Add Wikipedia authentication

[AleZena]

I think it should be great let the wikipedia folks use their account for OpenStreetMap authentication

[tomhughes]

Do wikipedia actually offer an external authentication service?

[tomhughes]

I don't see them listed in the OmniAuth strategy list at https://github.com/intridea/omniauth/wiki/List-of-Strategies so I'm guessing they don't.

[timwaters]

I have not added it to the OmniAuth wiki but am the author of https://github.com/timwaters/omniauth-mediawiki/ https://rubygems.org/gems/omniauth-mediawiki

[tomhughes]

@timwaters But does wikipedia have Extension:OAuth installed?

[timwaters]

@tomhughes I believe so. You'd need to get the token via meta.wikimedia.org. You can specify just the project (en.wikipedia.org or commons.wikimedia.org) or all projects.

However the consumer application needs to be manually approved via the wikimedia admins - but you can still use it in development mode by the user who proposed the consumer.

https://en.wikipedia.org/wiki/Special:OAuthListConsumers lists all existing consumers.

[nemobis]

You can find more information on https://www.mediawiki.org/wiki/OAuth/For_Developers ; cc @Stype, @tgr in case they have something to add.

[tomhughes]

The one thing I noticed is that most, if not all, of the existing consumers are wikipedia related so I'm not sure whether they accept a request from somebody wanting to use it for third party authentication.

[Stype]

@tomhughes, that is an unfortunate side effect, not the intent. I'd love to see more open-source projects use us for authentication / identity. If you have any issues getting setup, let me know.

[CristianCantoro]

I have asked on the wikimedia-labs channel or IRC and I have been told that OAuth has an "authenticationonly" feature that can be used for this purpose. See this example. More info on mediawiki.org Extension:OAuth#Identify the User (optional)

[timwaters]

I'd agree with Tom - compared to other OAuth providers, it currently does not seem to be primarily aimed towards the "authentication only" route used by Omniauth - the manual approval also points towards that (but it is a reasonably new addition to the mediawiki suite, so it could be early days).

However, when applying for a new OAuth consumer, the rights can be set to just authentication. I'll ping some WMF folks on IRC and see what they think, I'd love it if it was set to become a new authentication option for more web applications!

(edits - clarity)

[CristianCantoro]

@timwaters I have just done that, see my comment above, but feel free to follow up :)

[nemobis]

Tim Waters, 04/02/2016 19:06:

However, when applying for a new OAuth consumer, the rights can be set
to just authentication. I'll ping some WMF folks on IRC and see what
they think, I'd love it if it was set to become a new authentication
option for more web applications!

The current proposal is to make the authentication-only apps be
autoapproved.
https://meta.wikimedia.org/wiki/Talk:Requests_for_comment/OAuth_handover#Reduce_number_of_total_requests

[MaxSem]

Maps are already available on some WMF sites and might go to Wikipedia soon. We want to point users to osm.org for fixing data issues and therefore having an easy way for them to log in is getting more and more important. Please let us know if we can help make it happen.