Reject authentication data change when there are warnings
authorGergő Tisza <gtisza@wikimedia.org>
Tue, 7 Jun 2016 16:15:12 +0000 (16:15 +0000)
committerAnomie <bjorsch@wikimedia.org>
Tue, 7 Jun 2016 17:24:18 +0000 (17:24 +0000)
commitd850025e603fc6f2bec3a80cdd17c027d8813341
treee98d42f68747e4e517a54639923cc35ee5ae00be
parent3e51626fb8bdafb0dd743d2b6a34e6246ff6d4b5
Reject authentication data change when there are warnings

AuthManager uses a status which is OK but not good for authentication
data which is discouraged but still accepted for authentication.
Users should not be allowed to change credentials into such invalid state.
This change brings the web logic and the AuthPlugin fallback in sync with
the API which already used the stricter check.

Change-Id: I4ff54fcc901f6fe11f15ed60fc1a3d8753de9f6c
includes/Preferences.php
includes/auth/AuthManagerAuthPlugin.php
includes/specialpage/AuthManagerSpecialPage.php
includes/user/User.php