Page MenuHomePhabricator
Differential D20038

Require MFA to edit MFA providers
ClosedPublic
Actions

Authored by epriestley on Jan 25 2019, 6:45 PM.
Tags
None
Referenced Files
Unknown Object (File)
Thu, Feb 13, 9:00 PM
Unknown Object (File)
Mon, Feb 10, 3:18 AM
Unknown Object (File)
Wed, Jan 29, 12:51 PM
Unknown Object (File)
Mon, Jan 27, 9:34 AM
Unknown Object (File)
Sat, Jan 25, 4:10 PM
Unknown Object (File)
Sat, Jan 25, 4:10 PM
Unknown Object (File)
Sat, Jan 25, 4:10 PM
Unknown Object (File)
Fri, Jan 24, 1:37 AM
View All Files
Subscribers
None

Details

Reviewers
amckinley
Maniphest Tasks
T7667: Provide `auth lock` and `auth unlock` to restrict authentication provider management to the CLI
T13222: 2018 Week 48-51 Bonus Content
Commits
rPd8d4efe89e85: Require MFA to edit MFA providers
Summary

Depends on D20037. Ref T13222. Ref T7667. Although administrators can now disable MFA from the web UI, at least require that they survive MFA gates to do so. T7667 (bin/auth lock) should provide a sturdier approach here in the long term.

Test Plan

Created and edited MFA providers, was prompted for MFA.

Diff Detail

Repository
rP Phabricator
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Revision Contents
Changeset List

Diff 47867

View Options

src/__phutil_library_map__.php

Loading...
View Options

src/applications/auth/engine/PhabricatorAuthFactorProviderMFAEngine.php

Loading...
View Options

src/applications/auth/storage/PhabricatorAuthFactorProvider.php

Loading...
Phabricator · Built by Phacility