When a user attempts to create an account from a local or globally blocked IP or IP address range, we should collect the hCaptcha risk score from the hCaptcha token used in the account creation submission, and log this to the hcaptcha/risk_score event stream.
| Title | Reference | Author | Source Branch | Dest Branch | |
|---|---|---|---|---|---|
| hcaptcha/risk_score: Add account-creation block actions | repos/data-engineering/schemas-event-secondary!123 | kharlan | hcaptcha-createaccount-block-riskscore | master |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| In Progress | • hector.arroyo | T424629 [epic] WE4.10.5 hCaptcha risk scores for blocked edit notices | |||
| Open | kostajh | T427784 hCaptcha risk scores for blocked account creations |
kharlan opened https://gitlab.wikimedia.org/repos/data-engineering/schemas-event-secondary/-/merge_requests/123
hcaptcha/risk_score: Add account-creation block actions
Change #1295923 had a related patch set uploaded (by Kosta Harlan; author: Kosta Harlan):
[mediawiki/extensions/WikimediaEvents@master] hCaptcha: Log risk scores for blocked account creations
Change #1295924 had a related patch set uploaded (by Kosta Harlan; author: Kosta Harlan):
[mediawiki/extensions/ConfirmEdit@master] hCaptcha: Collect risk score for blocked account creations
dreamyjazz updated https://gitlab.wikimedia.org/repos/data-engineering/schemas-event-secondary/-/merge_requests/123
hcaptcha/risk_score: Add account-creation block actions
dreamyjazz merged https://gitlab.wikimedia.org/repos/data-engineering/schemas-event-secondary/-/merge_requests/123
hcaptcha/risk_score: Add account-creation block actions
Change #1295923 merged by jenkins-bot:
[mediawiki/extensions/WikimediaEvents@master] hCaptcha: Log risk scores for blocked account creations
Change #1297069 had a related patch set uploaded (by Kosta Harlan; author: Kosta Harlan):
[mediawiki/extensions/ConfirmEdit@wmf/1.47.0-wmf.5] hCaptcha: Collect risk score for blocked account creations
Change #1297069 merged by jenkins-bot:
[mediawiki/extensions/ConfirmEdit@wmf/1.47.0-wmf.5] hCaptcha: Collect risk score for blocked account creations
Mentioned in SAL (#wikimedia-operations) [2026-06-03T09:19:58Z] <kharlan@deploy1003> Started scap sync-world: Backport for [[gerrit:1297069|hCaptcha: Collect risk score for blocked account creations (T427784)]]
Mentioned in SAL (#wikimedia-operations) [2026-06-03T09:21:51Z] <kharlan@deploy1003> kharlan: Backport for [[gerrit:1297069|hCaptcha: Collect risk score for blocked account creations (T427784)]] synced to the testservers (see https://wikitech.wikimedia.org/wiki/Mwdebug). Changes can now be verified there.
Mentioned in SAL (#wikimedia-operations) [2026-06-03T09:27:25Z] <kharlan@deploy1003> Finished scap sync-world: Backport for [[gerrit:1297069|hCaptcha: Collect risk score for blocked account creations (T427784)]] (duration: 07m 26s)
Change #1295924 merged by jenkins-bot:
[mediawiki/extensions/ConfirmEdit@master] hCaptcha: Collect risk score for blocked account creations
@kostajh How can I see this working? Should I see anything on the browser-side or is it all server-side?