HomePhabricator

Forbid disabled devices from authenticating via SSH or HTTP

Description

Forbid disabled devices from authenticating via SSH or HTTP

Summary:
Ref T13641. Phabricator sometimes makes intracluster requests that authenticate as a device.

Forbid these requests from authenticating as a disabled device.

Test Plan:

  • Ran bin/ssh-exec --phabricator-ssh-device ... as an enabled/disabled device (worked; sensible error).
  • Made Conduit calls as an enable/disabled device (worked; sensible error).

Maniphest Tasks: T13641

Differential Revision: https://secure.phabricator.com/D21635

Details

Provenance
epriestleyAuthored on Mar 16 2021, 10:33 PM
epriestleyPushed on Mar 16 2021, 10:51 PM
Differential Revision
D21635: Forbid disabled devices from authenticating via SSH or HTTP
Parents
rP3267859aeeb2: Modernize "mailKey" on Fund initiatives
Branches
Unknown
Tags
Unknown
Tasks
T13641: Support "Disabled" devices in Almanac
Build Status
Buildable 25304
Build 34930: Run Core Tests