Diffusion Phabricator (master) History

phabricator/src/applications/auth/provider
master

Feb 19 2021

be0bb68f6536 Remove Facebook OAuth dependency on "security_settings" property
Author
epriestley
Revisions
D21571: Remove Facebook OAuth dependency on "security_settings" property
Browse Repository
Passed
No Audits

Mar 9 2020

62f5bdbbd2c5 According to Jira Project keys must start with an uppercase letter, followed by…
Author
Arturas Moskvinas arturas@uber.com <arturas@uber.com>
Revisions
D21040: According to Jira Project keys must start with an uppercase letter, followed by one or more uppercase alphanumeric characters
Browse Repository
Passed
No Audits

Feb 24 2020

d0f4554dbeb0 Read both email addresses and Google Account IDs from Google OAuth
Author
epriestley
Revisions
D21028: Read both email addresses and Google Account IDs from Google OAuth
Browse Repository
Passed
No Audits

Feb 23 2020

802b5aca05cc Remove all readers and writers of "accountID" on "ExternalAccount"
Author
epriestley
Revisions
D21022: Remove all readers and writers of "accountID" on "ExternalAccount"
Browse Repository
Passed
No Audits

84b5ad09e6e2 Remove all readers and all nontrivial writers for "accountType" and…
Author
epriestley
Revisions
D21019: Remove all readers and all nontrivial writers for "accountType" and "accountDomain" on "ExternalAccount"
Browse Repository
Passed
No Audits

bcaf60015a47 Write ExternalAccountIdentifiers when interacting with external authentication…
Author
epriestley
Revisions
D21016: Write ExternalAccountIdentifiers when interacting with external authentication providers
Browse Repository
Passed
No Audits

05eb16d6de51 Update unusual handling of external accounts in "Password" auth provider
Author
epriestley
Revisions
D21014: Update unusual handling of external accounts in "Password" auth provider
Browse Repository
Passed
No Audits

e43ecad8afc4 Make external account identifier APIs return multiple identifiers
Author
epriestley
Revisions
D21013: Make external account identifier APIs return multiple identifiers
Browse Repository
Passed
No Audits

Jul 24 2019

32dd13d43421 Modularize user activity log message types
Author
epriestley
Revisions
D20671: Modularize user activity log message types
Browse Repository
Passed
No Audits

Jul 19 2019

a75766c0e501 Replace old rate limiting in password login flow with "SystemAction" rate…
Author
epriestley
Revisions
D20668: Replace old rate limiting in password login flow with "SystemAction" rate limiting
Browse Repository
Passed
No Audits

Jun 21 2019

ca56e8590a3d Don't handle JIRA/Asana URIs with anchors or query parameters in a special way…
Author
epriestley
Revisions
D20592: Don't handle JIRA/Asana URIs with anchors or query parameters in a special way (with Doorkeeper)
Browse Repository
Passed
No Audits

May 21 2019

f4201593808d Implement Asana and JIRA external links via HyperlinkEngineExtension, not…
Author
epriestley
Revisions
D20528: Implement Asana and JIRA external links via HyperlinkEngineExtension, not separate Remarkup rules
Browse Repository
Passed
No Audits

Feb 23 2019

701a9bc339b9 Fix Facebook login on mobile violating CSP after form redirect
Author
epriestley
Revisions
D20206: Fix Facebook login on mobile violating CSP after form redirect
Browse Repository
Passed
No Audits

Feb 15 2019

8f8e863613c0 When users follow an email login link but an install does not use passwords…
Author
epriestley
Revisions
D20170: When users follow an email login link but an install does not use passwords, try to get them to link an account
Browse Repository
Passed
No Audits

Feb 14 2019

241f06c9ffc6 Clean up final `setQueryParams()` callsites
Author
epriestley
Revisions
D20153: Clean up final `setQueryParams()` callsites
Browse Repository
Passed
No Audits

Feb 12 2019

541d794c13df Give ExternalAccount a providerConfigPHID, tying it to a particular provider
Author
epriestley
Revisions
D20112: Give ExternalAccount a providerConfigPHID, tying it to a particular provider
Browse Repository
Passed
No Audits

1fd69f788cee Replace "getQueryParams()" callsites in Phabricator
Author
epriestley
Revisions
D20141: Replace "getQueryParams()" callsites in Phabricator
Browse Repository
Passed
No Audits

Feb 7 2019

949afb02fd19 On login forms, autofocus the "username" field
Author
epriestley
Revisions
D20122: On login forms, autofocus the "username" field
Browse Repository
Passed
No Audits

Feb 5 2019

8c8d56dc5636 Replace "Add Auth Provider" radio buttons with a more modern "click to select"…
Author
epriestley
Revisions
D20095: Replace "Add Auth Provider" radio buttons with a more modern "click to select" UI
Browse Repository
Passed
No Audits

Jan 19 2019

310ad7f8f47b Put a hard limit on password login attempts from the same remote address
Author
epriestley
Revisions
D19997: Put a hard limit on password login attempts from the same remote address
Browse Repository
Passed
No Audits

Mar 1 2018

94d340fcffab Include OAuth targets in "form-action" Content-Security-Policy
Author
epriestley
Revisions
D19159: Include OAuth targets in "form-action" Content-Security-Policy
Browse Repository
Passed
No Audits

Jan 23 2018

abc030fa008b Move account passwords to shared infrastructure
Author
epriestley
Revisions
D18903: Move account passwords to shared infrastructure
Browse Repository
Passed
No Audits

Oct 9 2017

5897294fa97e Add spelling TODOs
Author
0
Revisions
D18695: Add spelling TODOs
Browse Repository
Passed
No Audits

9bd6a3705559 Fix spelling
Author
0
Revisions
D18693: Fix spelling
Browse Repository
Failed
No Audits

Aug 2 2017

ba4b936dffce Use Log In vs. Login when it's a verb
Author
Chad Little <chad@phacility.com>
Revisions
D18322: Use Log In vs. Login when it's a verb
Browse Repository
Passed
No Audits

Apr 6 2017

3d816e94dfbe Rename "PhabricatorHash::digest()" to "weakDigest()"
Author
epriestley
Revisions
D17632: Rename "PhabricatorHash::digest()" to "weakDigest()"
Browse Repository
Passed
No Audits

Dec 5 2016

0ad1dd640a09 Remove the Persona login method
Author
eadler
Revisions
D16371: Remove the Persona login method
Browse Repository
Passed
No Audits

Sep 6 2016

defee9385196 Add Slack authentication adapter
Author
chad
Revisions
D16496: Add Slack authentication adapter
Browse Repository
Passed
No Audits

Aug 16 2016

95cf83f14ead Convert some whiny exceptions into quiet MalformedRequest exceptions
Author
epriestley
Revisions
D16402: Convert some whiny exceptions into quiet MalformedRequest exceptions
Browse Repository
Passed
No Audits

Jun 6 2016

e1a9473eda04 Make auth provider autologin modular and implement it for all OAuth2 adapters
Author
epriestley
Revisions
D16060: Make auth provider autologin modular and implement it for all OAuth2 adapters
Browse Repository
Passed
No Audits

Apr 5 2016

46881c4ce507 Add a session engine extension point
Author
epriestley
Revisions
D15629: Add a session engine extension point
Browse Repository
Passed
No Audits

Mar 16 2016

6ef4747e9da5 Convert OAuth1 handshake tokens to new modular temporary tokens
Author
epriestley
Revisions
D15480: Convert OAuth1 handshake tokens to new modular temporary tokens
Browse Repository
Passed
No Audits

a837c3d73eaf Make temporary token storage/schema more flexible
Author
epriestley
Revisions
D15478: Make temporary token storage/schema more flexible
Browse Repository
Passed
No Audits

Dec 15 2015

6c4c93a091fa Allow login to be disabled for authentication providers
Author
epriestley
Revisions
D14794: Allow login to be disabled for authentication providers
Browse Repository
Passed
No Audits

Dec 2 2015

91447c54bce0 Write 500 words on how to restart webservers
Author
epriestley
Revisions
D14636: Write 500 words on how to restart webservers
Browse Repository
Passed
No Audits

Nov 12 2015

e8fdf478bbc9 JIRA Integration: Link and/or Comment
Author
avivey
Revisions
D9858: JIRA Integration: Link and/or Comment
Browse Repository
Passed
No Audits

Sep 1 2015

29948eaa5bd2 Use phutil_hashes_are_identical() when comparing hashes in Phabricator
Author
epriestley
Revisions
D14026: Use phutil_hashes_are_identical() when comparing hashes in Phabricator
Browse Repository
No Builds
No Audits

Jul 7 2015

f695dcea9ee8 Use PhutilClassMapQuery
Author
joshuaspence
Revisions
D13429: Use PhutilClassMapQuery
Browse Repository
No Builds
No Audits

Jun 15 2015

53ef057b1b51 Merge branch 'master' into redesign-2015
Author
epriestley
Browse Repository
No Builds
Audited

b6d745b66687 Extend from Phobject
Author
joshuaspence
Revisions
D13283: Extend from Phobject
Browse Repository
No Builds
No Audits

May 22 2015

bfca11dbbadf Merge branch 'master' into redesign-2015
Author
epriestley
Browse Repository
No Builds
Audited

36e2d02d6ec5 phtize all the things
Author
joshuaspence
Revisions
D12797: phtize all the things
Browse Repository
No Builds
No Audits

May 20 2015

a4784e03fff4 [Redesign] Add Table, Collapse support to ObjectBox
Author
Chad Little <chad@phacility.com>
Revisions
D12955: [Redesign] Add Table, Collapse support to ObjectBox
Browse Repository
No Builds
No Audits

May 13 2015

61b178f44e48 Use PhutilInvalidStateException
Author
joshuaspence
Revisions
D12829: Use PhutilInvalidStateException
Browse Repository
No Builds
No Audits

Mar 25 2015

4f8147dbb8c0 Improve protection against SSRF attacks
Author
epriestley
Revisions
D12151: Improve protection against SSRF attacks
Browse Repository
No Builds
No Audits

Mar 1 2015

c038c643f498 Move PHUIErrorView to PHUIInfoView
Author
chad
Revisions
D11867: Move PHUIErrorView to PHUIInfoView
Browse Repository
No Builds
No Audits

Feb 11 2015

779744342865 Support invites in the registration and login flow
Author
epriestley
Revisions
D11737: Support invites in the registration and login flow
Browse Repository
No Builds
No Audits

Feb 6 2015

472f316bbd90 Auth - allow for "auto login" providers
Author
btrahan
Revisions
D11701: Auth - allow for "auto login" providers
Browse Repository
No Builds
No Audits

Feb 2 2015

3da38c74da21 PHUIErrorView
Author
chad
Revisions
D11605: PHUIErrorView
Browse Repository
No Builds
No Audits

Jan 9 2015

04fb3defd9b4 Auth - fix headers for instructions on Phabricator OAuth provider
Author
btrahan
Revisions
D11294: Auth - fix headers for instructions on Phabricator OAuth provider
Browse Repository
No Builds
No Audits

2be746fb1f3a Auth - restore Phabricator OAuth as a provider
Author
btrahan
Revisions
D11287: Auth - restore Phabricator OAuth as a provider
Browse Repository
No Builds
No Audits

Jan 6 2015

81972b61d752 Fix method visibility for `PhabricatorBitbucketAuthProvider…
Author
joshuaspence
Revisions
D11246: Fix method visibility for `PhabricatorBitbucketAuthProvider::getProviderConfigurationHelp()`
Browse Repository
No Builds
No Audits

Dec 2 2014

69cc5df6456b Transactions - deploy buildTransactionTimeline against a few more applications
Author
btrahan
Revisions
D10921: Transactions - deploy buildTransactionTimeline against a few more applications
Browse Repository
No Builds
No Audits

Oct 7 2014

3cf9a5820fc9 Minor formatting changes
Author
joshuaspence
Revisions
D10585: Minor formatting changes
Browse Repository
No Builds
No Audits

Aug 18 2014

df361470c1d9 Be more strict about "Location:" redirects
Author
epriestley
Revisions
D10291: Be more strict about "Location:" redirects
Browse Repository
No Builds
No Audits

Aug 13 2014

ef0460c1ffee Surface a better warning when the LDAP extension is not installed
Author
epriestley
Revisions
D10260: Surface a better warning when the LDAP extension is not installed
Browse Repository
No Builds
No Audits

bcdadf5947b3 Add autocomplete=off to all non-login password forms
Author
epriestley
Revisions
D10253: Add autocomplete=off to all non-login password forms
Browse Repository
No Builds
No Audits

Aug 8 2014

12aaa942acc5 Add a CanCDN flag to uploaded files
Author
20after4
Revisions
D10166: Add a CanCDN flag to uploaded files
Browse Repository
No Builds
No Audits

Jul 23 2014

86c399b65783 Rename `PhabricatorApplication` subclasses
Author
joshuaspence
Revisions
D9982: Rename `PhabricatorApplication` subclasses
Browse Repository
No Builds
No Audits

Jul 22 2014

f4b05312cdf5 Fix broken references to auth adapters
Author
joshuaspence
Browse Repository
No Builds
Audited

701bb2ac6ec9 Rename auth classes for consistency
Author
joshuaspence
Revisions
D9999: Rename auth classes for consistency
Browse Repository
No Builds
No Audits

Jul 21 2014

8999a1c1ea55 Utilize `PhutilMethodNotImplementedException`
Author
joshuaspence
Revisions
D10000: Utilize `PhutilMethodNotImplementedException`
Browse Repository
No Builds
No Audits

Jul 15 2014

7ac5abb97934 Recover from a broken external OAuth2 account
Author
Evan Priestley <epriestley@orbital.(none)>
Revisions
D9937: Recover from a broken external OAuth2 account
Browse Repository
No Builds
No Audits

Jun 28 2014

0398559c8e25 Support Bitbucket as an auth provider in Phabricator
Author
epriestley
Revisions
D9762: Support Bitbucket as an auth provider in Phabricator
Browse Repository
No Builds
No Audits

2d36afeaab7c Manage OAuth1 request token secrets in core OAuth1 workflow
Author
epriestley
Revisions
D9760: Manage OAuth1 request token secrets in core OAuth1 workflow
Browse Repository
No Builds
No Audits

Jun 9 2014

d0128afa2908 Applied various linter fixes.
Author
joshuaspence
Revisions
D9443: Applied various linter fixes.
Browse Repository
No Builds
No Audits

0a62f13464b8 Change double quotes to single quotes.
Author
joshuaspence
Revisions
D9431: Change double quotes to single quotes.
Browse Repository
No Builds
No Audits

May 16 2014

43d45c49568a can now tell phabricator you trust an auth provider's emails (useful for Google…
Author
talshiri
Revisions
D9150: can now tell phabricator you trust an auth provider's emails (useful for Google OAuth), which will mark emails as "verified" and will skip email verification.
Browse Repository
No Builds
No Audits

May 8 2014

0da22abdb5f8 WordPress.com OAuth2 plugin
Author
Abbe
Revisions
D9019: WordPress.com OAuth2 plugin
Browse Repository
No Builds
No Audits

Apr 11 2014

499f66963d2b Minor, fix the scoping of a static variable
Author
epriestley
Browse Repository
No Builds
Audited

Apr 9 2014

2d43cf12964d OAuth - add a little notes section for admins to remember details about…
Author
btrahan
Revisions
D8726: OAuth - add a little notes section for admins to remember details about external accounts
Browse Repository
No Builds
No Audits

Apr 8 2014

582ec5446532 Add a checkbox to the LDAP auth configuration UI to "Always Search"
Author
epriestley
Revisions
D8723: Add a checkbox to the LDAP auth configuration UI to "Always Search"
Browse Repository
No Builds
No Audits

Mar 25 2014

750c872839e7 Update Google auth documentation to discuss "Google+ API" and new console URI
Author
epriestley
Revisions
D8613: Update Google auth documentation to discuss "Google+ API" and new console URI
Browse Repository
No Builds
No Audits

Mar 17 2014

ba8925a531c7 Support multiple LDAP filters in the Phabricator UI
Author
epriestley
Revisions
D8160: Support multiple LDAP filters in the Phabricator UI
Browse Repository
No Builds
No Audits

Mar 13 2014

a9f38e55e5e4 Modernize Facebook OAuth instructions
Author
epriestley
Revisions
D8518: Modernize Facebook OAuth instructions
Browse Repository
No Builds
No Audits

969d0c3e8de2 Use "\z" instead of "$" to anchor validating regular expressions
Author
epriestley
Revisions
D8516: Use "\z" instead of "$" to anchor validating regular expressions
Browse Repository
No Builds
No Audits

Feb 24 2014

a566ae373015 Require a CSRF code for Twitter and JIRA (OAuth 1) logins
Author
epriestley
Revisions
D8318: Require a CSRF code for Twitter and JIRA (OAuth 1) logins
Browse Repository
No Builds
No Audits

Feb 18 2014

580bcd0d2be4 Implement bcrypt hasher, transparent login upgrade, and explicit upgrade for…
Author
epriestley
Revisions
D8270: Implement bcrypt hasher, transparent login upgrade, and explicit upgrade for passwords
Browse Repository
No Builds
No Audits

3c9153079f13 Make password hashing modular
Author
epriestley
Revisions
D8268: Make password hashing modular
Browse Repository
No Builds
No Audits

Jan 23 2014

febc494737be Actually check CSRF on Password and LDAP forms
Author
epriestley
Revisions
D8051: Actually check CSRF on Password and LDAP forms
Browse Repository
No Builds
No Audits

f9ac534f255d Support CSRF for logged-out users
Author
epriestley
Revisions
D8046: Support CSRF for logged-out users
Browse Repository
No Builds
No Audits

24544b1a2f24 Straighten out absolute/relative URIs in login providers
Author
epriestley
Revisions
D8045: Straighten out absolute/relative URIs in login providers
Browse Repository
No Builds
No Audits

072741802350 Consolidate use of magical cookie name strings
Author
epriestley
Revisions
D8041: Consolidate use of magical cookie name strings
Browse Repository
No Builds
No Audits

Jan 14 2014

220d680f3769 Allow PhabricatorUserLog to store non-user PHIDs
Author
epriestley
Revisions
D7953: Allow PhabricatorUserLog to store non-user PHIDs
Browse Repository
No Builds
No Audits

Jan 8 2014

324ee4e4d539 Fix rendering issue for LDAP configuration provider transactions
Author
epriestley
Revisions
D7905: Fix rendering issue for LDAP configuration provider transactions
Browse Repository
No Builds
No Audits

3524ba3fb56a Add warnings to JIRA auth provider that we only support JIRA 6
Author
epriestley
Revisions
D7906: Add warnings to JIRA auth provider that we only support JIRA 6
Browse Repository
No Builds
No Audits

Nov 25 2013

e4920cdf8668 Provide an LDAPS example in LDAP auth
Author
epriestley
Revisions
D7652: Provide an LDAPS example in LDAP auth
Browse Repository
No Builds
No Audits

Nov 14 2013

dcf909ba56bf Land to GitHub + support stuff
Author
avivey
Revisions
D7555: Land to GitHub + support stuff
Browse Repository
No Builds
No Audits

Nov 11 2013

a29b5b070f5a Replace some hsprintf() by phutil_tag()
Author
vrana
Revisions
D7549: Replace some hsprintf() by phutil_tag()
Browse Repository
No Builds
No Audits

Oct 31 2013

2250ee6aa6b8 Allow null for token expiration date
Author
avivey
Revisions
D7466: Allow null for token expiration date
Browse Repository
No Builds
No Audits

Oct 14 2013

d2895249ee5e Add Persona login icon
Author
chad
Revisions
D7316: Add Persona login icon
Browse Repository
No Builds
No Audits

0ce4f6d17687 Add Persona auth provider
Author
epriestley
Revisions
D7313: Add Persona auth provider
Browse Repository
No Builds
No Audits

Sep 9 2013

5ba20b8924d5 Move PhabricatorObjectItem to PHUIObjectItem, add 'plain' setting for lists.
Author
chad
Browse Repository
No Builds
No Audits

Sep 4 2013

825fb9c85ae7 Add JIRA doorkeeper and remarkup support
Author
epriestley
Browse Repository
No Builds
No Audits

Sep 3 2013

e5b4ce5525d7 Reduce the amount of OAuth1/OAuth2 code duplication for rendering login buttons
Author
epriestley
Browse Repository
No Builds
No Audits

25eb401e18ae Handle user aborts during auth workflows in Phabricator
Author
epriestley
Browse Repository
No Builds
No Audits

4e12a375f3f4 Add JIRA as an authentication provider
Author
epriestley
Browse Repository
No Builds
No Audits

25e43e872bb6 Add Twitter as an authentication provider
Author
epriestley
Browse Repository
No Builds
No Audits

Aug 26 2013

fe2a96e37ff0 Update Form Layouts
Author
chad
Browse Repository
No Builds
No Audits

Aug 12 2013

fe766ff6830c Fix twitch name
Author
chad
Browse Repository
No Builds
No Audits