Page MenuHomePhabricator

Convert "Rename User" from session MFA to one-shot MFA
ClosedPublic

Authored by epriestley on Jan 25 2019, 6:19 PM.
Tags
None
Referenced Files
Unknown Object (File)
Tue, Feb 4, 8:27 PM
Unknown Object (File)
Tue, Jan 28, 4:41 AM
Unknown Object (File)
Tue, Jan 28, 4:41 AM
Unknown Object (File)
Tue, Jan 28, 4:41 AM
Unknown Object (File)
Sun, Jan 26, 4:57 AM
Unknown Object (File)
Sat, Jan 25, 4:09 PM
Unknown Object (File)
Sat, Jan 25, 3:21 AM
Unknown Object (File)
Sat, Jan 25, 3:21 AM
Subscribers
None

Details

Summary

Depends on D20035. Ref T13222.

  • Allow individual transactions to request one-shot MFA if available.
  • Make "change username" request MFA.
Test Plan
  • Renamed a user, got prompted for MFA, provided it.
  • Saw that I no longer remain in high-security after performing the edit.
  • Grepped for other uses of PhabricatorUserUsernameTransaction, found none.

Diff Detail

Repository
rP Phabricator
Lint
Lint Not Applicable
Unit
Tests Not Applicable