Page MenuHomePhabricator

Modularize temporary token types
ClosedPublic

Authored by epriestley on Mar 16 2016, 12:24 PM.
Tags
None
Referenced Files
F11164167: D15475.id37309.diff
Wed, Sep 28, 11:53 AM
Unknown Object (File)
Tue, Sep 27, 4:29 PM
Unknown Object (File)
Sun, Sep 25, 3:06 PM
Unknown Object (File)
Sat, Sep 24, 5:35 PM
Unknown Object (File)
Fri, Sep 23, 12:27 PM
Unknown Object (File)
Wed, Sep 21, 10:47 AM
Unknown Object (File)
Tue, Sep 20, 10:41 AM
Unknown Object (File)
Sun, Sep 18, 4:46 PM
Subscribers
None

Details

Summary

Ref T10603. For LFS, we need to issue a new type of temporary token.

This makes the temporary token code modular so applications can add new token types without modifying the Auth application.

(I'm moving slowly here because it impacts authentication.)

Test Plan
  • Used bin/auth recover to get a one-time token from the CLI.
  • Used "Forgot your password?" to get a one-time token from the web UI.
  • Followed the web UI token to initiate a password reset, prompting generation of a password token.
  • Viewed these tokens in the web UI:

Screen Shot 2016-03-16 at 5.21.01 AM.png (253×1 px, 36 KB)

  • Revoked a token.

Diff Detail

Repository
rP Phabricator
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

epriestley retitled this revision from to Modularize temporary token types.
epriestley updated this object.
epriestley edited the test plan for this revision. (Show Details)
epriestley added a reviewer: chad.
epriestley edited edge metadata.
  • Split out some unrelated code for a future diff.
chad edited edge metadata.
This revision is now accepted and ready to land.Mar 16 2016, 2:29 PM
This revision was automatically updated to reflect the committed changes.