🥸 Remove X-Authenticated-User response header if the request came from an anonymous user
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Jakob_WMDE
	Oct 2 2024, 9:57 AM

Details

	Subject	Repo	Branch	Lines /-
	REST: Remove auth response header for temp users	mediawiki/extensions/Wikibase	master	167 -96

Status	Assigned	Task
		Restricted Task
Resolved	kostajh	T294511 2021 Security Team wikireplicas audit
Declined	None	T284948 Raw IPs of logged-out users disclosed in wiki-replicas
In Progress	Niharika	T324492 Temporary accounts - MVP
Open	None	T326816 [Epic] Update features for temporary accounts
Open	None	T326908 Update WMDE Engineering-owned products that may be affected by IP Masking
Resolved	Arian_Bozorg	T351968 Update Wikidata-related extensions for IP Masking
Resolved	Arian_Bozorg	T355076 Adjust Wikibase repo to not leak IPs when editing and IP masking is enabled
Resolved	Ifrahkhanyaree_WMDE	T374596 🥸 Wikibase REST API does not fully support temporary accounts
Resolved	Jakob_WMDE	T376261 🥸 Remove X-Authenticated-User response header if the request came from an anonymous user

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptOct 2 2024, 9:57 AM

Change #1077973 had a related patch set uploaded (by Jakob; author: Jakob):

[mediawiki/extensions/Wikibase@master] REST: Remove auth response header for temp users

Change #1077973 merged by jenkins-bot:

[mediawiki/extensions/Wikibase@master] REST: Remove auth response header for temp users