]> 2026-04-30T03:59:03+02:00 FlexFormOpen 50000 en Doc 10 Trigger a FlexForm open action Developer FlexFormOpen (2.5) 2.5 FlexFormOpen 2026-02-23T14:12:15Z 2461095.0918403 FlexFormOpen 2026-02-23T14:37:51Z 2461095.1096181 Doc/FlexForm/2.5/API/FlexFormOpen 601 DevOps:Doc/FlexForm/2.0/CreateUser Name API Type FlexFormOpen (Available since 2.7.1) Synopsis Open FlexForm API endpoint for lightweight validation actions. Description The FlexFormOpen API provides limited, publicly accessible FlexForm functionality intended for frontend validation use cases. It does not require readapi-rights. Currently, the available actions are: canUserBeCreated – Checks whether a username can be created. This API is especially useful when implementing CreateUser forms. When paired with JavaScript, it allows real-time username validation (e.g., checking whether a username already exists or is invalid) before form submission. For security reasons, this API is disabled by default . To enable it, set the following configuration option: $wgFlexFormConfig [ 'allowFlexFormOpenAPI' ] = true ; Parameters ffAction – The FlexFormOpen action to execute. canUserBeCreated (required) additionalData – Additional data required for the action. For canUserBeCreated , this must contain the username to validate. (required) Action: canUserBeCreated Checks whether a username: Does not already exist Meets MediaWiki username validation requirements Can safely be created This action does not create the user. It only performs validation. Example (JavaScript) Example using MediaWiki's mw.Api(): var api = new mw . Api (); api . get ({ action : "FlexFormOpen" , ffAction : "canUserBeCreated" , additionalData : correctedUsername , formatversion : 2 }). done ( function ( data ) { if ( data . canUser === true ) { console . log ( "Username can be created." ); } else { console . log ( "Username cannot be created." ); } }); If the API is disabled via configuration (or default): { "error" : { "message" : "FlexFormOpen API is disabled." } } Security Considerations Because this API does not require authentication, it is disabled by default. It is strongly recommended to: Only enable it when necessary Implement frontend throttling or rate limiting if heavy usage is expected Avoid exposing sensitive validation logic Future Improvements In future versions, an optional attribute may be introduced on FlexForm input fields that automatically performs username validation without requiring custom JavaScript. 50000 0 plainlist 1 [[:DevOps:Doc/FlexForm/2.5/API/FlexFormOpen]] Doc/FlexForm/2.5/API/FlexFormOpen# QUERY88614bf6e9243d0e364dbe53022b08f6 DevOps:Doc/FlexForm/1.1/API/FlexFormOpen 50000 en Doc/FlexForm/1.1/API/FlexFormOpen REDI 102 en REDI