Page MenuHomePhabricator

Improve handling of "Deny" responses from Duo
ClosedPublic

Authored by epriestley on Jan 30 2019, 5:18 AM.
Tags
None
Referenced Files
Unknown Object (File)
Thu, Nov 21, 8:34 AM
Unknown Object (File)
Sun, Nov 17, 4:29 AM
Unknown Object (File)
Oct 18 2024, 2:02 AM
Unknown Object (File)
Oct 15 2024, 2:26 PM
Unknown Object (File)
Oct 11 2024, 3:51 AM
Unknown Object (File)
Sep 19 2024, 2:04 AM
Unknown Object (File)
Sep 4 2024, 1:02 AM
Unknown Object (File)
Aug 29 2024, 5:33 AM
Subscribers
None

Details

Summary

Ref T13231. See https://discourse.phabricator-community.org/t/duo-integration-crashes-if-user-is-not-enrolled-and-enrollment-is-disabled/2340/5

(There's an actual bug here, although I'm not sure exactly what's going on on the Duo side in the report.)

Test Plan

To reproduce this, I was only able to actually "Deny" my account explicitly in Duo.

  • With "Deny", tried to add a factor. Got a nice helpful error message.
  • Undenied, added a factor, re-denied, tried to pass an MFA gate. Got another nice helpful error message.

Diff Detail

Repository
rP Phabricator
Branch
duo1
Lint
Lint Passed
Unit
Tests Passed
Build Status
Buildable 21778
Build 29719: Run Core Tests
Build 29718: arc lint + arc unit

Event Timeline

amckinley added inline comments.
src/applications/auth/factor/PhabricatorDuoAuthFactor.php
386–387

"The The"

This revision is now accepted and ready to land.Jan 31 2019, 2:45 AM
This revision was automatically updated to reflect the committed changes.