[02:38:28] I'm running into such a weird issue with markblocked... for some reason Safari is blocking a bunch of the requests it makes to meta's api grabbing each user's blocked status saying that the access control allow origin doesn't allow enwp, except 1) the first API request in the batch gets through without problems, 2) the requests work fine in Firefox, 3) MITMing and looking at the preflights I can confirm (shocker) that its CORS is set [02:38:28] correctly, 4) Safari actually is sending the GETs after the preflights, and the responses for the reqeusts that it's saying didn't go through are all API errors saying that the centralauthtoken is not valid despite it being the same in every request and the first request going through fine. [02:42:15] though it seems like for some reason Firefox is including the centauth token as a cookie while Safari is sending it as a query param?? wat??? [02:45:45] o wait this is GN's mark-locked.js instead of markblocked [03:01:04] Ah! Because for some reason the centralauth_Token cookie isn't getting set in Safari, which seems to stop happening if I disable "Prevent cross-site tracking"... but what is actually setting that cookie [03:03:37] ah that's just _the_ centural auth token cookie. Hmm. But why does Safari block it cross-site; it's samiesite attribute is set to none... [03:21:34] bruh https://bugs.webkit.org/show_bug.cgi?id=292975 [03:23:34] The issue is that it's just Safari blocks all 3rd party cookies period so CHIPS or partitioned localstorage is how you're meant to work around this... but CHIPS support is temporarily disabled. I mean it's not like mediawiki supports CHIPS I don't think so meh [03:25:15] welp; thanks thanks channel of rubber ducks [03:36:12] Hm, I guess the weird thing still though is that the subsequent GET requests by Safari are being marked as with an invalid centralauthtoken after the first one is made. [22:09:30] Anyone interested in CR for https://gerrit.wikimedia.org/r/c/mediawiki/extensions/WSOAuth/+/1181287/3 - the new user-agent changes have totally broken this extension which is used by a lot of people, so it would be nice to get that merged quickly. I'm not sure how active the extension author is as I had to commit a separate fix for all the unit tests being broken [22:59:54] Are there any scheduled downtime now? Can't save any changes on Commons - high database server lag [23:06:47] nope but SRE is now aware [23:07:18] aah great! [23:07:51] did not hear anything, so created a Phab ticket just in case - but now that seems foolish since they are aware already