Diffusion Phorge (HEAD -> master) History

phorge/src/applications/auth/factor/PhabricatorAuthFactor.php
HEAD -> mastere81eff68e581000b0d14caa…

May 23 2023

d95200da918e Fix PHP 8.1 "strlen(null)" exceptions which block adding 2FA factor
Author
Andre Klapper
Browse Repository
No Builds
No Audits

Mar 5 2019

920ab13cfb86 Correct a possible fatal in the non-CSRF Duo MFA workflow
Author
epriestley
Browse Repository
No Builds
No Audits

Feb 15 2019

2ca316d652d8 When users confirm Duo MFA in the mobile app, live-update the UI
Author
epriestley
Browse Repository
No Builds
No Audits

Feb 5 2019

03eb989fd875 Give Duo MFA a stronger hint if users continue without answering the challenge
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 30 2019

e9b2d667ee57 Improve handling of "Deny" responses from Duo
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 28 2019

9fd8343704ee Bring Duo MFA upstream
Author
epriestley
Browse Repository
No Builds
No Audits

29b4fad94173 Get rid of "throwResult()" for control flow in MFA factors
Author
epriestley
Browse Repository
No Builds
No Audits

bce44385e1e3 Add more factor details to the Settings factor list
Author
epriestley
Browse Repository
No Builds
No Audits

8e5d9c6f0eb5 Allow MFA providers to be deprecated or disabled
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 24 2019

c9ff6ce390d6 Add CSRF to SMS challenges, and pave the way for more MFA types (including Duo)
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 23 2019

7805b217ad8b Prevent users from editing, disabling, or swapping their primary contact number…
Author
epriestley
Browse Repository
No Builds
No Audits

ada8a56bb7db Implement SMS MFA
Author
epriestley
Browse Repository
No Builds
No Audits

6c11f373965c Add a pre-enroll step for MFA, primarily as a CSRF gate
Author
epriestley
Browse Repository
No Builds
No Audits

f3340c633562 Allow different MFA factor types (SMS, TOTP, Duo, ...) to share "sync" tokens…
Author
epriestley
Browse Repository
No Builds
No Audits

bb20c136513c Allow MFA factors to provide more guidance text on create workflows
Author
epriestley
Browse Repository
No Builds
No Audits

0fcff782533a Convert user MFA factors to point at configurable "MFA Providers", not raw "MFA…
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 16 2019

a62f334d9503 Add a skeleton for configurable MFA provider types
Author
epriestley
Browse Repository
No Builds
No Audits

Dec 28 2018

1729e7b46792 Improve UI for "wait" and "answered" MFA challenges
Author
epriestley
Browse Repository
No Builds
No Audits

3da9844564cf Tighten some MFA/TOTP parameters to improve resistance to brute force attacks
Author
epriestley
Browse Repository
No Builds
No Audits

Dec 20 2018

b63783c06718 Carry MFA responses which have been "answered" but not "completed" through the…
Author
epriestley
Browse Repository
No Builds
No Audits

ce953ea44790 Explicitly mark MFA challenges as "answered" and "completed"
Author
epriestley
Browse Repository
No Builds
No Audits

Dec 18 2018

46052878b1de Bind MFA challenges to particular workflows, like signing a specific Legalpad…
Author
epriestley
Browse Repository
No Builds
No Audits

Dec 17 2018

b8cbfda07ce6 Track MFA "challenges" so we can bind challenges to sessions and support SMS…
Author
epriestley
Browse Repository
No Builds
No Audits

c731508d748a Require MFA implementations to return a formal result object when validating…
Author
epriestley
Browse Repository
No Builds
No Audits

Jul 7 2015

f695dcea9ee8 Use PhutilClassMapQuery
Author
Joshua Spence
Browse Repository
No Builds
No Audits

Apr 28 2014

a017a8e02b51 Make two-factor auth actually work
Author
epriestley
Browse Repository
No Builds
No Audits

17709bc1674e Add multi-factor auth and TOTP support
Author
epriestley
Browse Repository
No Builds
No Audits