Page MenuHomePhabricator

Logging in using a temporary password is reported as "incorrect password"
Closed, ResolvedPublic

Description

"Temporary password" as in Special:PasswordReset.

I guess it's some upstream bug.


Version: Alpha
Severity: normal

Event Timeline

bzimport raised the priority of this task from to Needs Triage.Nov 22 2014, 3:12 AM
bzimport set Reference to bz65857.
bzimport added a subscriber: Unknown Object (MLST).

This is somewhat intentional, see T22233. I wouldn't be opposed to returning a distinct error code (e.g. "ResetPass"), but this should remain an error condition.

Aklapper subscribed.

Change 265201 had a related patch set uploaded (by Anomie):
WIP: API changes for AuthManager

https://gerrit.wikimedia.org/r/265201

This is somewhat intentional, see T22233. I wouldn't be opposed to returning a distinct error code (e.g. "ResetPass"), but this should remain an error condition.

The point behind T22233 is that the API is not some user facing entry point but it's no longer true with the app or maybe more in the future.

Change 265201 merged by jenkins-bot:
API changes for AuthManager

https://gerrit.wikimedia.org/r/265201

Anomie claimed this task.

This is resolved now with the introduction of AuthManager, and specifically API action=clientlogin which uses the same backend code that the new SpecialUserLogin uses to do authentication.

There's no timeframe for when this will be available on WMF wikis, though, beyond "soon". The next step will be to resolve T110282, then a gradual deploy while watching for things to break.

Change 289122 had a related patch set uploaded (by Gergő Tisza):
API changes for AuthManager

https://gerrit.wikimedia.org/r/289122

Change 289122 merged by jenkins-bot:
API changes for AuthManager

https://gerrit.wikimedia.org/r/289122