Diffusion Phorge (master) History

phorge/src/applications/auth/factor
masterc3f0c0b0f7354ffb1265069…

Apr 25 2022

b8b392481fd1 Remove product literal strings in "pht()", part 2
Author
epriestley
Browse Repository
No Builds
No Audits

Aug 8 2019

9bd74dfa6c07 Autofocus the "App Code" input on the TOTP prompt during MFA gates after login
Author
epriestley
Browse Repository
No Builds
No Audits

Mar 5 2019

920ab13cfb86 Correct a possible fatal in the non-CSRF Duo MFA workflow
Author
epriestley
Browse Repository
No Builds
No Audits

Feb 15 2019

2ca316d652d8 When users confirm Duo MFA in the mobile app, live-update the UI
Author
epriestley
Browse Repository
No Builds
No Audits

Feb 7 2019

f2236eb061a6 Autofocus form control for adding TOTP codes
Author
Austin McKinley
Browse Repository
No Builds
No Audits

Feb 5 2019

03eb989fd875 Give Duo MFA a stronger hint if users continue without answering the challenge
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 30 2019

e9b2d667ee57 Improve handling of "Deny" responses from Duo
Author
epriestley
Browse Repository
No Builds
No Audits

1767b80654fe Replace manual query string construction with "phutil_build_http_querystring()"
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 28 2019

9fd8343704ee Bring Duo MFA upstream
Author
epriestley
Browse Repository
No Builds
No Audits

29b4fad94173 Get rid of "throwResult()" for control flow in MFA factors
Author
epriestley
Browse Repository
No Builds
No Audits

bce44385e1e3 Add more factor details to the Settings factor list
Author
epriestley
Browse Repository
No Builds
No Audits

8e5d9c6f0eb5 Allow MFA providers to be deprecated or disabled
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 24 2019

c9ff6ce390d6 Add CSRF to SMS challenges, and pave the way for more MFA types (including Duo)
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 23 2019

7805b217ad8b Prevent users from editing, disabling, or swapping their primary contact number…
Author
epriestley
Browse Repository
No Builds
No Audits

ada8a56bb7db Implement SMS MFA
Author
epriestley
Browse Repository
No Builds
No Audits

6c11f373965c Add a pre-enroll step for MFA, primarily as a CSRF gate
Author
epriestley
Browse Repository
No Builds
No Audits

f3340c633562 Allow different MFA factor types (SMS, TOTP, Duo, ...) to share "sync" tokens…
Author
epriestley
Browse Repository
No Builds
No Audits

bb20c136513c Allow MFA factors to provide more guidance text on create workflows
Author
epriestley
Browse Repository
No Builds
No Audits

0fcff782533a Convert user MFA factors to point at configurable "MFA Providers", not raw "MFA…
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 16 2019

a62f334d9503 Add a skeleton for configurable MFA provider types
Author
epriestley
Browse Repository
No Builds
No Audits

Dec 28 2018

1729e7b46792 Improve UI for "wait" and "answered" MFA challenges
Author
epriestley
Browse Repository
No Builds
No Audits

3da9844564cf Tighten some MFA/TOTP parameters to improve resistance to brute force attacks
Author
epriestley
Browse Repository
No Builds
No Audits

Dec 20 2018

b63783c06718 Carry MFA responses which have been "answered" but not "completed" through the…
Author
epriestley
Browse Repository
No Builds
No Audits

ce953ea44790 Explicitly mark MFA challenges as "answered" and "completed"
Author
epriestley
Browse Repository
No Builds
No Audits

657f3c380608 When accepting a TOTP response, require it respond explicitly to a specific…
Author
epriestley
Browse Repository
No Builds
No Audits

0673e79d6d96 Simplify and correct some challenge TTL lockout code
Author
epriestley
Browse Repository
No Builds
No Audits

Dec 18 2018

46052878b1de Bind MFA challenges to particular workflows, like signing a specific Legalpad…
Author
epriestley
Browse Repository
No Builds
No Audits

Dec 17 2018

b8cbfda07ce6 Track MFA "challenges" so we can bind challenges to sessions and support SMS…
Author
epriestley
Browse Repository
No Builds
No Audits

c731508d748a Require MFA implementations to return a formal result object when validating…
Author
epriestley
Browse Repository
No Builds
No Audits

Dec 13 2018

080fb1985f29 Upgrade an old "weakDigest()" inside TOTP synchronization code
Author
epriestley
Browse Repository
No Builds
No Audits

Nov 7 2018

8a4bf386552f Use 160-bit TOTP keys rather than 80-bit TOTP keys
Author
epriestley
Browse Repository
No Builds
No Audits

Oct 1 2018

4858d43d1601 Add 'autocomplete="off"' to MFA TOTP inputs
Author
epriestley
Browse Repository
No Builds
No Audits

Oct 9 2017

9bd6a3705559 Fix spelling
Author
Dmitri Iouchtchenko
Browse Repository
No Builds
No Audits

Apr 6 2017

3d816e94dfbe Rename "PhabricatorHash::digest()" to "weakDigest()"
Author
epriestley
Browse Repository
No Builds
No Audits

Jul 26 2016

29d6e5fd4bae Use numeric input control for TOTP factor entry
Author
Daniel Stone
Browse Repository
No Builds
No Audits

Jul 23 2016

020df6f5cb80 Add a numeric input control for TOTP codes
Author
epriestley
Browse Repository
No Builds
No Audits

Mar 16 2016

33a95d44bdc7 Formally modularize MFA/TOTP tokens, provide a module panel for temporary tokens
Author
epriestley
Browse Repository
No Builds
No Audits

a837c3d73eaf Make temporary token storage/schema more flexible
Author
epriestley
Browse Repository
No Builds
No Audits

Sep 14 2015

0449a07f537d Add `bin/auth unlimit` and clean up a TODO
Author
epriestley
Browse Repository
No Builds
No Audits

Sep 1 2015

29948eaa5bd2 Use phutil_hashes_are_identical() when comparing hashes in Phabricator
Author
epriestley
Browse Repository
No Builds
No Audits

Jul 7 2015

f695dcea9ee8 Use PhutilClassMapQuery
Author
Joshua Spence
Browse Repository
No Builds
No Audits

Jun 15 2015

1239cfdeaf3a Add a bunch of tests for subclass implementations
Author
Joshua Spence
Browse Repository
No Builds
No Audits

May 22 2015

36e2d02d6ec5 phtize all the things
Author
Joshua Spence
Browse Repository
No Builds
No Audits

Feb 9 2015

2a0af8e2995d Add email invites to Phabricator (logic only)
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 6 2015

f2e87aad89e9 Rename the `PhabricatorAuthFactorTOTP` class for consistency
Author
Joshua Spence
Browse Repository
No Builds
No Audits

May 20 2014

cac61980f904 Add "temporary tokens" to auth, for SMS codes, TOTP codes, reset codes, etc
Author
epriestley
Browse Repository
No Builds
No Audits

May 1 2014

e14695821758 Generate QR codes for TOTP tokens
Author
epriestley
Browse Repository
No Builds
No Audits

Apr 28 2014

a017a8e02b51 Make two-factor auth actually work
Author
epriestley
Browse Repository
No Builds
No Audits

17709bc1674e Add multi-factor auth and TOTP support
Author
epriestley
Browse Repository
No Builds
No Audits