phab/src/applications/authfeature/better-testing
phab/src/applications/auth
feature/better-testing
History Graph
History Graph
Commit | Author | Details | Committed | |||
---|---|---|---|---|---|---|
580bcd0d2be4 | epriestley | Implement bcrypt hasher, transparent login upgrade, and explicit upgrade for… | Feb 18 2014 | |||
3c9153079f13 | epriestley | Make password hashing modular | Feb 18 2014 | |||
4743ad96497b | Chad Little | Miniturize the nav buttons | Jan 31 2014 | |||
049fb2018bde | epriestley | Add very basic "quick create" menu | Jan 29 2014 | |||
152f05aebed0 | epriestley | Fix some security issues with email password resets | Jan 28 2014 | |||
febc494737be | epriestley | Actually check CSRF on Password and LDAP forms | Jan 23 2014 | |||
5b1d9c935a90 | epriestley | After writing "next_uri", don't write it again for a while | Jan 23 2014 | |||
f9ac534f255d | epriestley | Support CSRF for logged-out users | Jan 23 2014 | |||
24544b1a2f24 | epriestley | Straighten out absolute/relative URIs in login providers | Jan 23 2014 | |||
69ddb0ced631 | epriestley | Issue "anonymous" sessions for logged-out users | Jan 23 2014 | |||
072741802350 | epriestley | Consolidate use of magical cookie name strings | Jan 23 2014 | |||
02aa193cb05e | epriestley | Add a common password blacklist | Jan 23 2014 | |||
2ec45d42a689 | epriestley | Remove session limits and sequencing | Jan 16 2014 | |||
acb141cf52c1 | epriestley | Expire and garbage collect unused sessions | Jan 15 2014 | |||
a64228b03fbc | epriestley | Give the session table a normal `id` column as a primary key | Jan 15 2014 | |||
41d2a0953604 | Bob Trahan | Legalpad - make it work for not logged in users | Jan 15 2014 | |||
31a2bebf633b | Chad Little | Move PhabricatorTagView to PHUITagView | Jan 14 2014 | |||
d392a8f15700 | epriestley | Replace "web" and "conduit" magic session strings with constants | Jan 14 2014 | |||
eef314b70149 | epriestley | Separate session management from PhabricatorUser | Jan 14 2014 | |||
3d9e328fb388 | epriestley | Add an "active login sessions" table to Settings | Jan 14 2014 | |||
220d680f3769 | epriestley | Allow PhabricatorUserLog to store non-user PHIDs | Jan 14 2014 | |||
b74c7a3d371a | Chad Little | Simplify PHUIObjectBoxViews handling of Save and Error states | Jan 10 2014 | |||
324ee4e4d539 | epriestley | Fix rendering issue for LDAP configuration provider transactions | Jan 8 2014 | |||
3524ba3fb56a | epriestley | Add warnings to JIRA auth provider that we only support JIRA 6 | Jan 8 2014 | |||
e397103bf211 | epriestley | Extend all "ManagementWorkflow" classes from a base class | Dec 27 2013 | |||
a5dc9067af0c | epriestley | Provide convenience method addTextCrumb() to PhabricatorCrumbsView | Dec 19 2013 | |||
e4920cdf8668 | epriestley | Provide an LDAPS example in LDAP auth | Nov 25 2013 | |||
3a035c02e7b9 | epriestley | Recover more flexibly from an already-verified email | Nov 21 2013 | |||
a518626a8574 | epriestley | Slightly improve behavior for unverified + unapproved users | Nov 21 2013 | |||
6eb02af314a4 | epriestley | Allow "bin/auth recover" to succeed before phabricator.base-uri is set | Nov 20 2013 | |||
dcf909ba56bf | Aviv Eyal/epriestley | Land to GitHub + support stuff | Nov 14 2013 | |||
87a655e8c53c | epriestley | Fix new logged-out "Login" button URI and workflowiness | Nov 13 2013 | |||
fb6e38548b0c | epriestley | Respect "can edit username" in registration UI | Nov 13 2013 | |||
c0e1a63a63ae | epriestley | Implement an approval queue | Nov 13 2013 | |||
0fa411083f72 | epriestley | Show an "approval queue" item on the home page for admins, and sort out menu… | Nov 13 2013 | |||
c8320923c405 | epriestley | Implement most of the administrative UI for approval queues | Nov 13 2013 | |||
7f11e8d7401e | epriestley | Improve handling of email verification and "activated" accounts | Nov 12 2013 | |||
cd73fe78db36 | epriestley | Roadblock users trying to register with external accounts that have invalid… | Nov 12 2013 | |||
30a51dac3686 | epriestley | Clarify registration rules more aggressively when configuring auth | Nov 12 2013 | |||
a29b5b070f5a | Jakub Vrana | Replace some hsprintf() by phutil_tag() | Nov 11 2013 | |||
2250ee6aa6b8 | Aviv Eyal/epriestley | Allow null for token expiration date | Oct 31 2013 | |||
2a5c987c714d | epriestley | Lock policy queries to their applications | Oct 22 2013 | |||
d2895249ee5e | Chad Little | Add Persona login icon | Oct 15 2013 | |||
0ce4f6d17687 | epriestley | Add Persona auth provider | Oct 14 2013 | |||
7dde01df76ef | epriestley | Fix issues with first-time account registration | Oct 5 2013 | |||
cad9e548bca2 | Chad Little | Add Header to Registration | Oct 5 2013 | |||
2e5ac128b3ee | epriestley | Explain policy exception rules to users | Sep 27 2013 | |||
9be7a948f93c | Chad Little | Move PHUIFormBoxView to PHUIObjectBoxView | Sep 25 2013 | |||
e1892e9bfbaf | Gareth Evans/epriestley | Add reCaptcha to password registration | Sep 20 2013 | |||
5ba20b8924d5 | Chad Little | Move PhabricatorObjectItem to PHUIObjectItem, add 'plain' setting for lists. | Sep 9 2013 | |||
825fb9c85ae7 | epriestley | Add JIRA doorkeeper and remarkup support | Sep 4 2013 | |||
e5b4ce5525d7 | epriestley | Reduce the amount of OAuth1/OAuth2 code duplication for rendering login buttons | Sep 3 2013 | |||
25eb401e18ae | epriestley | Handle user aborts during auth workflows in Phabricator | Sep 3 2013 | |||
4e12a375f3f4 | epriestley | Add JIRA as an authentication provider | Sep 3 2013 | |||
25e43e872bb6 | epriestley | Add Twitter as an authentication provider | Sep 3 2013 | |||
fe2a96e37ff0 | Chad Little | Update Form Layouts | Aug 26 2013 | |||
f034fd80dbf7 | epriestley | Remove getApplicationObjectTypeName from ApplicationTransactions | Aug 21 2013 | |||
751cd547c291 | epriestley | Remove dust from page construction | Aug 20 2013 | |||
fe766ff6830c | Chad Little | Fix twitch name | Aug 12 2013 | |||
07dd5df33bf8 | epriestley | Support Twitch.tv as an OAuth provider | Aug 8 2013 | |||
5cc3bbf721fc | epriestley | Use application PHIDs for application transactions | Jul 29 2013 | |||
cf9dc5d18945 | epriestley | Fix bug when multiple comment forms appear on a single page | Jul 29 2013 | |||
db3a0c90bbc2 | epriestley | Use Application PHIDs for XUSR | Jul 24 2013 | |||
ab5ee5d1935a | epriestley | Survive mild misconfiguration of Realname Attributes in LDAP | Jul 18 2013 | |||
cff8c509030f | epriestley | Modernize email verification page | Jul 11 2013 | |||
2432a479976c | epriestley | Reduce invasiveness of `bin/auth ldap` | Jul 10 2013 | |||
1888a84b7eda | epriestley | Fix an issue with setting "Real Name Attributes" in LDAP auth | Jul 10 2013 | |||
5ecb77427aec | epriestley | Fix OAuth token refresh return value | Jun 26 2013 | |||
fe71b34c6883 | epriestley | Add a "refresh" action for external accounts | Jun 25 2013 | |||
e826842179b7 | epriestley | Show more information about OAuth tokens in the Account Settings -> External… | Jun 25 2013 | |||
f8ed6422f8e2 | epriestley | Provide an auto-refresh mechanism for OAuth providers to deliver fresh tokens | Jun 25 2013 | |||
c94ef134e483 | epriestley | Add `bin/auth refresh` for debugging OAuth token refresh issues | Jun 25 2013 | |||
e723b7e119a7 | epriestley | Add DoorkeeperObjectRef, DoorkeeperBridge, DoorkeeperBridgeAsana | Jun 25 2013 | |||
71e4870a8e06 | epriestley | Fix OAuth Facebook Phame property access | Jun 24 2013 | |||
705dfa25e6f7 | epriestley | Load LDAP provider correctly in `bin/auth` LDAP debug script | Jun 24 2013 | |||
edee95e355d3 | epriestley | Tailor the Asana OAuth help URI | Jun 24 2013 | |||
0a044ef27571 | epriestley | Make old GitHub OAuth URIs work for now | Jun 21 2013 | |||
e275f94fd87a | Chad Little | Update styles on Login Reset | Jun 21 2013 | |||
46a7c61c8081 | epriestley | Improve errors associated with adding new login providers | Jun 20 2013 | |||
619069e23400 | epriestley | Show providers in login order, not alphabetical order | Jun 20 2013 | |||
052193ce2da1 | epriestley | Improve /auth/ behavior when a provider implementation is missing | Jun 20 2013 | |||
de9cf72a64c0 | Chad Little | Update Reset Password Page | Jun 20 2013 | |||
f7e27e36da9f | epriestley | Minor, clean up an obsolete hardcode (no password registration). | Jun 20 2013 | |||
7eb579788e83 | epriestley | Minor, fix an issue where creating a provider without changing anything fails… | Jun 20 2013 | |||
e117b320e278 | epriestley | Add Amazon and Asana providers | Jun 20 2013 | |||
1834584e98b6 | epriestley | Provide contextual help on auth provider configuration | Jun 20 2013 | |||
3b9ccf11f246 | epriestley | Drive auth config with the database | Jun 20 2013 | |||
d8394b2ee053 | epriestley | Prepare for db-driven auth configuration by making proviers operate in dual… | Jun 20 2013 | |||
32f6c88896c8 | epriestley | Add first-time-setup registration flow | Jun 20 2013 | |||
6b1f15ac5446 | epriestley | Build out Auth UI a little bit | Jun 20 2013 | |||
73c2c1d2e60f | epriestley | Send old login code to the bottom of the sea | Jun 19 2013 | |||
8c8ab25fa1aa | epriestley | Restore/respect "require secure browsing" for Facebook (phabricator) | Jun 19 2013 | |||
26944e28766a | epriestley | Expose all LDAP configuration options in the web UI | Jun 18 2013 | |||
fe29b2758210 | epriestley | Fix several issues with "Logout" | Jun 18 2013 | |||
e58f383d9111 | epriestley | Allow authentication providers to store and customize additional configuration | Jun 18 2013 | |||
c0cc7bbfdfd3 | epriestley | Provide `bin/auth ldap` for LDAP diagnostics | Jun 17 2013 | |||
fded36cc2153 | epriestley | Improve more crumbs and cancel buttons for auth | Jun 17 2013 | |||
433c6550b235 | epriestley | Add a cancel button, provider crumb, and account card to registration | Jun 17 2013 | |||
30237aaa4788 | epriestley | Clean up image loading for ExternalAccounts | Jun 17 2013 | |||
278905543e77 | epriestley | Add very basic `bin/auth` tool | Jun 17 2013 |
c4science · Help