PermissionManager::getUserRightStatus() shows the badaccess-reauthenticate message to indicate that the user needs to reauthenticate. The message has a link to reauthenticate, but the link does not include returnto/returntoquery parameters, making it annoying to use.
Description
Description
Details
Details
Related Changes in Gerrit:
| Subject | Author | Repo | Branch | Lines +/- | |
|---|---|---|---|---|---|
| Reauth: use returnto in link for perms errors | Mstyles | mediawiki/core | master | +32 -9 |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | None | T197160 All security-sensitive MediaWiki functionality should require elevated security | |||
| Resolved | Mstyles | T431290 Reauthentication link in permission errors does not use returnto |
Event Timeline
Comment Actions
While we are at it, would be nice to use ApiMessage like in https://gerrit.wikimedia.org/r/c/mediawiki/extensions/WikimediaCustomizations/+/1281818 so that the error shows up to API clients in a somewhat consistent way.
Comment Actions
Change #1309753 had a related patch set uploaded (by Mstyles; author: Mstyles):
[mediawiki/core@master] Reauth: use returnto in link for perms errors
Comment Actions
Change #1309753 merged by jenkins-bot:
[mediawiki/core@master] Reauth: use returnto in link for perms errors