Diffusion Phorge (HEAD -> master) History

phorge/src/applications/auth
HEAD -> mastere81eff68e581000b0d14caa…

Apr 25 2018

1b24b486f58a Manage object mailKeys automatically in Mail instead of storing them on objects
Author
epriestley
Browse Repository
No Builds
No Audits

Feb 28 2018

94d340fcffab Include OAuth targets in "form-action" Content-Security-Policy
Author
epriestley
Browse Repository
No Builds
No Audits

ab579f251110 Never generate file download forms which point to the CDN domain, tighten "form…
Author
epriestley
Browse Repository
No Builds
No Audits

Feb 17 2018

05a4c55c52be Explicitly add rel="noreferrer" to all external links
Author
epriestley
Browse Repository
No Builds
No Audits

Feb 10 2018

653bc0fa019f Read lock all transaction edits
Author
epriestley
Browse Repository
No Builds
No Audits

Feb 8 2018

f090fa7426e4 Use object PHIDs for "Thread-Topic" headers in mail
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 25 2018

5529458e14eb Add test coverage for SSH key revocation
Author
epriestley
Browse Repository
No Builds
No Audits

deb754dfe173 Make SSH key revocation actually prevent adding the same key back
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 23 2018

bf2868c07016 Rename "PhabricatorPasswordHashInterface" to…
Author
epriestley
Browse Repository
No Builds
No Audits

3becd5a57c27 Add "bin/auth revoke --list" to explain what can be revoked
Author
epriestley
Browse Repository
No Builds
No Audits

21e415299f26 Mark all existing password hashes as "legacy" and start upgrading digest formats
Author
epriestley
Browse Repository
No Builds
No Audits

13ef5c6f2314 When administrators revoke SSH keys, don't include a "security warning" in the…
Author
epriestley
Browse Repository
No Builds
No Audits

026ec11b9d6b Add a rate limit for guessing old passwords when changing passwords
Author
epriestley
Browse Repository
No Builds
No Audits

abc030fa008b Move account passwords to shared infrastructure
Author
epriestley
Browse Repository
No Builds
No Audits

b8a515cb29d8 Bring new password validation into AuthPasswordEngine
Author
epriestley
Browse Repository
No Builds
No Audits

aa3b582c7b72 Remove "set password" from `bin/accountadmin` and let `bin/auth recover`…
Author
epriestley
Browse Repository
No Builds
No Audits

5a8a56f414fc Prepare the new AuthPassword infrastructure for storing account passwords
Author
epriestley
Browse Repository
No Builds
No Audits

bb12f4bab718 Add test coverage to the PasswordEngine upgrade workflow and fix a few bugs
Author
epriestley
Browse Repository
No Builds
No Audits

c280c85772a3 Consolidate password verification/revocation logic in a new…
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 22 2018

42e2cd9af02e Add a "--force" flag to `bin/auth revoke`
Author
epriestley
Browse Repository
No Builds
No Audits

9c00a437848c Add a more modern object for storing password hashes
Author
epriestley
Browse Repository
No Builds
No Audits

fa1ecb7f6612 Add a `bin/auth revoke` revoker for SSH keys
Author
epriestley
Browse Repository
No Builds
No Audits

39c3b10a2f21 Add a `bin/auth revoke` revoker for sessions
Author
epriestley
Browse Repository
No Builds
No Audits

7970cf058517 Add a `bin/auth revoke` revoker for temporary tokens
Author
epriestley
Browse Repository
No Builds
No Audits

Dec 26 2017

ad4db9b2f3f8 Separate "Set/Reset Password" from "Change Password"
Author
epriestley
Browse Repository
No Builds
No Audits

Dec 5 2017

4f8340c05f2b Restore the "Log In" menubar action
Author
epriestley
Browse Repository
No Builds
No Audits

Nov 28 2017

dc62d18b4736 Allow MFA enrollment before email verification
Author
epriestley
Browse Repository
No Builds
No Audits

ab0f61aa323d Tell users to "Wait Patiently" for admin account verification later in the…
Author
epriestley
Browse Repository
No Builds
No Audits

Oct 9 2017

5897294fa97e Add spelling TODOs
Author
Dmitri Iouchtchenko
Browse Repository
No Builds
No Audits

9bd6a3705559 Fix spelling
Author
Dmitri Iouchtchenko
Browse Repository
No Builds
No Audits

Sep 20 2017

3fbad684c142 More completely explain why we're refusing to send reset mail to an unverified…
Author
epriestley
Browse Repository
No Builds
No Audits

Aug 21 2017

39d19c33ec9c Redirect users back to where they added an SSH Key
Author
Chad Little
Browse Repository
No Builds
No Audits

Aug 2 2017

ba4b936dffce Use Log In vs. Login when it's a verb
Author
Chad Little
Browse Repository
No Builds
No Audits

May 30 2017

2c0dab055f73 Make "simple" a "button type", not a "color"
Author
epriestley
Browse Repository
No Builds
No Audits

Apr 14 2017

69053a40f947 Dirty the SSH key cache when usernames change
Author
epriestley
Browse Repository
No Builds
No Audits

Apr 6 2017

3d816e94dfbe Rename "PhabricatorHash::digest()" to "weakDigest()"
Author
epriestley
Browse Repository
No Builds
No Audits

d450a088906e Support HMAC+SHA256 with automatic key generation and management
Author
epriestley
Browse Repository
No Builds
No Audits

Apr 4 2017

873b39be8211 Remove PhabricatorFile::buildFromFileDataOrHash()
Author
epriestley
Browse Repository
No Builds
No Audits

45b386596e62 Make the Files "TTL" API more structured
Author
epriestley
Browse Repository
No Builds
No Audits

Mar 3 2017

8ce25838f541 Provide "bin/auth revoke" with a revoker for Conduit tokens
Author
epriestley
Browse Repository
No Builds
No Audits

Feb 22 2017

bf44210dc8f1 Reduce application search engine results list for Dashboards
Author
Chad Little
Browse Repository
No Builds
No Audits

Feb 17 2017

a778151f28c1 Fix errors found by PHPStan
Author
Jakub Vrana
Browse Repository
No Builds
No Audits

Feb 13 2017

8dd7b544fe0a Don't show an auth provider as enabled if it's still being created
Author
Austin McKinley
Browse Repository
No Builds
No Audits

Jan 21 2017

402b6473d809 Move Favorites and User menus to MenuBarExtensions
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 17 2017

6f5dab634db2 Redesign header menus and search
Author
Chad Little
Browse Repository
No Builds
No Audits

23721799fd0b Explicitly warn the user multiple times when they try to register an external…
Author
epriestley
Browse Repository
No Builds
No Audits

Dec 9 2016

9c72c1b1daa9 When rendering the "you were invited" header, query the inviting user with the…
Author
epriestley
Browse Repository
No Builds
No Audits

Dec 5 2016

0ad1dd640a09 Remove the Persona login method
Author
Eitan Adler
Browse Repository
No Builds
No Audits

Nov 17 2016

2befd239a85e Add session and request hooks to PhabricatorAuthSessionEngine
Author
epriestley
Browse Repository
No Builds
No Audits

Nov 15 2016

7097abbe570c Add a bunch of Phacility-specific code to the upstream, thinly veiled as…
Author
epriestley
Browse Repository
No Builds
No Audits

Nov 9 2016

706c21375e8f Remove empty implementations of `describeAutomaticCapabilities()`
Author
epriestley
Browse Repository
No Builds
No Audits

Oct 21 2016

c21a71f02489 Cache generation of the SSH authentication keyfile for sshd
Author
epriestley
Browse Repository
No Builds
No Audits

Sep 12 2016

2588b4fac0c1 Added initial class for displaying invisible chars
Author
Josh Cox
Browse Repository
No Builds
No Audits

Sep 6 2016

defee9385196 Add Slack authentication adapter
Author
Chad
Browse Repository
No Builds
No Audits

Aug 29 2016

60d1762a85ce Redesign Config Application
Author
Chad Little
Browse Repository
No Builds
No Audits

Aug 22 2016

15ed2b936c37 Update Config Application UI
Author
Chad Little
Browse Repository
No Builds
No Audits

Aug 18 2016

1cca7fbccef8 Simplify PHUIObjectItemList a bit
Author
Chad Little
Browse Repository
No Builds
No Audits

Aug 16 2016

95cf83f14ead Convert some whiny exceptions into quiet MalformedRequest exceptions
Author
epriestley
Browse Repository
No Builds
No Audits

Jul 26 2016

29d6e5fd4bae Use numeric input control for TOTP factor entry
Author
Daniel Stone
Browse Repository
No Builds
No Audits

Jul 23 2016

020df6f5cb80 Add a numeric input control for TOTP codes
Author
epriestley
Browse Repository
No Builds
No Audits

Jun 28 2016

ec8581ab629e Clean up redirect URIs for "Temporary Tokens" and "API Tokens" settings panels
Author
epriestley
Browse Repository
No Builds
No Audits

Jun 22 2016

2cb779575dd5 Split "Edit Blocking Tasks" into "Edit Parent Tasks" and "Edit Subtasks"
Author
epriestley
Browse Repository
No Builds
No Audits

Jun 16 2016

f9e31089386c Fix an issue with AuthProviderConfig handles
Author
epriestley
Browse Repository
No Builds
No Audits

Jun 7 2016

ffb50ef45d1b Require login for "Must Verify Email" controller
Author
epriestley
Browse Repository
No Builds
No Audits

abeab594486f Fix redirect to Password settings panel after "Reset Password" login
Author
epriestley
Browse Repository
No Builds
No Audits

814fa135b036 Centralize "this is the current user for the request" code
Author
epriestley
Browse Repository
No Builds
No Audits

Jun 6 2016

e1a9473eda04 Make auth provider autologin modular and implement it for all OAuth2 adapters
Author
epriestley
Browse Repository
No Builds
No Audits

Jun 5 2016

6f1053c206f1 Convert user profile images into a standard cache
Author
epriestley
Browse Repository
No Builds
No Audits

2b344b2bb500 Make caches misses throw by default intead of inline-generating
Author
epriestley
Browse Repository
No Builds
No Audits

Jun 2 2016

9180f429eb9f Provide a general-purpose, modular user cache for settings and other similar…
Author
epriestley
Browse Repository
No Builds
No Audits

May 19 2016

0fad3847271c Fix minor section formatting mishap in SSH key email
Author
epriestley
Browse Repository
No Builds
No Audits

6f6ca0102daa Send forced mail on SSH key edits
Author
epriestley
Browse Repository
No Builds
No Audits

da6b3de65c14 Use transactions to apply web UI SSH key edits
Author
epriestley
Browse Repository
No Builds
No Audits

08bea1d363fd Add ViewController and SearchEngine for SSH Public Keys
Author
epriestley
Browse Repository
No Builds
No Audits

May 18 2016

0308d580d7df Deactivate SSH keys instead of destroying them completely
Author
epriestley
Browse Repository
No Builds
No Audits

Apr 16 2016

eef217216116 When a user tries to regsiter while logged in, just send them home
Author
epriestley
Browse Repository
No Builds
No Audits

Apr 5 2016

46881c4ce507 Add a session engine extension point
Author
epriestley
Browse Repository
No Builds
No Audits

Apr 4 2016

e55522cade3f Implement "auth.logout" Conduit API method
Author
epriestley
Browse Repository
No Builds
No Audits

Mar 31 2016

6bbba1e3151d Update Auth for new UI
Author
Chad Little
Browse Repository
No Builds
No Audits

Mar 16 2016

6ef4747e9da5 Convert OAuth1 handshake tokens to new modular temporary tokens
Author
epriestley
Browse Repository
No Builds
No Audits

33a95d44bdc7 Formally modularize MFA/TOTP tokens, provide a module panel for temporary tokens
Author
epriestley
Browse Repository
No Builds
No Audits

a837c3d73eaf Make temporary token storage/schema more flexible
Author
epriestley
Browse Repository
No Builds
No Audits

8e3ea4e034eb Use new modular temporary auth token constants in one-time login and password…
Author
epriestley
Browse Repository
No Builds
No Audits

cf15e0de4386 Modularize temporary token types
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 28 2016

fe5cd4ca2c77 Move FontIcon calls to Icon
Author
Chad Little
Browse Repository
No Builds
No Audits

Jan 27 2016

36158dbdc081 Convert all calls to 'IconFont' to just 'Icon'
Author
Chad Little
Browse Repository
No Builds
No Audits

Jan 4 2016

08de131da525 Begin modularizing main menu items
Author
epriestley
Browse Repository
No Builds
No Audits

Dec 19 2015

8eec9e2c0ef2 Provide a more straightforward way to revoke SSH keys by finding and destroying…
Author
Nick Zheng
Browse Repository
No Builds
No Audits

Dec 17 2015

5d76a4b0a2f5 Improve handling of multiple edit forms when logged out
Author
epriestley
Browse Repository
No Builds
No Audits

e869e7df0b79 When logged-out users hit a "Login Required" dialog, try to choose a better…
Author
epriestley
Browse Repository
No Builds
No Audits

Dec 15 2015

6c4c93a091fa Allow login to be disabled for authentication providers
Author
epriestley
Browse Repository
No Builds
No Audits

Dec 2 2015

91447c54bce0 Write 500 words on how to restart webservers
Author
epriestley
Browse Repository
No Builds
No Audits

Nov 12 2015

e8fdf478bbc9 JIRA Integration: Link and/or Comment
Author
Aviv Eyal
Browse Repository
No Builds
No Audits

Nov 3 2015

1b00ef08a039 Remove some low-hanging buildStandardPageResponse() methods
Author
epriestley
Browse Repository
No Builds
No Audits

Nov 2 2015

c35b564f4d32 Various translation improvements
Author
Joshua Spence
Browse Repository
No Builds
No Audits

495cb7a2e037 Mark `PhabricatorPHIDType::getPHIDTypeApplicationClass()` as abstract
Author
Joshua Spence
Browse Repository
No Builds
No Audits

Oct 24 2015

59c931710100 Prevent mailing lists from being bin/auth recover'd
Author
epriestley
Browse Repository
No Builds
No Audits

b038041dc600 Prevent duplicate account links from being created by swapping logins and then…
Author
epriestley
Browse Repository
No Builds
No Audits

Oct 2 2015

9c798e5ccabb Provide `bin/garbage` for interacting with garbage collection
Author
epriestley
Browse Repository
No Builds
No Audits

Oct 1 2015

878a493301d2 Begin standardizing garbage collectors
Author
epriestley
Browse Repository
No Builds
No Audits