Last modified: 2013-11-27 00:38:42 UTC
$wgPersonaLoginAnywhere turns on having the Persona login button on every page in the Personal URLs section, rather than just having a button on the login page. However, when $wgSecureLogin is enabled, all logins must be over HTTPS. Right now this is handled poorly: if the user is on HTTP and clicks the Persona login button, they go through the whole login process just to get an API error. Unfortunately, there's really no way to make it work completely, but there are a couple of options: 1) Throw a configuration error if a sysadmin tries to have $wgSecureLogin turned on, $wgPersonaLoginAnywhere turned on, and $wgServer with non-HTTPS as the scheme 2) Automatically redirect all users to HTTPS (probably the less friendly option)
