Manual:$wgChangeCredentialsBlacklist
| Authentication: $wgChangeCredentialsBlacklist | |
|---|---|
| List of AuthenticationRequest class names which are not changeable through Special:ChangeCredentials and the changeauthenticationdata API. |
|
| Introduced in version: | 1.27.0 (Gerrit change 240052; git #3617c982) |
| Removed in version: | Still in use |
| Allowed values: | (array) |
| Default value: | see below |
| Other settings: Alphabetical | By function | |
Details
List of AuthenticationRequest class names which are not changeable through Special:ChangeCredentials and the changeauthenticationdata API. This is only enforced on the client level; AuthManager itself (e.g. AuthManager::allowsAuthenticationDataChange calls) is not affected. Class names are checked for exact match (not for subclasses).
Default value
| MediaWiki version: | ≥ 1.43 |
$wgChangeCredentialsBlacklist = [
TemporaryPasswordAuthenticationRequest::class,
]
| MediaWiki versions: | 1.27 – 1.42 |
$wgChangeCredentialsBlacklist = [
\MediaWiki\Auth\TemporaryPasswordAuthenticationRequest::class,
]