Page MenuHomePhabricator
Differential D20038

Require MFA to edit MFA providers
ClosedPublic
Actions

Authored by epriestley on Jan 25 2019, 6:45 PM.
Tags
None
Referenced Files
F14038783: D20038.diff
Mon, Nov 11, 2:04 AM
F14030073: D20038.id47867.diff
Fri, Nov 8, 11:47 PM
F14014572: D20038.id47867.diff
Sun, Nov 3, 6:11 AM
F14008588: D20038.diff
Wed, Oct 30, 1:41 AM
F14006723: D20038.id47867.diff
Mon, Oct 28, 3:47 PM
F14003517: D20038.id47867.diff
Sat, Oct 26, 7:06 AM
F13988950: D20038.id47847.diff
Mon, Oct 21, 4:58 PM
F13981873: D20038.diff
Oct 19 2024, 7:35 PM
View All Files
Subscribers
None

Details

Reviewers
amckinley
Maniphest Tasks
T7667: Provide `auth lock` and `auth unlock` to restrict authentication provider management to the CLI
T13222: 2018 Week 48-51 Bonus Content
Commits
rPd8d4efe89e85: Require MFA to edit MFA providers
Summary

Depends on D20037. Ref T13222. Ref T7667. Although administrators can now disable MFA from the web UI, at least require that they survive MFA gates to do so. T7667 (bin/auth lock) should provide a sturdier approach here in the long term.

Test Plan

Created and edited MFA providers, was prompted for MFA.

Diff Detail

Repository
rP Phabricator
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Revision Contents
Changeset List

Diff 47867

View Options

src/__phutil_library_map__.php

Loading...
View Options

src/applications/auth/engine/PhabricatorAuthFactorProviderMFAEngine.php

Loading...
View Options

src/applications/auth/storage/PhabricatorAuthFactorProvider.php

Loading...
Phabricator · Built by Phacility