Thank you Brad, And if I can summarize this announce with a bit of irony over our whole IT world:
"How to rise problems to the world just changing 2 little... tender... chars. Try with 'Set-Cookie' → 'set-cookie' :^) Happy hacking and thank you again On April 8, 2020 6:31:34 PM GMT+02:00, "Brad Jorsch (Anomie)" <bjor...@wikimedia.org> wrote: >Since April 2010,[1] when no lgtoken is passed to the Action API >action=login it will return a "NeedToken" response including the token >to >use. While this method of fetching the login token was deprecated in >January 2016,[2] it is still present for the benefit of clients that >have >not yet been updated and is not (yet) being removed. > >The NeedToken response was also being returned when an lgtoken was >supplied >but could not be validated due to session loss. While this made sense >back >in 2010 when the NeedToken response was the only way to fetch the login >token, these days it is mainly confusing[3] and a way for clients with >broken cookie handling to wind up in a loop. > >With the merge of Gerrit change 586448,[4] the API will no longer >return >NeedToken when lgtoken was supplied. If the token cannot be validated >due >to session loss, a "Failed" response will be returned with a message >referring to session loss as the problem. > >This change should be deployed to Wikimedia sites with 1.35.0-wmf.28 or >later, see https://www.mediawiki.org/wiki/MediaWiki_1.35/Roadmap for a >schedule. > >Note that the change HAS NOT been deployed to Wikimedia sites as of the >time of this email. If your client's ability to log in broke on 6 April >2020, the cause is most likely an unrelated change to Wikimedia's >infrastructure that caused some HTTP headers to be output with HTTP/2 >standard casing, i.e. "set-cookie" rather than the traditional >"Set-Cookie". See https://phabricator.wikimedia.org/T249680 for details >and >further discussion of that situation. > >[1]: https://www.mediawiki.org/wiki/Special:Code/MediaWiki/64677 >[2]: >https://lists.wikimedia.org/pipermail/mediawiki-api-announce/2016-January/000102.html >[3]: https://phabricator.wikimedia.org/T249526 >[4]: https://gerrit.wikimedia.org/r/c/mediawiki/core/+/586448 -- E-mail sent from the "K-9 mail" app from F-Droid, installed in my LineageOS device without proprietary Google apps. I'm delivering through my Postfix mailserver installed in a Debian GNU/Linux. Have fun with software freedom! [[User:Valerio Bozzolan]] _______________________________________________ Mediawiki-api mailing list Mediawiki-api@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-api
