Is Oauth2 currently enabled for major wikipedia?
Topic on Talk:OAuth/For Developers
No, Extension:OAuth implements OAuth 1.0a and is the only OAuth solution available on the Wikimedia wikis.
I am just curious, why not?
Csteipp, are you out there somewhere?
@Deskana, @BJorsch (WMF), or @Aaron Schulz might remember if there is a Phabricator task (would be an import from Bugzilla) or wiki page somewhere with the design decisions that led to picking 1.0a instead of 2.x. I have vague recollections, but 6 years ago was a long time and I was a n00b to the team and not directly a part of the project.
Lucky coincidence I happened to notice the notification on the staff account I seldom use.
IIRC, it's mainly because OAuth 2 didn't seem to have real advantages over 1.0a for the use cases we anticipated supporting, while being a more complex specification and more or less encouraging incompatible implementations.
https://hueniverse.com/oauth-2-0-and-the-road-to-hell-8eec45921529 may also be a useful read.
On the other hand, there is a task (T229500) to create an OAuth 2 extension. I don't know whether it'll actually go anywhere.
mediawiki as oauth server , phabricator as consumer,
how to add mediawiki oauth provider in phabricator ?