Diffusion Phorge (HEAD -> master) History

phorge/src/applications/auth
HEAD -> mastere81eff68e581000b0d14caa…

Aug 4 2014

95eeffff7e5d Terminate other sessions on credential changes
Author
epriestley
Browse Repository
No Builds
No Audits

e56dc8f29986 Invalidate outstanding password reset links when users adjust email addresses
Author
epriestley
Browse Repository
No Builds
No Audits

30f6405a8654 Add an explicit temporary token management page to Settings
Author
epriestley
Browse Repository
No Builds
No Audits

Aug 2 2014

49bd5721c5a7 Use standard infrastructure for Feed in Audit
Author
epriestley
Browse Repository
No Builds
No Audits

Jul 23 2014

97a8700e4589 Rename `PHIDType` classes
Author
Joshua Spence
Browse Repository
No Builds
No Audits

0c8f487b0fa7 Implement the `getName` method in `PhabricatorApplication` subclasses
Author
Joshua Spence
Browse Repository
No Builds
No Audits

Jul 22 2014

86c399b65783 Rename `PhabricatorApplication` subclasses
Author
Joshua Spence
Browse Repository
No Builds
No Audits

f4b05312cdf5 Fix broken references to auth adapters
Author
Joshua Spence
Browse Repository
No Builds
No Audits

701bb2ac6ec9 Rename auth classes for consistency
Author
Joshua Spence
Browse Repository
No Builds
No Audits

Jul 21 2014

8999a1c1ea55 Utilize `PhutilMethodNotImplementedException`
Author
Joshua Spence
Browse Repository
No Builds
No Audits

254542237a66 Simplify the implementation of `PhabricatorPHIDType` subclasses
Author
Joshua Spence
Browse Repository
No Builds
No Audits

Jul 15 2014

7ac5abb97934 Recover from a broken external OAuth2 account
Author
Evan Priestley
Browse Repository
No Builds
No Audits

Jul 10 2014

e46826ad364d Introduce CAN_EDIT for ExternalAccount, and make CAN_VIEW more liberal
Author
epriestley
Browse Repository
No Builds
No Audits

Jun 28 2014

0398559c8e25 Support Bitbucket as an auth provider in Phabricator
Author
epriestley
Browse Repository
No Builds
No Audits

2d36afeaab7c Manage OAuth1 request token secrets in core OAuth1 workflow
Author
epriestley
Browse Repository
No Builds
No Audits

Jun 23 2014

46d9bebc8430 Remove all `device = true` from page construction
Author
epriestley
Browse Repository
No Builds
No Audits

Jun 9 2014

d0128afa2908 Applied various linter fixes.
Author
Joshua Spence
Browse Repository
No Builds
No Audits

0a62f13464b8 Change double quotes to single quotes.
Author
Joshua Spence
Browse Repository
No Builds
No Audits

Jun 3 2014

99c72a32d041 Allow installs to require multi-factor authentication for all users
Author
epriestley
Browse Repository
No Builds
No Audits

83112cc2e8c7 Move email verification into PhabricatorUserEditor
Author
epriestley
Browse Repository
No Builds
No Audits

6df1a024137c (Redesign) Clean up older "Tile" code
Author
epriestley
Browse Repository
No Builds
No Audits

May 29 2014

81d95cf682a5 Make default view of "Applications" app a full-page launcher
Author
epriestley
Browse Repository
No Builds
No Audits

May 22 2014

f1534e6feb6a Make password reset emails use one-time tokens
Author
epriestley
Browse Repository
No Builds
No Audits

May 20 2014

cac61980f904 Add "temporary tokens" to auth, for SMS codes, TOTP codes, reset codes, etc
Author
epriestley
Browse Repository
No Builds
No Audits

May 16 2014

43d45c49568a can now tell phabricator you trust an auth provider's emails (useful for Google…
Author
Tal Shiri
Browse Repository
No Builds
No Audits

May 13 2014

0120388a7516 Found some missing icons
Author
Chad Little
Browse Repository
No Builds
No Audits

May 12 2014

b2f3001ec4be Replace Sprite-Icons with FontAwesome
Author
Chad Little
Browse Repository
No Builds
No Audits

dfcccd4cb882 Add config to require real name, respect config when creating new users, drop…
Author
lkassianik
Browse Repository
No Builds
No Audits

May 8 2014

0da22abdb5f8 WordPress.com OAuth2 plugin
Author
Ashish SHUKLA
Browse Repository
No Builds
No Audits

May 1 2014

a04e138ae247 Minor cleanup of some session code
Author
epriestley
Browse Repository
No Builds
No Audits

e14695821758 Generate QR codes for TOTP tokens
Author
epriestley
Browse Repository
No Builds
No Audits

50376aad04d2 Require multiple auth factors to establish web sessions
Author
epriestley
Browse Repository
No Builds
No Audits

e8cebb7da5a4 Add support for aural-only and visual-only elements
Author
epriestley
Browse Repository
No Builds
No Audits

Apr 30 2014

3fde02004968 Make many actions require high security
Author
epriestley
Browse Repository
No Builds
No Audits

23e654ec2bc8 Rate limit multi-factor actions
Author
epriestley
Browse Repository
No Builds
No Audits

535cfa3ebebe Add `bin/auth list-factors` and `bin/auth strip` to remove multi-factor auth
Author
epriestley
Browse Repository
No Builds
No Audits

Apr 28 2014

a017a8e02b51 Make two-factor auth actually work
Author
epriestley
Browse Repository
No Builds
No Audits

17709bc1674e Add multi-factor auth and TOTP support
Author
epriestley
Browse Repository
No Builds
No Audits

Apr 27 2014

3f5a55fa6e5a Let users review their own account activity logs
Author
epriestley
Browse Repository
No Builds
No Audits

f42ec84d0c6b Add "High Security" mode to support multi-factor auth
Author
epriestley
Browse Repository
No Builds
No Audits

Apr 22 2014

11fd6afeb10e Move Timeline icons to Fonts
Author
Chad Little
Browse Repository
No Builds
No Audits

Apr 11 2014

499f66963d2b Minor, fix the scoping of a static variable
Author
epriestley
Browse Repository
No Builds
No Audits

Apr 9 2014

2d43cf12964d OAuth - add a little notes section for admins to remember details about…
Author
Bob Trahan
Browse Repository
No Builds
No Audits

Apr 8 2014

582ec5446532 Add a checkbox to the LDAP auth configuration UI to "Always Search"
Author
epriestley
Browse Repository
No Builds
No Audits

Mar 25 2014

750c872839e7 Update Google auth documentation to discuss "Google+ API" and new console URI
Author
epriestley
Browse Repository
No Builds
No Audits

Mar 21 2014

d8713f6f0b8c Make dialogs a little easier to use
Author
epriestley
Browse Repository
No Builds
No Audits

Mar 17 2014

ba8925a531c7 Support multiple LDAP filters in the Phabricator UI
Author
epriestley
Browse Repository
No Builds
No Audits

aea624118b70 Allow users to terminate login sessions
Author
epriestley
Browse Repository
No Builds
No Audits

Mar 14 2014

559c0fe88663 Tune cookie behaviors for 'phcid', 'phreg', etc
Author
epriestley
Browse Repository
No Builds
No Audits

Mar 13 2014

f7b1ed722164 Fix two registration errors for unusual provider emails
Author
epriestley
Browse Repository
No Builds
No Audits

a9f38e55e5e4 Modernize Facebook OAuth instructions
Author
epriestley
Browse Repository
No Builds
No Audits

969d0c3e8de2 Use "\z" instead of "$" to anchor validating regular expressions
Author
epriestley
Browse Repository
No Builds
No Audits

Mar 12 2014

7176240717f2 Whitelist controllers which can receive a 'code' parameter
Author
epriestley
Browse Repository
No Builds
No Audits

Feb 27 2014

e62c7321c28b Automatically verify the setup account's email address
Author
epriestley
Browse Repository
No Builds
No Audits

Feb 26 2014

627011476733 Various linter fixes.
Author
Joshua Spence
Browse Repository
No Builds
No Audits

bcf255e9c96b Require CSRF submission to verify email addresses
Author
epriestley
Browse Repository
No Builds
No Audits

Feb 24 2014

14627ad65b89 Fix an incorrectly spelled call on the registration error pathway
Author
epriestley
Browse Repository
No Builds
No Audits

Feb 23 2014

a566ae373015 Require a CSRF code for Twitter and JIRA (OAuth 1) logins
Author
epriestley
Browse Repository
No Builds
No Audits

7cf0358dda11 Disallow email addresses which will overflow MySQL storage
Author
epriestley
Browse Repository
No Builds
No Audits

Feb 18 2014

580bcd0d2be4 Implement bcrypt hasher, transparent login upgrade, and explicit upgrade for…
Author
epriestley
Browse Repository
No Builds
No Audits

3c9153079f13 Make password hashing modular
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 31 2014

4743ad96497b Miniturize the nav buttons
Author
Chad Little
Browse Repository
No Builds
No Audits

Jan 28 2014

049fb2018bde Add very basic "quick create" menu
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 27 2014

152f05aebed0 Fix some security issues with email password resets
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 23 2014

febc494737be Actually check CSRF on Password and LDAP forms
Author
epriestley
Browse Repository
No Builds
No Audits

5b1d9c935a90 After writing "next_uri", don't write it again for a while
Author
epriestley
Browse Repository
No Builds
No Audits

f9ac534f255d Support CSRF for logged-out users
Author
epriestley
Browse Repository
No Builds
No Audits

24544b1a2f24 Straighten out absolute/relative URIs in login providers
Author
epriestley
Browse Repository
No Builds
No Audits

69ddb0ced631 Issue "anonymous" sessions for logged-out users
Author
epriestley
Browse Repository
No Builds
No Audits

072741802350 Consolidate use of magical cookie name strings
Author
epriestley
Browse Repository
No Builds
No Audits

02aa193cb05e Add a common password blacklist
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 15 2014

2ec45d42a689 Remove session limits and sequencing
Author
epriestley
Browse Repository
No Builds
No Audits

acb141cf52c1 Expire and garbage collect unused sessions
Author
epriestley
Browse Repository
No Builds
No Audits

a64228b03fbc Give the session table a normal `id` column as a primary key
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 14 2014

41d2a0953604 Legalpad - make it work for not logged in users
Author
Bob Trahan
Browse Repository
No Builds
No Audits

31a2bebf633b Move PhabricatorTagView to PHUITagView
Author
Chad Little
Browse Repository
No Builds
No Audits

d392a8f15700 Replace "web" and "conduit" magic session strings with constants
Author
epriestley
Browse Repository
No Builds
No Audits

eef314b70149 Separate session management from PhabricatorUser
Author
epriestley
Browse Repository
No Builds
No Audits

3d9e328fb388 Add an "active login sessions" table to Settings
Author
epriestley
Browse Repository
No Builds
No Audits

220d680f3769 Allow PhabricatorUserLog to store non-user PHIDs
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 10 2014

b74c7a3d371a Simplify PHUIObjectBoxViews handling of Save and Error states
Author
Chad Little
Browse Repository
No Builds
No Audits

Jan 8 2014

324ee4e4d539 Fix rendering issue for LDAP configuration provider transactions
Author
epriestley
Browse Repository
No Builds
No Audits

3524ba3fb56a Add warnings to JIRA auth provider that we only support JIRA 6
Author
epriestley
Browse Repository
No Builds
No Audits

Dec 27 2013

e397103bf211 Extend all "ManagementWorkflow" classes from a base class
Author
epriestley
Browse Repository
No Builds
No Audits

Dec 18 2013

a5dc9067af0c Provide convenience method addTextCrumb() to PhabricatorCrumbsView
Author
epriestley
Browse Repository
No Builds
No Audits

Nov 25 2013

e4920cdf8668 Provide an LDAPS example in LDAP auth
Author
epriestley
Browse Repository
No Builds
No Audits

Nov 21 2013

3a035c02e7b9 Recover more flexibly from an already-verified email
Author
epriestley
Browse Repository
No Builds
No Audits

a518626a8574 Slightly improve behavior for unverified + unapproved users
Author
epriestley
Browse Repository
No Builds
No Audits

Nov 20 2013

6eb02af314a4 Allow "bin/auth recover" to succeed before phabricator.base-uri is set
Author
epriestley
Browse Repository
No Builds
No Audits

Nov 13 2013

dcf909ba56bf Land to GitHub + support stuff
Author
Aviv Eyal
Browse Repository
No Builds
No Audits

87a655e8c53c Fix new logged-out "Login" button URI and workflowiness
Author
epriestley
Browse Repository
No Builds
No Audits

fb6e38548b0c Respect "can edit username" in registration UI
Author
epriestley
Browse Repository
No Builds
No Audits

c0e1a63a63ae Implement an approval queue
Author
epriestley
Browse Repository
No Builds
No Audits

0fa411083f72 Show an "approval queue" item on the home page for admins, and sort out menu…
Author
epriestley
Browse Repository
No Builds
No Audits

c8320923c405 Implement most of the administrative UI for approval queues
Author
epriestley
Browse Repository
No Builds
No Audits

Nov 12 2013

7f11e8d7401e Improve handling of email verification and "activated" accounts
Author
epriestley
Browse Repository
No Builds
No Audits

cd73fe78db36 Roadblock users trying to register with external accounts that have invalid…
Author
epriestley
Browse Repository
No Builds
No Audits

30a51dac3686 Clarify registration rules more aggressively when configuring auth
Author
epriestley
Browse Repository
No Builds
No Audits

Nov 11 2013

a29b5b070f5a Replace some hsprintf() by phutil_tag()
Author
Jakub Vrana
Browse Repository
No Builds
No Audits

Oct 30 2013

2250ee6aa6b8 Allow null for token expiration date
Author
Aviv Eyal
Browse Repository
No Builds
No Audits