Topic on Extension talk:LDAP Authentication/Archive 4

well, since the last CSRF Vulnerability forces an upgrade that breaks the login API, I was worried that the LdapAuthentification plugin may be broken with this update.

I'm not really proficient with php and/or mediawiki so I'm not sure that this extension uses the login API described in this bug.
Though it would make sense so I'm wondering: is the upgrade "safe" regarding the ldapauth extenion?

and if "yes" which version of this extension is "ready" for this new API?

regards.

Ugh. I haven't tested this, and I never use the API. I'll try to test this when I get a chance. If you have a non-production system, and have the chance to test it, let me know if it works.

Further looking at the bug, I don't see how this could affect authentication extensions. Core is handling this, not the authentication extensions. If your bot/client application is written to handle the change, everything should just work. In fact, the web form was already doing this.