Include bot password app ID in audit data
authorGergő Tisza <tgr.huwiki@gmail.com>
Thu, 13 Dec 2018 00:51:25 +0000 (16:51 -0800)
committerGergő Tisza <gtisza@wikimedia.org>
Thu, 13 Dec 2018 19:18:17 +0000 (19:18 +0000)
commit07a27f19cf7651ffe792f5c57bb10fb296af7878
treec20e75fdb655130d9b57d78c6006d625c4b8d87a
parent50af36e359d170cc20eb30e97027e862c3d96c15
Include bot password app ID in audit data

Authentication audit logs should indicate whether a login is via the
normal password or a bot password (and which one). For failed logins
it could be included in the error message, and it usually is, but
for successful ones there is no message, so we'll send the app ID as
a new AuthManagerLoginAuthenticateAudit parameter.

Bug: T194338
Change-Id: I8aab48177b81a8e80dae118e6476a8f6a32089f1
Depends-On: Id482d2e2205960a0facd334e456d3a23bcad0ece
RELEASE-NOTES-1.33
docs/hooks.txt
includes/auth/AuthManager.php
includes/user/BotPassword.php