Extension talk:Ticket Authentication/Flow

Previous page history was archived for backup purposes at Extension talk:Ticket Authentication/LQT Archive 1 on 2015-06-25.

Hi, i have joined new job, they were using MediaWiki for so long. My task was to upgrade the MediaWiki from 1.27 to 1.35. After upgrading , I found that TicketAuthentication extension is archived. This extension is used for to authenticate the MediaWiki user from external website.

I don't even have an idea how they were using this extension. all i did is to copy the extension into new server. but didn't work.

Can someone help please to update the extension ?

Is there any alternative of Ticket Authentication extension and how can i implement it into MediaWiki 1.35.

Thanks in advance,

For new users, wfRunHooks no longer exists in 1.32

Also for some old users, was getting an erroneous "TicketAuth: User's account with this login name already exists and it was not created by TicketAuth. Can't authenticate"

The first issue seems to be resolved by changing the function call of wfRunHooks to Hooks::run. May try deleting the broken users for the second issue

Hi, I'm upgrading MediaWiki from 1.27 to 1.32.

When I run "php maintenance/update.php", the script returns this error:

I've downloaded the latest versione of TicketAuth, but the zip file doesn't contain the JSON

A user account is created and authenticated correctly, but the user cannot sign in from the login page because the new account does not have the password saved at all. The corresponding password field in the user table in the db is empty. $wgPasswordSalt is not set.

Looks like Ticket Authentication tries to update the db directly using User->saveSettings, however v1.27 no longer allows the password to be saved this way (actively looks for a removes the password field from account creation params).

Thank you for this extension.

I encountered a bug where if the user logs out, a later log in action fails due to some user data persisting. I fixed it by changing this:

if ( strcmp( $capitalizedUsername, $wgRequest->getCookie( 'UserName' ) ) == 0 )
   return false;
if ( strcmp( $capitalizedUsername, $wgRequest->getSessionData( 'wsUserName' ) ) == 0 )
   return false;

into this:

if ($wgUser->isLoggedIn())
   return false;

Thank you!

Hello,

When you activate TicketAuth and you go in the page: http://my.host.com/wiki/index.php?title=Special%3AUserRights&user=Bertrand+Gorge

It fails because the "user" is recognized by TicketAuth and it tries to connect.

We suggest the following change to the top lines of the code:

        $username = $wgRequest->getVal( 'user' );
        $sign = $wgRequest->getVal( 'sign' );
        $time = $wgRequest->getVal( 'time' );
        if ( $username == null || $username == '' ||
	     $sign == null || $sign == '' ||
	     $time == null || $time == '' )
                return false;

instead of

        $username = $wgRequest->getVal( 'user' );
        if ( $username == null || $username == '')
                return false;

Ok, that's a good idea. I'll correct this in next version.

Hello,

I'm using your extension, thanks for your job !

I had to modify the file "/extensions/TicketAuth/TicketAuth.php" because the user lost his connection on the next page.

Line 149 -> 152

	// We need to start the session to log the user
	if ( session_id() == '' ) {
		wfSetupSession();
	}

Thank you, it's a good idea.