Diffusion Phorge (master) History

phorge/src/applications/auth/storage
masterb445e1d80df90f7fb1a2955…

Feb 12 2024

b445e1d80df9 Fix config transaction rendering error on auth page by allowing PhutilSafeHTML
Author
Mark Jervelund
Browse Repository
No Builds
No Audits

Sep 11 2023

a0fb344b9488 Fix PHP 8.1 auth view strlen(null) error
Author
sten
Browse Repository
No Builds
No Audits

May 20 2023

10fae71a042f Fix PHP 8.1 "explode(null)" exception which blocks rendering "Provide Multi…
Author
Andre Klapper
Browse Repository
No Builds
No Audits

Feb 22 2020

0872051bfa28 Make AuthProvider, ExternalAccount, and ExternalAccountIdentifier all…
Author
epriestley
Browse Repository
No Builds
No Audits

Jul 19 2019

ced416cc735a Allow Auth messages to have detailed descriptions and default values, then give…
Author
epriestley
Browse Repository
No Builds
No Audits

a0c9f9f90c81 Allow installs to customize mail body guidance in the "Email Login" and "Set…
Author
epriestley
Browse Repository
No Builds
No Audits

Jul 17 2019

97c16997561b Fix transaction title rendering for AuthenticationConfigs
Author
Austin McKinley
Browse Repository
No Builds
No Audits

Feb 7 2019

9f5e6bee9037 Make the default behavior of getApplicationTransactionCommentObject() "return…
Author
epriestley
Browse Repository
No Builds
No Audits

Feb 6 2019

d6f691cf5d5d In "External Accounts", replace hard-to-find tiny "link" icon with a nice…
Author
epriestley
Browse Repository
No Builds
No Audits

Feb 5 2019

4fcb38a2a94c Move the Auth Provider edit flow toward a more modern layout
Author
epriestley
Browse Repository
No Builds
No Audits

03eb989fd875 Give Duo MFA a stronger hint if users continue without answering the challenge
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 30 2019

70b474e550b7 Allow MFA enrollment guidance to be customized
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 28 2019

d8d4efe89e85 Require MFA to edit MFA providers
Author
epriestley
Browse Repository
No Builds
No Audits

bce44385e1e3 Add more factor details to the Settings factor list
Author
epriestley
Browse Repository
No Builds
No Audits

8e5d9c6f0eb5 Allow MFA providers to be deprecated or disabled
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 24 2019

c9ff6ce390d6 Add CSRF to SMS challenges, and pave the way for more MFA types (including Duo)
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 23 2019

587e9cea19ac Always require MFA to edit contact numbers
Author
epriestley
Browse Repository
No Builds
No Audits

6c11f373965c Add a pre-enroll step for MFA, primarily as a CSRF gate
Author
epriestley
Browse Repository
No Builds
No Audits

f3340c633562 Allow different MFA factor types (SMS, TOTP, Duo, ...) to share "sync" tokens…
Author
epriestley
Browse Repository
No Builds
No Audits

bb20c136513c Allow MFA factors to provide more guidance text on create workflows
Author
epriestley
Browse Repository
No Builds
No Audits

596435b35e30 Support designating a contact number as "primary"
Author
epriestley
Browse Repository
No Builds
No Audits

12203762b7f0 Allow contact numbers to be enabled and disabled
Author
epriestley
Browse Repository
No Builds
No Audits

f0c6ee48233a Add "Contact Numbers" so we can send users SMS mesages
Author
epriestley
Browse Repository
No Builds
No Audits

aa483738899d Update `bin/auth` MFA commands for the new "MFA Provider" indirection layer
Author
epriestley
Browse Repository
No Builds
No Audits

0fcff782533a Convert user MFA factors to point at configurable "MFA Providers", not raw "MFA…
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 18 2019

6bb31de30596 Use the customizable "Welcome Mail" message in welcome mail
Author
epriestley
Browse Repository
No Builds
No Audits

22ad1ff2c5b1 Show the customized "Login" message on the login screen
Author
epriestley
Browse Repository
No Builds
No Audits

2c713b2d25fd Add "Auth Messages" to support customizing onboarding/welcome flows
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 16 2019

a62f334d9503 Add a skeleton for configurable MFA provider types
Author
epriestley
Browse Repository
No Builds
No Audits

Dec 28 2018

ca39be60914b Make partial sessions expire after 30 minutes, and do not extend them
Author
epriestley
Browse Repository
No Builds
No Audits

ff49d1ef776b Allow "bin/auth recover" to generate a link which forces a full login session
Author
epriestley
Browse Repository
No Builds
No Audits

Dec 20 2018

11cf8f05b176 Remove "getApplicationTransactionObject()" from ApplicationTransactionInterface
Author
epriestley
Browse Repository
No Builds
No Audits

937e88c399ab Remove obsolete, no-op implementations of "willRenderTimeline()"
Author
epriestley
Browse Repository
No Builds
No Audits

b63783c06718 Carry MFA responses which have been "answered" but not "completed" through the…
Author
epriestley
Browse Repository
No Builds
No Audits

ce953ea44790 Explicitly mark MFA challenges as "answered" and "completed"
Author
epriestley
Browse Repository
No Builds
No Audits

Dec 18 2018

46052878b1de Bind MFA challenges to particular workflows, like signing a specific Legalpad…
Author
epriestley
Browse Repository
No Builds
No Audits

Dec 17 2018

5e94343c7d1a Add a garbage collector for MFA challenges
Author
epriestley
Browse Repository
No Builds
No Audits

b8cbfda07ce6 Track MFA "challenges" so we can bind challenges to sessions and support SMS…
Author
epriestley
Browse Repository
No Builds
No Audits

Dec 13 2018

1d34238dc945 Upgrade sessions digests to HMAC256, retaining compatibility with old digests
Author
epriestley
Browse Repository
No Builds
No Audits

c58506aeaace Give sessions real PHIDs and slightly modernize session queries
Author
epriestley
Browse Repository
No Builds
No Audits

Sep 12 2018

f5e90a363e7a When a user takes actions while in a high security session, note it on the…
Author
epriestley
Browse Repository
No Builds
No Audits

Aug 16 2018

0ccf1410e057 Give PhabricatorAuthPassword a formal CAN_EDIT policy
Author
epriestley
Browse Repository
No Builds
No Audits

Apr 25 2018

1b24b486f58a Manage object mailKeys automatically in Mail instead of storing them on objects
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 23 2018

bf2868c07016 Rename "PhabricatorPasswordHashInterface" to…
Author
epriestley
Browse Repository
No Builds
No Audits

21e415299f26 Mark all existing password hashes as "legacy" and start upgrading digest formats
Author
epriestley
Browse Repository
No Builds
No Audits

abc030fa008b Move account passwords to shared infrastructure
Author
epriestley
Browse Repository
No Builds
No Audits

5a8a56f414fc Prepare the new AuthPassword infrastructure for storing account passwords
Author
epriestley
Browse Repository
No Builds
No Audits

c280c85772a3 Consolidate password verification/revocation logic in a new…
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 22 2018

9c00a437848c Add a more modern object for storing password hashes
Author
epriestley
Browse Repository
No Builds
No Audits

fa1ecb7f6612 Add a `bin/auth revoke` revoker for SSH keys
Author
epriestley
Browse Repository
No Builds
No Audits

Apr 6 2017

d450a088906e Support HMAC+SHA256 with automatic key generation and management
Author
epriestley
Browse Repository
No Builds
No Audits

Nov 9 2016

706c21375e8f Remove empty implementations of `describeAutomaticCapabilities()`
Author
epriestley
Browse Repository
No Builds
No Audits

May 19 2016

6f6ca0102daa Send forced mail on SSH key edits
Author
epriestley
Browse Repository
No Builds
No Audits

da6b3de65c14 Use transactions to apply web UI SSH key edits
Author
epriestley
Browse Repository
No Builds
No Audits

08bea1d363fd Add ViewController and SearchEngine for SSH Public Keys
Author
epriestley
Browse Repository
No Builds
No Audits

May 18 2016

0308d580d7df Deactivate SSH keys instead of destroying them completely
Author
epriestley
Browse Repository
No Builds
No Audits

Mar 31 2016

6bbba1e3151d Update Auth for new UI
Author
Chad Little
Browse Repository
No Builds
No Audits

Mar 16 2016

a837c3d73eaf Make temporary token storage/schema more flexible
Author
epriestley
Browse Repository
No Builds
No Audits

cf15e0de4386 Modularize temporary token types
Author
epriestley
Browse Repository
No Builds
No Audits

Dec 19 2015

8eec9e2c0ef2 Provide a more straightforward way to revoke SSH keys by finding and destroying…
Author
Nick Zheng
Browse Repository
No Builds
No Audits

Dec 15 2015

6c4c93a091fa Allow login to be disabled for authentication providers
Author
epriestley
Browse Repository
No Builds
No Audits

Mar 26 2015

fe89d67663df Fixes spelling error in settings log on auth provider pages
Author
Elan Kugelmass
Browse Repository
No Builds
No Audits

Feb 12 2015

d39da529ca26 Legalpad - allow for legalpad documents to be required to be signed for using…
Author
Bob Trahan
Browse Repository
No Builds
No Audits

Feb 11 2015

6f90fbdef806 Send emails for email invites
Author
epriestley
Browse Repository
No Builds
No Audits

ae5976022252 Add administrative invite interfaces
Author
epriestley
Browse Repository
No Builds
No Audits

Feb 9 2015

2a0af8e2995d Add email invites to Phabricator (logic only)
Author
epriestley
Browse Repository
No Builds
No Audits

Feb 6 2015

472f316bbd90 Auth - allow for "auto login" providers
Author
Bob Trahan
Browse Repository
No Builds
No Audits

Jan 13 2015

d6b882a804c7 Fix visiblity of `LiskDAO::getConfiguration()`
Author
Joshua Spence
Browse Repository
No Builds
No Audits

Dec 4 2014

6ab3f06b6ec6 Transactions - adding willRenderTimeline to handle tricky cases
Author
Bob Trahan
Browse Repository
No Builds
No Audits

Dec 2 2014

69cc5df6456b Transactions - deploy buildTransactionTimeline against a few more applications
Author
Bob Trahan
Browse Repository
No Builds
No Audits

Nov 20 2014

5e0f218fe480 Allow device SSH keys to be trusted
Author
epriestley
Browse Repository
No Builds
No Audits

Nov 11 2014

32cdc23efc52 Separate SSH key management from the settings panel
Author
Evan Priestley
Browse Repository
No Builds
No Audits

Nov 7 2014

bf17b12daf43 Standardize SSH key storage
Author
epriestley
Browse Repository
No Builds
No Audits

Nov 6 2014

e29955b48d64 Move SSHKey table to Auth database
Author
epriestley
Browse Repository
No Builds
No Audits

6f0d3b07962a Add a query/policy layer on top of SSH keys for Almanac
Author
epriestley
Browse Repository
No Builds
No Audits

Oct 2 2014

8fa8415c07d2 Automatically build all Lisk schemata
Author
epriestley
Browse Repository
No Builds
No Audits

Oct 1 2014

4fcc634a99dc Fix almost all remaining schemata issues
Author
epriestley
Browse Repository
No Builds
No Audits

943c62d1e9f6 Add missing expected keys and uniqueness
Author
epriestley
Browse Repository
No Builds
No Audits

098d0d93d60c Generate expected schemata for User/People tables
Author
epriestley
Browse Repository
No Builds
No Audits

Sep 18 2014

67fbfe6ccc9f Generate expected schemata for Doorkeeper, Draft, Drydock, Feed
Author
epriestley
Browse Repository
No Builds
No Audits

0f73b15a704d Generate reasonable expected schemata for Audit and Auth
Author
epriestley
Browse Repository
No Builds
No Audits

Aug 4 2014

e56dc8f29986 Invalidate outstanding password reset links when users adjust email addresses
Author
epriestley
Browse Repository
No Builds
No Audits

30f6405a8654 Add an explicit temporary token management page to Settings
Author
epriestley
Browse Repository
No Builds
No Audits

Jul 23 2014

97a8700e4589 Rename `PHIDType` classes
Author
Joshua Spence
Browse Repository
No Builds
No Audits

Jun 28 2014

2d36afeaab7c Manage OAuth1 request token secrets in core OAuth1 workflow
Author
epriestley
Browse Repository
No Builds
No Audits

Jun 9 2014

0a62f13464b8 Change double quotes to single quotes.
Author
Joshua Spence
Browse Repository
No Builds
No Audits

May 20 2014

cac61980f904 Add "temporary tokens" to auth, for SMS codes, TOTP codes, reset codes, etc
Author
epriestley
Browse Repository
No Builds
No Audits

May 16 2014

43d45c49568a can now tell phabricator you trust an auth provider's emails (useful for Google…
Author
Tal Shiri
Browse Repository
No Builds
No Audits

May 1 2014

a04e138ae247 Minor cleanup of some session code
Author
epriestley
Browse Repository
No Builds
No Audits

50376aad04d2 Require multiple auth factors to establish web sessions
Author
epriestley
Browse Repository
No Builds
No Audits

Apr 28 2014

a017a8e02b51 Make two-factor auth actually work
Author
epriestley
Browse Repository
No Builds
No Audits

17709bc1674e Add multi-factor auth and TOTP support
Author
epriestley
Browse Repository
No Builds
No Audits

Apr 27 2014

f42ec84d0c6b Add "High Security" mode to support multi-factor auth
Author
epriestley
Browse Repository
No Builds
No Audits

Apr 22 2014

11fd6afeb10e Move Timeline icons to Fonts
Author
Chad Little
Browse Repository
No Builds
No Audits

Feb 26 2014

627011476733 Various linter fixes.
Author
Joshua Spence
Browse Repository
No Builds
No Audits

Jan 23 2014

69ddb0ced631 Issue "anonymous" sessions for logged-out users
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 15 2014

acb141cf52c1 Expire and garbage collect unused sessions
Author
epriestley
Browse Repository
No Builds
No Audits

a64228b03fbc Give the session table a normal `id` column as a primary key
Author
epriestley
Browse Repository
No Builds
No Audits

Jan 14 2014

d392a8f15700 Replace "web" and "conduit" magic session strings with constants
Author
epriestley
Browse Repository
No Builds
No Audits

eef314b70149 Separate session management from PhabricatorUser
Author
epriestley
Browse Repository
No Builds
No Audits