Page MenuHomePhabricator
Differential D20038

Require MFA to edit MFA providers
ClosedPublic
Actions

Authored by epriestley on Jan 25 2019, 6:45 PM.
Tags
None
Referenced Files
Unknown Object (File)
Mon, Apr 22, 10:40 PM
Unknown Object (File)
Fri, Apr 19, 2:59 AM
Unknown Object (File)
Thu, Apr 11, 7:22 AM
Unknown Object (File)
Thu, Apr 4, 12:51 PM
Unknown Object (File)
Sat, Mar 30, 7:24 AM
Unknown Object (File)
Thu, Mar 28, 5:57 PM
Unknown Object (File)
Wed, Mar 27, 5:19 PM
Unknown Object (File)
Mar 23 2024, 12:32 PM
View All 96 Files
Subscribers
None

Details

Reviewers
amckinley
Maniphest Tasks
T7667: Provide `auth lock` and `auth unlock` to restrict authentication provider management to the CLI
T13222: 2018 Week 48-51 Bonus Content
Commits
rPd8d4efe89e85: Require MFA to edit MFA providers
Summary

Depends on D20037. Ref T13222. Ref T7667. Although administrators can now disable MFA from the web UI, at least require that they survive MFA gates to do so. T7667 (bin/auth lock) should provide a sturdier approach here in the long term.

Test Plan

Created and edited MFA providers, was prompted for MFA.

Diff Detail

Repository
rP Phabricator
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Revision Contents
Changeset List

Diff 47867

View Options

src/__phutil_library_map__.php

Loading...
View Options

src/applications/auth/engine/PhabricatorAuthFactorProviderMFAEngine.php

Loading...
View Options

src/applications/auth/storage/PhabricatorAuthFactorProvider.php

Loading...
Phabricator · Built by Phacility