Page MenuHomePhabricator

CentralAuth: Autologin fails half-way on wikimania2009 – wikimania2012 (Access-Control-Allow-Origin mismatch)
Closed, DeclinedPublic

Description

Accessing http://wikimania2012.wikimedia.org/wiki/MediaWiki:Gadget-popups.js gives me a notification:

Central login
You are centrally logged in. Reload
the page to apply your user settings

But the user portlet stays unchanged. Console shows:

XMLHttpRequest cannot load https://wikimania2012.wikimedia.org/wiki/Special:CentralAutoLogin/toolslist?returnto=MediaWiki%3AGadget-popups.js&returntoquery=. No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://wikimania2012.wikimedia.org' is therefore not allowed access.


Version: unspecified
Severity: normal

Details

Reference
bz62880

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 22 2014, 3:06 AM
bzimport set Reference to bz62880.
bzimport added a subscriber: Unknown Object (MLST).

I can still reproduce this.

Logged in via mediawiki.org.

Accessing http://wikimania2012.wikimedia.org/wiki/MediaWiki:Example

XMLHttpRequest cannot load https://wikimania2012.wikimedia.org/wiki/Special:CentralAutoLogin/toolslist?returnto=MediaWiki%3AExample&returntoquery=. No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://wikimania2012.wikimedia.org' is therefore not allowed access.

  • Bug 64068 has been marked as a duplicate of this bug. ***

Change 148646 had a related patch set uploaded (by Xqt; owner: Ricordisamoa):
[pywikibot/core@master] [script] port speedy_delete.py to core

https://gerrit.wikimedia.org/r/148646

Tgr subscribed.

We do not allow HTTP access anymore so this is not an issue. (I guess it could be for third-party wikis but we don't really support CentralAuth for third parties, so I don't think this is worth the effort fixing.)