Last modified: 2014-10-10 16:23:43 UTC

Wikimedia Bugzilla is closed!

Wikimedia has migrated from Bugzilla to Phabricator. Bug reports should be created and updated in Wikimedia Phabricator instead. Please create an account in Phabricator and add your Bugzilla email address to it.
Wikimedia Bugzilla is read-only. If you try to edit or create any bug report in Bugzilla you will be shown an intentional error message.
In order to access the Phabricator task corresponding to a Bugzilla report, just remove "static-" from its URL.
You could still run searches in Bugzilla or access your list of votes but bug reports will obviously not be up-to-date in Bugzilla.
Bug 71888 - OAuth dialog text is unclear and sounds more scary than it is
OAuth dialog text is unclear and sounds more scary than it is
Status: NEW
Product: MediaWiki extensions
Classification: Unclassified
OAuth (Other open bugs)
All All
: Normal normal (vote)
: ---
Assigned To: Nobody - You can work on this!
Depends on:
Blocks: messages
  Show dependency treegraph
Reported: 2014-10-09 16:51 UTC by Quim Gil
Modified: 2014-10-10 16:23 UTC (History)
5 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---

OAuth dialog screenshot (130.15 KB, image/png)
2014-10-09 16:52 UTC, Quim Gil

Description Quim Gil 2014-10-09 16:51:01 UTC
Copied from

"New attempt, now I got a "phabricator-production would like to have basic access on your behalf on all projects of this site" confirmation request, and declined, because I didn't know why something wants to impersonate my account."

I'm attaching a screenshot.

While I had created two Phabricator accounts accepting that dialog without even reading it properly, I reckon that such text is unclear and likely to scare off (or simply drive away) many users.

It sounds as if phabricator-production would edit wiki pages and what not on your name, whan actually the only thing it wants to do is to read your username and perhaps your email address (need to confirm this), and it will not touch anything "on your behalf on all projects of this site".

Can we provide something closer to the truth, as mobile apps are getting us used?

"Hi $username,

$provider would like to access to your username (and anything else it is accessing as well) in this site.

Cancel   Allow"
Comment 1 Quim Gil 2014-10-09 16:52:24 UTC
Created attachment 16735 [details]
OAuth dialog screenshot
Comment 2 Quim Gil 2014-10-09 17:03:13 UTC
Equivalent Phabricator task:

Note You need to log in before you can comment on or make changes to this bug.