Page MenuHomePhabricator
Differential D20038

Require MFA to edit MFA providers
ClosedPublic
Actions

Authored by epriestley on Jan 25 2019, 6:45 PM.
Tags
None
Referenced Files
Unknown Object (File)
Mon, Apr 29, 6:51 PM
Unknown Object (File)
Sun, Apr 28, 12:19 PM
Unknown Object (File)
Sat, Apr 27, 11:25 PM
Unknown Object (File)
Mon, Apr 22, 10:40 PM
Unknown Object (File)
Fri, Apr 19, 2:59 AM
Unknown Object (File)
Thu, Apr 11, 7:22 AM
Unknown Object (File)
Thu, Apr 4, 12:51 PM
Unknown Object (File)
Mar 30 2024, 7:24 AM
View All 99 Files
Subscribers
None

Details

Reviewers
amckinley
Maniphest Tasks
T7667: Provide `auth lock` and `auth unlock` to restrict authentication provider management to the CLI
T13222: 2018 Week 48-51 Bonus Content
Commits
rPd8d4efe89e85: Require MFA to edit MFA providers
Summary

Depends on D20037. Ref T13222. Ref T7667. Although administrators can now disable MFA from the web UI, at least require that they survive MFA gates to do so. T7667 (bin/auth lock) should provide a sturdier approach here in the long term.

Test Plan

Created and edited MFA providers, was prompted for MFA.

Diff Detail

Repository
rP Phabricator
Branch
mfa8
Lint
Lint Passed
Unit
Tests Passed
Build Status
Buildable 21701
Build 29603: Run Core Tests
Build 29602: arc lint + arc unit

Revision Contents
Changeset List

Diff 47847

View Options

src/__phutil_library_map__.php

Loading...
View Options

src/applications/auth/engine/PhabricatorAuthFactorProviderMFAEngine.php

Loading...
View Options

src/applications/auth/storage/PhabricatorAuthFactorProvider.php

Loading...
Phabricator · Built by Phacility