Manual:$wgChangeCredentialsBlacklist

Authentication: $wgChangeCredentialsBlacklist
List of AuthenticationRequest class names which are not changeable through Special:ChangeCredentials and the changeauthenticationdata API.
Introduced in version:	1.27.0 (Gerrit change 240052; git #3617c982)
Removed in version:	Still in use
Allowed values:	(array)
Default value:	see below
Other settings: Alphabetical | By function

Details

List of AuthenticationRequest class names which are not changeable through Special:ChangeCredentials and the changeauthenticationdata API. This is only enforced on the client level; AuthManager itself (e.g. AuthManager::allowsAuthenticationDataChange calls) is not affected. Class names are checked for exact match (not for subclasses).

Default value

MediaWiki version:

≥ 1.43

$wgChangeCredentialsBlacklist = [
	TemporaryPasswordAuthenticationRequest::class,
]

MediaWiki versions:

1.27 – 1.42

$wgChangeCredentialsBlacklist = [
	\MediaWiki\Auth\TemporaryPasswordAuthenticationRequest::class,
]

See also

• $wgRemoveCredentialsBlacklist