Steps to replicate the issue (include links if applicable):
- send a post request to https://zh.wikipedia.org/w/api.php with params:
- action: resetpassword
- format: json
- user: Example
- email: user@example.com
- token: <token>
What happens?:
{ "error": { "code": "invalidparammix", "info": "The parameters \"user\" and \"email\" can not be used together.", "docref": "See https://zh.wikipedia.org/w/api.php for API usage. Subscribe to the mediawiki-api-announce mailing list at <https://lists.wikimedia.org/postorius/lists/mediawiki-api-announce.lists.wikimedia.org/> for notice of API deprecations and breaking changes." }, "servedby": "[redacted]" }
What should have happened instead?:
Because of EPR, some accounts require both username and email to request a password reset. The API should allow user and email use together.