All All
: Normal normal (vote)
: ---
Assigned To: Nobody - You can work on this!
http://secure.wikimedia.org/wikipedia...
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2008-06-06 20:18 UTC by Kevin Norris
Modified: 2011-01-25 01:09 UTC (History)
3 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description Kevin Norris 2008-06-06 20:18:59 UTC
If I login via the secure server, I don't get logged in anywhere else.  I would just use the secure server, but meta and commons don't seem to have secure servers...

To reproduce:
0. have a global account on a Wikimedia wiki other than commons or meta
1. login via the secure server
2. see if you are logged in on meta or commons

Actual:
No notice regarding being logged into other wikis.  You aren't logged in on meta or commons.

Expected:
the notice you would get if you had logged in via any other wiki and the associated backend behaviors (i.e. you get logged into meta/commons)
Comment 1 Katie Chan 2008-06-07 00:11:14 UTC
The secure server URL for meta is <https://secure.wikimedia.org/wikipedia/meta/wiki/Main_Page> and for commons is <https://secure.wikimedia.org/wikipedia/commons/wiki/Main_Page>.

If you are logged into a global login site via secure server, then you are automatically logged into other global login site if you visit it via secure server, but not if you visit it via unsecure server, and vice versa.
Comment 2 Kevin Norris 2008-06-07 07:20:10 UTC
If that's the case, why doesn't it tell me I'm logged in elsewhere?  Whether it actually logs me in is one thing, whether it tells me is another.  On the unsecure server it gives a message like "logging you in on other sites..." or something similar.  No such notice is given on the secure server.  Furthermore, if the secure and insecure servers are that separate, a message to that effect should be given when logging in via the secure server.
Comment 3 Brion Vibber 2008-06-09 18:37:41 UTC
The logo images are a login hack necessary to login across domains. This isn't needed for secure.wikimedia.org, which is all on a single domain.
Comment 4 Kevin Norris 2008-06-10 01:40:51 UTC
OK... but they are also a usability thing.  I can't tell that I've been logged in globally unless I get at least a textual message saying so.
Comment 5 Brion Vibber 2008-06-10 19:20:42 UTC
Reopening with changed summary text to clarify the issue.
Comment 6 Andrew Garrett 2009-02-19 21:49:01 UTC
Fixed, r47516.

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links