Diffusion Phabricator (master) History

phabricator/src/applications/auth/controller
master

Feb 23 2020

84b5ad09e6e2 Remove all readers and all nontrivial writers for "accountType" and…
Author
epriestley
Revisions
D21019: Remove all readers and all nontrivial writers for "accountType" and "accountDomain" on "ExternalAccount"
Browse Repository
Passed
No Audits

bcaf60015a47 Write ExternalAccountIdentifiers when interacting with external authentication…
Author
epriestley
Revisions
D21016: Write ExternalAccountIdentifiers when interacting with external authentication providers
Browse Repository
Passed
No Audits

05eb16d6de51 Update unusual handling of external accounts in "Password" auth provider
Author
epriestley
Revisions
D21014: Update unusual handling of external accounts in "Password" auth provider
Browse Repository
Passed
No Audits

40946248280e Remove an ancient no-op check for duplicated external accounts
Author
epriestley
Revisions
D21012: Remove an ancient no-op check for duplicated external accounts
Browse Repository
Passed
No Audits

Oct 25 2019

633aa5288c58 Persist login instructions onto flow-specific login pages (username/password…
Author
epriestley
Revisions
D20863: Persist login instructions onto flow-specific login pages (username/password and LDAP)
Browse Repository
Passed
No Audits

Sep 8 2019

caccbb69d20b When users try to log out with no providers configured, warn them of the…
Author
epriestley
Revisions
D20789: When users try to log out with no providers configured, warn them of the consequences
Browse Repository
Passed
No Audits

Jul 24 2019

60db658d52c4 Record account recovery email links in the user activity log and make the mail…
Author
epriestley
Revisions
D20673: Record account recovery email links in the user activity log and make the mail message reference the log
Browse Repository
Passed
No Audits

Jul 19 2019

e090b32c7528 Add a rate limit to requesting account recovery links from a given remote…
Author
epriestley
Revisions
D20667: Add a rate limit to requesting account recovery links from a given remote address
Browse Repository
Passed
No Audits

ced416cc735a Allow Auth messages to have detailed descriptions and default values, then give…
Author
epriestley
Revisions
D20665: Allow Auth messages to have detailed descriptions and default values, then give "Email Login" both
Browse Repository
Passed
No Audits

38d30af362e6 Give "Auth Messages" a view/detail state before users customize them
Author
epriestley
Revisions
D20664: Give "Auth Messages" a view/detail state before users customize them
Browse Repository
Passed
No Audits

5dd489500155 Move "Password Reset" email to "PeopleMailEngine"
Author
epriestley
Revisions
D20662: Move "Password Reset" email to "PeopleMailEngine"
Browse Repository
Passed
No Audits

Jul 15 2019

7852adb84bbe Actually enforce auth.lock-config
Author
amckinley
Revisions
D20645: Actually enforce auth.lock-config
Browse Repository
Passed
No Audits

Jul 10 2019

2c435433e0db Start fleshing out PhabricatorAuthProviderViewController
Author
amckinley
Revisions
D20646: Start fleshing out PhabricatorAuthProviderViewController
Browse Repository
Passed
No Audits

Jun 17 2019

4af73a625fe1 Don't require users be logged in to access the Logout controller, so users with…
Author
epriestley
Revisions
D20578: Don't require users be logged in to access the Logout controller, so users with no Spaces can log out
Browse Repository
Passed
No Audits

May 16 2019

18f0f8b029a9 Add support for custom "Wait for Approval" instructions
Author
epriestley
Browse Repository
Passed
No Audits

Apr 17 2019

0583f6dc50a8 Some formatting changes for showing auth provider config guidance
Author
amckinley
Revisions
D20400: Some formatting changes for showing auth provider config guidance
Browse Repository
Passed
No Audits

Mar 29 2019

02f94cd7d288 Fix an issue with Duo not live-updating properly on login gates
Author
epriestley
Revisions
D20347: Fix an issue with Duo not live-updating properly on login gates
Browse Repository
Passed
No Audits

Feb 15 2019

8f8e863613c0 When users follow an email login link but an install does not use passwords…
Author
epriestley
Revisions
D20170: When users follow an email login link but an install does not use passwords, try to get them to link an account
Browse Repository
Passed
No Audits

2ca316d652d8 When users confirm Duo MFA in the mobile app, live-update the UI
Author
epriestley
Revisions
D20169: When users confirm Duo MFA in the mobile app, live-update the UI
Browse Repository
Passed
No Audits

Feb 14 2019

5892c7898603 Replace all "setQueryParam()" calls with "remove/replaceQueryParam()"
Author
epriestley
Revisions
D20154: Replace all "setQueryParam()" calls with "remove/replaceQueryParam()"
Browse Repository
Passed
No Audits

4c124201623a Replace "URI->setQueryParams()" after initialization with a constructor argument
Author
epriestley
Revisions
D20151: Replace "URI->setQueryParams()" after initialization with a constructor argument
Browse Repository
Passed
No Audits

Feb 12 2019

5a89da12e293 When users have no password on their account, guide them through the "reset…
Author
epriestley
Revisions
D20120: When users have no password on their account, guide them through the "reset password" flow in the guise of "set password"
Browse Repository
Passed
No Audits

3f35c0068ad1 Allow users to register with non-registration providers if they are invited to…
Author
epriestley
Revisions
D20118: Allow users to register with non-registration providers if they are invited to an instance
Browse Repository
Passed
No Audits

d22495a820c6 Make external link/refresh use provider IDs, switch external account MFA to one…
Author
epriestley
Revisions
D20117: Make external link/refresh use provider IDs, switch external account MFA to one-shot
Browse Repository
Passed
No Audits

e5ee656fff0c Make external account unlinking use account IDs, not "providerType +…
Author
epriestley
Revisions
D20113: Make external account unlinking use account IDs, not "providerType + providerDomain" nonsense
Browse Repository
Passed
No Audits

541d794c13df Give ExternalAccount a providerConfigPHID, tying it to a particular provider
Author
epriestley
Revisions
D20112: Give ExternalAccount a providerConfigPHID, tying it to a particular provider
Browse Repository
Passed
No Audits

55c18bc90041 During first-time setup, create an administrator account with no authentication…
Author
epriestley
Revisions
D20111: During first-time setup, create an administrator account with no authentication instead of weird, detached authentication
Browse Repository
Passed
No Audits

Feb 7 2019

fc3b90e1d1b1 Allow users to unlink their last external account with a warning, instead of…
Author
epriestley
Revisions
D20106: Allow users to unlink their last external account with a warning, instead of preventing the action
Browse Repository
Passed
No Audits

Feb 6 2019

9632c704c69d Always allow users to login via email link, even if an install does not use…
Author
epriestley
Revisions
D20100: Always allow users to login via email link, even if an install does not use passwords
Browse Repository
Passed
No Audits

Feb 5 2019

99e5ef84fc25 Remove obsolete "PhabricatorAuthLoginHandler"
Author
epriestley
Revisions
D20099: Remove obsolete "PhabricatorAuthLoginHandler"
Browse Repository
Passed
No Audits

4fcb38a2a94c Move the Auth Provider edit flow toward a more modern layout
Author
epriestley
Revisions
D20096: Move the Auth Provider edit flow toward a more modern layout
Browse Repository
Passed
No Audits

8c8d56dc5636 Replace "Add Auth Provider" radio buttons with a more modern "click to select"…
Author
epriestley
Revisions
D20095: Replace "Add Auth Provider" radio buttons with a more modern "click to select" UI
Browse Repository
Passed
No Audits

6f3bd13cf5da Begin adding more guidance to the "One-Time Login" flow
Author
epriestley
Revisions
D20094: Begin adding more guidance to the "One-Time Login" flow
Browse Repository
Passed
No Audits

Jan 30 2019

70b474e550b7 Allow MFA enrollment guidance to be customized
Author
epriestley
Revisions
D20043: Allow MFA enrollment guidance to be customized
Browse Repository
Passed
No Audits

Jan 28 2019

8e5d9c6f0eb5 Allow MFA providers to be deprecated or disabled
Author
epriestley
Revisions
D20031: Allow MFA providers to be deprecated or disabled
Browse Repository
Passed
No Audits

Jan 23 2019

ab2cbbd9f946 Add a "test message" action for contact numbers
Author
epriestley
Revisions
D20025: Add a "test message" action for contact numbers
Browse Repository
Passed
No Audits

587e9cea19ac Always require MFA to edit contact numbers
Author
epriestley
Revisions
D20024: Always require MFA to edit contact numbers
Browse Repository
Passed
No Audits

7805b217ad8b Prevent users from editing, disabling, or swapping their primary contact number…
Author
epriestley
Revisions
D20023: Prevent users from editing, disabling, or swapping their primary contact number while they have SMS MFA
Browse Repository
Passed
No Audits

bb20c136513c Allow MFA factors to provide more guidance text on create workflows
Author
epriestley
Revisions
D20017: Allow MFA factors to provide more guidance text on create workflows
Browse Repository
Passed
No Audits

596435b35e30 Support designating a contact number as "primary"
Author
epriestley
Revisions
D20011: Support designating a contact number as "primary"
Browse Repository
Passed
No Audits

12203762b7f0 Allow contact numbers to be enabled and disabled
Author
epriestley
Revisions
D20010: Allow contact numbers to be enabled and disabled
Browse Repository
Passed
No Audits

c4244aa177b8 Allow users to access some settings at the "Add MFA" account setup roadblock
Author
epriestley
Revisions
D20008: Allow users to access some settings at the "Add MFA" account setup roadblock
Browse Repository
Passed
No Audits

f0c6ee48233a Add "Contact Numbers" so we can send users SMS mesages
Author
epriestley
Revisions
D19988: Add "Contact Numbers" so we can send users SMS mesages
Browse Repository
Passed
No Audits

Jan 21 2019

6138d5885d23 Update documentation to reflect bin/auth changes
Author
amckinley
Revisions
D20007: Update documentation to reflect bin/auth changes
Browse Repository
Passed
No Audits

Jan 19 2019

22ad1ff2c5b1 Show the customized "Login" message on the login screen
Author
epriestley
Revisions
D19994: Show the customized "Login" message on the login screen
Browse Repository
Passed
No Audits

2c713b2d25fd Add "Auth Messages" to support customizing onboarding/welcome flows
Author
epriestley
Revisions
D19992: Add "Auth Messages" to support customizing onboarding/welcome flows
Browse Repository
Passed
No Audits

Jan 16 2019

a62f334d9503 Add a skeleton for configurable MFA provider types
Author
epriestley
Revisions
D19935: Add a skeleton for configurable MFA provider types
Browse Repository
Passed
No Audits

Dec 28 2018

38c48ae7d048 Remove support for the "TYPE_AUTH_WILLLOGIN" event
Author
epriestley
Revisions
D19904: Remove support for the "TYPE_AUTH_WILLLOGIN" event
Browse Repository
Passed
No Audits

ff49d1ef776b Allow "bin/auth recover" to generate a link which forces a full login session
Author
epriestley
Revisions
D19903: Allow "bin/auth recover" to generate a link which forces a full login session
Browse Repository
Passed
No Audits

Dec 19 2018

979187132d7b Update accountadmin to use new admin empowerment code
Author
amckinley
Revisions
D19915: Update accountadmin to use new admin empowerment code
Browse Repository
Passed
No Audits

Dec 14 2018

1d34238dc945 Upgrade sessions digests to HMAC256, retaining compatibility with old digests
Author
epriestley
Revisions
D19883: Upgrade sessions digests to HMAC256, retaining compatibility with old digests
Browse Repository
Passed
No Audits

Mar 1 2018

ab579f251110 Never generate file download forms which point to the CDN domain, tighten "form…
Author
epriestley
Revisions
D19156: Never generate file download forms which point to the CDN domain, tighten "form-action" CSP
Browse Repository
Passed
No Audits

Jan 23 2018

abc030fa008b Move account passwords to shared infrastructure
Author
epriestley
Revisions
D18903: Move account passwords to shared infrastructure
Browse Repository
Passed
No Audits

Jan 22 2018

fa1ecb7f6612 Add a `bin/auth revoke` revoker for SSH keys
Author
epriestley
Revisions
D18893: Add a `bin/auth revoke` revoker for SSH keys
Browse Repository
Passed
No Audits

Dec 26 2017

ad4db9b2f3f8 Separate "Set/Reset Password" from "Change Password"
Author
epriestley
Revisions
D18840: Separate "Set/Reset Password" from "Change Password"
Browse Repository
Passed
No Audits

Nov 28 2017

dc62d18b4736 Allow MFA enrollment before email verification
Author
epriestley
Revisions
D18792: Allow MFA enrollment before email verification
Browse Repository
Passed
No Audits

ab0f61aa323d Tell users to "Wait Patiently" for admin account verification later in the…
Author
epriestley
Revisions
D18791: Tell users to "Wait Patiently" for admin account verification later in the registration process
Browse Repository
Passed
No Audits

Oct 9 2017

9bd6a3705559 Fix spelling
Author
0
Revisions
D18693: Fix spelling
Browse Repository
Failed
No Audits

Sep 20 2017

3fbad684c142 More completely explain why we're refusing to send reset mail to an unverified…
Author
epriestley
Revisions
D18630: More completely explain why we're refusing to send reset mail to an unverified address
Browse Repository
Passed
No Audits

Aug 21 2017

39d19c33ec9c Redirect users back to where they added an SSH Key
Author
Chad Little <chad@phacility.com>
Revisions
D18445: Redirect users back to where they added an SSH Key
Browse Repository
Passed
No Audits

Aug 2 2017

ba4b936dffce Use Log In vs. Login when it's a verb
Author
Chad Little <chad@phacility.com>
Revisions
D18322: Use Log In vs. Login when it's a verb
Browse Repository
Passed
No Audits

May 31 2017

2c0dab055f73 Make "simple" a "button type", not a "color"
Author
epriestley
Revisions
D18048: Make "simple" a "button type", not a "color"
Browse Repository
Passed
No Audits

Apr 6 2017

3d816e94dfbe Rename "PhabricatorHash::digest()" to "weakDigest()"
Author
epriestley
Revisions
D17632: Rename "PhabricatorHash::digest()" to "weakDigest()"
Browse Repository
Passed
No Audits

Apr 4 2017

873b39be8211 Remove PhabricatorFile::buildFromFileDataOrHash()
Author
epriestley
Revisions
D17617: Remove PhabricatorFile::buildFromFileDataOrHash()
Browse Repository
Passed
No Audits

45b386596e62 Make the Files "TTL" API more structured
Author
epriestley
Revisions
D17616: Make the Files "TTL" API more structured
Browse Repository
Passed
No Audits

Feb 17 2017

a778151f28c1 Fix errors found by PHPStan
Author
vrana
Revisions
D17371: Fix errors found by PHPStan
Browse Repository
Passed
No Audits

Feb 13 2017

8dd7b544fe0a Don't show an auth provider as enabled if it's still being created
Author
amckinley
Revisions
D17337: Don't show an auth provider as enabled if it's still being created
Browse Repository
Passed
No Audits

Jan 17 2017

23721799fd0b Explicitly warn the user multiple times when they try to register an external…
Author
epriestley
Revisions
D17212: Explicitly warn the user multiple times when they try to register an external account with an existing email
Browse Repository
Passed
No Audits

Dec 9 2016

9c72c1b1daa9 When rendering the "you were invited" header, query the inviting user with the…
Author
epriestley
Revisions
D17015: When rendering the "you were invited" header, query the inviting user with the omnipotent viewer
Browse Repository
Passed
No Audits

Nov 15 2016

7097abbe570c Add a bunch of Phacility-specific code to the upstream, thinly veiled as…
Author
epriestley
Revisions
D16861: Add a bunch of Phacility-specific code to the upstream, thinly veiled as generic code
Browse Repository
Passed
No Audits

Sep 13 2016

2588b4fac0c1 Added initial class for displaying invisible chars
Author
jcox
Revisions
D16541: Added initial class for displaying invisible chars
Browse Repository
Passed
No Audits

Aug 18 2016

1cca7fbccef8 Simplify PHUIObjectItemList a bit
Author
Chad Little <chad@phacility.com>
Revisions
D16418: Simplify PHUIObjectItemList a bit
Browse Repository
Passed
No Audits

Jun 28 2016

ec8581ab629e Clean up redirect URIs for "Temporary Tokens" and "API Tokens" settings panels
Author
epriestley
Revisions
D16185: Clean up redirect URIs for "Temporary Tokens" and "API Tokens" settings panels
Browse Repository
Passed
No Audits

Jun 22 2016

2cb779575dd5 Split "Edit Blocking Tasks" into "Edit Parent Tasks" and "Edit Subtasks"
Author
epriestley
Revisions
D16166: Split "Edit Blocking Tasks" into "Edit Parent Tasks" and "Edit Subtasks"
Browse Repository
Passed
No Audits

Jun 7 2016

ffb50ef45d1b Require login for "Must Verify Email" controller
Author
epriestley
Revisions
D16077: Require login for "Must Verify Email" controller
Browse Repository
Passed
No Audits

abeab594486f Fix redirect to Password settings panel after "Reset Password" login
Author
epriestley
Revisions
D16075: Fix redirect to Password settings panel after "Reset Password" login
Browse Repository
Passed
No Audits

Jun 6 2016

e1a9473eda04 Make auth provider autologin modular and implement it for all OAuth2 adapters
Author
epriestley
Revisions
D16060: Make auth provider autologin modular and implement it for all OAuth2 adapters
Browse Repository
Passed
No Audits

May 19 2016

6f6ca0102daa Send forced mail on SSH key edits
Author
epriestley
Revisions
D15948: Send forced mail on SSH key edits
Browse Repository
Passed
No Audits

da6b3de65c14 Use transactions to apply web UI SSH key edits
Author
epriestley
Revisions
D15947: Use transactions to apply web UI SSH key edits
Browse Repository
Passed
No Audits

08bea1d363fd Add ViewController and SearchEngine for SSH Public Keys
Author
epriestley
Revisions
D15946: Add ViewController and SearchEngine for SSH Public Keys
Browse Repository
Passed
No Audits

May 18 2016

0308d580d7df Deactivate SSH keys instead of destroying them completely
Author
epriestley
Revisions
D15943: Deactivate SSH keys instead of destroying them completely
Browse Repository
Passed
No Audits

Apr 17 2016

eef217216116 When a user tries to regsiter while logged in, just send them home
Author
epriestley
Revisions
D15739: When a user tries to regsiter while logged in, just send them home
Browse Repository
Passed
No Audits

Apr 5 2016

46881c4ce507 Add a session engine extension point
Author
epriestley
Revisions
D15629: Add a session engine extension point
Browse Repository
Passed
No Audits

Apr 4 2016

e55522cade3f Implement "auth.logout" Conduit API method
Author
epriestley
Revisions
D15594: Implement "auth.logout" Conduit API method
Browse Repository
Passed
No Audits

Mar 31 2016

6bbba1e3151d Update Auth for new UI
Author
chad
Revisions
D15550: Update Auth for new UI
Browse Repository
Passed
No Audits

Mar 16 2016

a837c3d73eaf Make temporary token storage/schema more flexible
Author
epriestley
Revisions
D15478: Make temporary token storage/schema more flexible
Browse Repository
Passed
No Audits

8e3ea4e034eb Use new modular temporary auth token constants in one-time login and password…
Author
epriestley
Revisions
D15476: Use new modular temporary auth token constants in one-time login and password reset flows
Browse Repository
Passed
No Audits

Jan 28 2016

36158dbdc081 Convert all calls to 'IconFont' to just 'Icon'
Author
chad
Revisions
D15125: Convert all calls to 'IconFont' to just 'Icon'
Browse Repository
Passed
No Audits

Dec 17 2015

5d76a4b0a2f5 Improve handling of multiple edit forms when logged out
Author
epriestley
Revisions
D14806: Improve handling of multiple edit forms when logged out
Browse Repository
Passed
No Audits

e869e7df0b79 When logged-out users hit a "Login Required" dialog, try to choose a better…
Author
epriestley
Revisions
D14804: When logged-out users hit a "Login Required" dialog, try to choose a better "next" URI
Browse Repository
Passed
No Audits

Dec 15 2015

6c4c93a091fa Allow login to be disabled for authentication providers
Author
epriestley
Revisions
D14794: Allow login to be disabled for authentication providers
Browse Repository
Passed
No Audits

Nov 3 2015

1b00ef08a039 Remove some low-hanging buildStandardPageResponse() methods
Author
epriestley
Revisions
D14385: Remove some low-hanging buildStandardPageResponse() methods
Browse Repository
Passed
No Audits

Nov 2 2015

c35b564f4d32 Various translation improvements
Author
joshuaspence
Revisions
D14073: Various translation improvements
Browse Repository
Passed
No Audits

Oct 25 2015

59c931710100 Prevent mailing lists from being bin/auth recover'd
Author
epriestley
Revisions
D14325: Prevent mailing lists from being bin/auth recover'd
Browse Repository
Passed
No Audits

Oct 24 2015

b038041dc600 Prevent duplicate account links from being created by swapping logins and then…
Author
epriestley
Revisions
D14319: Prevent duplicate account links from being created by swapping logins and then refreshing the link
Browse Repository
Passed
No Audits

Sep 4 2015

5dccc14bbf46 Modularize generation of supplemental login messages
Author
epriestley
Revisions
D14057: Modularize generation of supplemental login messages
Browse Repository
No Builds
No Audits

Sep 1 2015

29948eaa5bd2 Use phutil_hashes_are_identical() when comparing hashes in Phabricator
Author
epriestley
Revisions
D14026: Use phutil_hashes_are_identical() when comparing hashes in Phabricator
Browse Repository
No Builds
No Audits

Aug 3 2015

b4b5d60f77fb Fix 'key'/'type' swap in email reset / one-time-login controller
Author
epriestley
Revisions
D13778: Fix 'key'/'type' swap in email reset / one-time-login controller
Browse Repository
No Builds
No Audits

Aug 1 2015

36103dfa182c Update Auth for handleRequest
Author
Chad Little <chad@phacility.com>
Revisions
D13748: Update Auth for handleRequest
Browse Repository
No Builds
No Audits

Jun 15 2015

2d5f3d9e5aff Fix a pht string
Author
joshuaspence
Revisions
D13292: Fix a pht string
Browse Repository
No Builds
No Audits