= Wiki Infrastructure SOP

Managing our wiki.

== Contact Information

Owner::
  Fedora Infrastructure Team / Fedora Website Team
Contact::
https://chat.fedoraproject.org/#/room/#admin:fedoraproject.org
+
https://chat.fedoraproject.org/#/room/#websites:fedoraproject.org
Location::
  https://fedoraproject.org/wiki/
Servers::
  proxy[1-3] app[1-2,4]
Purpose::
  Provides our production wiki

== Description

Our wiki currently runs mediawiki.

[IMPORTANT]
====
Whenever you changes anything on the wiki (bugfix, configuration,
plugins, ...), please update the page at
https://fedoraproject.org/wiki/WikiChanges .
====

== Dealing with Spammers

If you find a spammer is editing pages in the wiki do the following:

[arabic]
. Admin disable their account in fas, add 'wiki spammer' as the comment
. Block their account in the wiki from editing any additional pages
. Go to the list of pages they've edited and rollback their changes -
one by one. If there are many get someone to help you.

== Obtaining token for wiki API

. Follow the guide
  xref:sysadmin_sops:ipsilon.adoc#generate-an-openid-connect-token[Generate an OIDC token in ipsilon]
  and call the script with
  `./scripts/generate-oidc-token <client_id> -e 365 -s https://fedoraproject.org/wiki/api`,
  where `client_id` should be unique identifier of the client using the API token
. Provide the json file with following structure to requester
+
[source,json]
----
{
  "<uuid of the ipsilon entry>": {
    "access_token": "<token from the script output>",
    "expires_at": <expires_at from script output>,
    "idp": "https://id.(stg.)fedoraproject.org/openidc/",
    "token_type": "Bearer",
    "scopes": ["openid", "https://fedoraproject.org/wiki/api"]
  }
}
----
+
This file should be saved in `~/.openidc/<some_name>.json` on client machine.
+
. Put the json file to `ansible-private/files/openidc/{production,staging}/` so we have it as
  well