Diffusion Phorge (HEAD -> master) History

phorge/src/applications/auth/factor/PhabricatorTOTPAuthFactor.php
HEAD -> mastere81eff68e581000b0d14caa…

Aug 8 2019

9bd74dfa6c07 Autofocus the "App Code" input on the TOTP prompt during MFA gates after login
Author
epriestley
Browse Repository
No Builds
No Audits

Feb 7 2019

f2236eb061a6 Autofocus form control for adding TOTP codes
Author
Austin McKinley
Browse Repository
No Builds
No Audits

Jan 28 2019

9fd8343704ee Bring Duo MFA upstream
Author
epriestley
Browse Repository
No Builds
No Audits

bce44385e1e3 Add more factor details to the Settings factor list
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 24 2019

c9ff6ce390d6 Add CSRF to SMS challenges, and pave the way for more MFA types (including Duo)
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 23 2019

6c11f373965c Add a pre-enroll step for MFA, primarily as a CSRF gate
Author
epriestley
Browse Repository
No Builds
No Audits

f3340c633562 Allow different MFA factor types (SMS, TOTP, Duo, ...) to share "sync" tokens…
Author
epriestley
Browse Repository
No Builds
No Audits

0fcff782533a Convert user MFA factors to point at configurable "MFA Providers", not raw "MFA…
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 16 2019

a62f334d9503 Add a skeleton for configurable MFA provider types
Author
epriestley
Browse Repository
No Builds
No Audits

Dec 28 2018

3da9844564cf Tighten some MFA/TOTP parameters to improve resistance to brute force attacks
Author
epriestley
Browse Repository
No Builds
No Audits

Dec 20 2018

b63783c06718 Carry MFA responses which have been "answered" but not "completed" through the…
Author
epriestley
Browse Repository
No Builds
No Audits

ce953ea44790 Explicitly mark MFA challenges as "answered" and "completed"
Author
epriestley
Browse Repository
No Builds
No Audits

657f3c380608 When accepting a TOTP response, require it respond explicitly to a specific…
Author
epriestley
Browse Repository
No Builds
No Audits

0673e79d6d96 Simplify and correct some challenge TTL lockout code
Author
epriestley
Browse Repository
No Builds
No Audits

Dec 18 2018

46052878b1de Bind MFA challenges to particular workflows, like signing a specific Legalpad…
Author
epriestley
Browse Repository
No Builds
No Audits

Dec 17 2018

b8cbfda07ce6 Track MFA "challenges" so we can bind challenges to sessions and support SMS…
Author
epriestley
Browse Repository
No Builds
No Audits

c731508d748a Require MFA implementations to return a formal result object when validating…
Author
epriestley
Browse Repository
No Builds
No Audits

Dec 13 2018

080fb1985f29 Upgrade an old "weakDigest()" inside TOTP synchronization code
Author
epriestley
Browse Repository
No Builds
No Audits

Nov 7 2018

8a4bf386552f Use 160-bit TOTP keys rather than 80-bit TOTP keys
Author
epriestley
Browse Repository
No Builds
No Audits

Oct 1 2018

4858d43d1601 Add 'autocomplete="off"' to MFA TOTP inputs
Author
epriestley
Browse Repository
No Builds
No Audits

Apr 6 2017

3d816e94dfbe Rename "PhabricatorHash::digest()" to "weakDigest()"
Author
epriestley
Browse Repository
No Builds
No Audits

Jul 26 2016

29d6e5fd4bae Use numeric input control for TOTP factor entry
Author
Daniel Stone
Browse Repository
No Builds
No Audits

Jul 23 2016

020df6f5cb80 Add a numeric input control for TOTP codes
Author
epriestley
Browse Repository
No Builds
No Audits

Mar 16 2016

33a95d44bdc7 Formally modularize MFA/TOTP tokens, provide a module panel for temporary tokens
Author
epriestley
Browse Repository
No Builds
No Audits

a837c3d73eaf Make temporary token storage/schema more flexible
Author
epriestley
Browse Repository
No Builds
No Audits

Sep 14 2015

0449a07f537d Add `bin/auth unlimit` and clean up a TODO
Author
epriestley
Browse Repository
No Builds
No Audits

Sep 1 2015

29948eaa5bd2 Use phutil_hashes_are_identical() when comparing hashes in Phabricator
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 6 2015

f2e87aad89e9 Rename the `PhabricatorAuthFactorTOTP` class for consistency
Author
Joshua Spence
Browse Repository
No Builds
No Audits