View source for Блог:StasFomin/Connect Cocalc by OAuth with MediaWiki (MediaWiki4IntraNet)


;The Idea:
[http://cocalc.com CoCalc] ([https://github.com/belonesox/cocalc my fork]) is great service for scientific realtime collaboration (jupyter notebooks, latex editing, PDF articles sharing). But it is not suitable for creating Team Portal/Dashboard, and Team Knowledge Base. Lot of loosely connected projects, impossibility of consistenly linked/renamed pages, … 
So better to have MediaWiki (MediaWiki4IntraNet) + CoCalc with authorization on the MediaWiki. 
Additionaly to Content Features, this binging get interesting possibilities to Team Authorization.
For example, «extensions/LdapAuthentication» allows MediaWiki authenticate by LDAP, but is is not possible without radical patching, add LDAP Auth to Cocalc. 

So, how to do it.

For MediaWiki4IntraNet, install REL1_26 branch of our fork https://github.com/mediawiki4intranet/mediawiki-extensions-OAuth
(branch REL1_26 unusable and need patch).

Add this to LocalSettings:
<source lang="php">
$wgGroupPermissions['user']['mwoauthproposeconsumer'] = true;
$wgGroupPermissions['user']['mwoauthupdateownconsumer'] = true;
$wgGroupPermissions['user']['mwoauthmanageconsumer'] = true;
$wgGroupPermissions['user']['mwoauthsuppress'] = true;
$wgGroupPermissions['user']['mwoauthviewsuppressed'] = true;
$wgGroupPermissions['user']['mwoauthviewprivate'] = true;
$wgGroupPermissions['user']['mwoauthmanagemygrants'] = true;
</source>

----

=== Register new client === 
… /Special:OAuthConsumerRegistration/propose

[[File:Connect Cocalc by OAuth with MediaWiki (MediaWiki4IntraNet)_2022-03-29_18-24-23_image0.png|center|640px]]

* Record consumer key and secret «You have been assigned a consumer token of xxxx and a secret token of yyyy. Please record these for future reference».

… /Special:OAuthConsumerRegistration/list

[[File:Connect Cocalc by OAuth with MediaWiki (MediaWiki4IntraNet)_2022-03-29_21-05-59_image0.png|center|640px]]


… /Special:OAuthManageConsumers

[[File:Connect Cocalc by OAuth with MediaWiki (MediaWiki4IntraNet)_2022-03-29_21-08-04_image0.png||400px]]

… /Special:OAuthManageConsumers/proposed

[[File:Connect Cocalc by OAuth with MediaWiki (MediaWiki4IntraNet)_2022-03-29_21-09-59_image0.png||400px]]

… Find appropriate row in table «oauth_register», column «oarc_grants» insert in cell rights:
<pre>
["authonly", "authonlyprivate"]
</pre>

;Todo: Why where is not frontend interface for doing so? May be need patch.


=== Install Cocalc ===
* https://github.com/belonesox/cocalc   branch «belonesox-stable» or «belonesox-oauth1».
* Go to PostgresQL database «SMC», table «passport_settings»
* add row with «oauth1» key, and value like this