phab/src/applications/auth/controllerfeature/better-testing
phab/src/applications/auth/controller
feature/better-testing
History Graph
History Graph
Commit | Author | Details | Committed | |||
---|---|---|---|---|---|---|
2cb779575dd5 | epriestley | Split "Edit Blocking Tasks" into "Edit Parent Tasks" and "Edit Subtasks" | Jun 22 2016 | |||
ffb50ef45d1b | epriestley | Require login for "Must Verify Email" controller | Jun 8 2016 | |||
abeab594486f | epriestley | Fix redirect to Password settings panel after "Reset Password" login | Jun 7 2016 | |||
e1a9473eda04 | epriestley | Make auth provider autologin modular and implement it for all OAuth2 adapters | Jun 6 2016 | |||
6f6ca0102daa | epriestley | Send forced mail on SSH key edits | May 20 2016 | |||
da6b3de65c14 | epriestley | Use transactions to apply web UI SSH key edits | May 20 2016 | |||
08bea1d363fd | epriestley | Add ViewController and SearchEngine for SSH Public Keys | May 19 2016 | |||
0308d580d7df | epriestley | Deactivate SSH keys instead of destroying them completely | May 18 2016 | |||
eef217216116 | epriestley | When a user tries to regsiter while logged in, just send them home | Apr 17 2016 | |||
46881c4ce507 | epriestley | Add a session engine extension point | Apr 6 2016 | |||
e55522cade3f | epriestley | Implement "auth.logout" Conduit API method | Apr 4 2016 | |||
6bbba1e3151d | Chad Little | Update Auth for new UI | Mar 31 2016 | |||
a837c3d73eaf | epriestley | Make temporary token storage/schema more flexible | Mar 16 2016 | |||
8e3ea4e034eb | epriestley | Use new modular temporary auth token constants in one-time login and password… | Mar 16 2016 | |||
36158dbdc081 | Chad Little | Convert all calls to 'IconFont' to just 'Icon' | Jan 28 2016 | |||
5d76a4b0a2f5 | epriestley | Improve handling of multiple edit forms when logged out | Dec 17 2015 | |||
e869e7df0b79 | epriestley | When logged-out users hit a "Login Required" dialog, try to choose a better… | Dec 17 2015 | |||
6c4c93a091fa | epriestley | Allow login to be disabled for authentication providers | Dec 16 2015 | |||
1b00ef08a039 | epriestley | Remove some low-hanging buildStandardPageResponse() methods | Nov 3 2015 | |||
c35b564f4d32 | Joshua Spence | Various translation improvements | Nov 2 2015 | |||
59c931710100 | epriestley | Prevent mailing lists from being bin/auth recover'd | Oct 25 2015 | |||
b038041dc600 | epriestley | Prevent duplicate account links from being created by swapping logins and then… | Oct 24 2015 | |||
5dccc14bbf46 | epriestley | Modularize generation of supplemental login messages | Sep 4 2015 | |||
29948eaa5bd2 | epriestley | Use phutil_hashes_are_identical() when comparing hashes in Phabricator | Sep 2 2015 | |||
b4b5d60f77fb | epriestley | Fix 'key'/'type' swap in email reset / one-time-login controller | Aug 3 2015 | |||
36103dfa182c | Chad Little | Update Auth for handleRequest | Aug 2 2015 | |||
2d5f3d9e5aff | Joshua Spence | Fix a pht string | Jun 15 2015 | |||
36e2d02d6ec5 | Joshua Spence | phtize all the things | May 22 2015 | |||
47b14c9bdecf | epriestley | Convert inline profile image transforms to new transformations | May 13 2015 | |||
1c32c9b965a5 | epriestley | Improve granluarity and defaults of `security.allow-outbound-http` | Mar 23 2015 | |||
aa909ba07213 | Chad Little | Shorten buttons on Leaving High Security Page | Mar 14 2015 | |||
6608eea91dd4 | Chad Little | Fix a few minor bugs in Auth Providers | Mar 8 2015 | |||
076cc6ed7ef8 | Chad Little | Change setErrorView to setInfoView in PHUIObjectBoxView | Mar 7 2015 | |||
c038c643f498 | Chad Little | Move PHUIErrorView to PHUIInfoView | Mar 1 2015 | |||
4e41e164e5f1 | epriestley | Skip captcha when redeeming an invite | Feb 25 2015 | |||
d39da529ca26 | Bob Trahan | Legalpad - allow for legalpad documents to be required to be signed for using… | Feb 13 2015 | |||
779744342865 | epriestley | Support invites in the registration and login flow | Feb 11 2015 | |||
2a0af8e2995d | epriestley | Add email invites to Phabricator (logic only) | Feb 10 2015 | |||
8c568d88d7ab | epriestley | Reduce severity of auth provider warning | Feb 7 2015 | |||
272ce408dcd3 | Chad Little | Clean up authentication list | Feb 7 2015 | |||
472f316bbd90 | Bob Trahan | Auth - allow for "auto login" providers | Feb 6 2015 | |||
3da38c74da21 | Chad Little | PHUIErrorView | Feb 2 2015 | |||
33c0b9423fa5 | Chad Little | More crumb borders | Feb 2 2015 | |||
7d309a8e46ca | Bob Trahan | Application Emails - make various user email editing paths respect application… | Jan 29 2015 | |||
170dc15c05cb | Chad Little | Make border conditional in crumbs | Jan 28 2015 | |||
c2ac63e9ad1f | Joshua Spence | Increase visibility of `PhabricatorController::buildApplicationMenu` methods | Jan 15 2015 | |||
bdfbad092b05 | epriestley | Fix an issue with Auth edit 404ing | Jan 14 2015 | |||
39406bd1f3a4 | epriestley | Fix access to undeclared variable when trying to create invalid Auth provider | Jan 14 2015 | |||
46913f651e6f | Bob Trahan | Auth - add "manage providers" capability | Jan 12 2015 | |||
e0aa33c46b0c | epriestley | Make test for setting "next" cookie more general | Jan 9 2015 | |||
2be746fb1f3a | Bob Trahan | Auth - restore Phabricator OAuth as a provider | Jan 9 2015 | |||
e7f8e7974217 | Joshua Spence | Fix method visibility for `PhabricatorController` subclasses | Jan 6 2015 | |||
4e28de07fea4 | Joshua Spence | Rename `PhabricatorSettingsPanel` subclasses for consistency | Jan 2 2015 | |||
69cc5df6456b | Bob Trahan | Transactions - deploy buildTransactionTimeline against a few more applications | Dec 2 2014 | |||
5e0f218fe480 | epriestley | Allow device SSH keys to be trusted | Nov 21 2014 | |||
32cdc23efc52 | Evan Priestley | Separate SSH key management from the settings panel | Nov 11 2014 | |||
4307d6816d30 | Chad Little | Linkify Registration Email | Nov 7 2014 | |||
3cf9a5820fc9 | Joshua Spence | Minor formatting changes | Oct 7 2014 | |||
f74082aecd06 | Chad Little | Update AphrontRequestFailure to common display libs | Sep 27 2014 | |||
4a566f9e5d8d | epriestley | Allow passwords to be edited even if `account.editable` is `false` | Aug 22 2014 | |||
d011f8fdc6c4 | epriestley | Add a setting to disable all notification email | Aug 12 2014 | |||
6232e9676cd4 | epriestley | Don't send reset links to unverified addresses on accounts with verified… | Aug 11 2014 | |||
8fd098329ba2 | Joshua Spence | Rename `AphrontQueryException` subclasses | Aug 5 2014 | |||
95eeffff7e5d | epriestley | Terminate other sessions on credential changes | Aug 4 2014 | |||
e56dc8f29986 | epriestley | Invalidate outstanding password reset links when users adjust email addresses | Aug 4 2014 | |||
30f6405a8654 | epriestley | Add an explicit temporary token management page to Settings | Aug 4 2014 | |||
49bd5721c5a7 | epriestley | Use standard infrastructure for Feed in Audit | Aug 2 2014 | |||
f4b05312cdf5 | Joshua Spence | Fix broken references to auth adapters | Jul 22 2014 | |||
e46826ad364d | epriestley | Introduce CAN_EDIT for ExternalAccount, and make CAN_VIEW more liberal | Jul 10 2014 | |||
46d9bebc8430 | epriestley | Remove all `device = true` from page construction | Jun 24 2014 | |||
0a62f13464b8 | Joshua Spence/epriestley | Change double quotes to single quotes. | Jun 9 2014 | |||
99c72a32d041 | epriestley | Allow installs to require multi-factor authentication for all users | Jun 4 2014 | |||
83112cc2e8c7 | epriestley | Move email verification into PhabricatorUserEditor | Jun 4 2014 | |||
f1534e6feb6a | epriestley | Make password reset emails use one-time tokens | May 22 2014 | |||
43d45c49568a | Tal Shiri/epriestley | can now tell phabricator you trust an auth provider's emails (useful for Google… | May 16 2014 | |||
0120388a7516 | Chad Little | Found some missing icons | May 13 2014 | |||
b2f3001ec4be | Chad Little | Replace Sprite-Icons with FontAwesome | May 12 2014 | |||
dfcccd4cb882 | lkassianik/epriestley | Add config to require real name, respect config when creating new users, drop… | May 12 2014 | |||
50376aad04d2 | epriestley | Require multiple auth factors to establish web sessions | May 1 2014 | |||
3fde02004968 | epriestley | Make many actions require high security | May 1 2014 | |||
3f5a55fa6e5a | epriestley | Let users review their own account activity logs | Apr 28 2014 | |||
f42ec84d0c6b | epriestley | Add "High Security" mode to support multi-factor auth | Apr 28 2014 | |||
d8713f6f0b8c | epriestley | Make dialogs a little easier to use | Mar 21 2014 | |||
aea624118b70 | epriestley | Allow users to terminate login sessions | Mar 17 2014 | |||
559c0fe88663 | epriestley | Tune cookie behaviors for 'phcid', 'phreg', etc | Mar 14 2014 | |||
f7b1ed722164 | epriestley | Fix two registration errors for unusual provider emails | Mar 14 2014 | |||
7176240717f2 | epriestley | Whitelist controllers which can receive a 'code' parameter | Mar 12 2014 | |||
e62c7321c28b | epriestley | Automatically verify the setup account's email address | Feb 28 2014 | |||
bcf255e9c96b | epriestley | Require CSRF submission to verify email addresses | Feb 26 2014 | |||
14627ad65b89 | epriestley | Fix an incorrectly spelled call on the registration error pathway | Feb 24 2014 | |||
a566ae373015 | epriestley | Require a CSRF code for Twitter and JIRA (OAuth 1) logins | Feb 24 2014 | |||
7cf0358dda11 | epriestley | Disallow email addresses which will overflow MySQL storage | Feb 23 2014 | |||
3c9153079f13 | epriestley | Make password hashing modular | Feb 18 2014 | |||
152f05aebed0 | epriestley | Fix some security issues with email password resets | Jan 28 2014 | |||
5b1d9c935a90 | epriestley | After writing "next_uri", don't write it again for a while | Jan 23 2014 | |||
69ddb0ced631 | epriestley | Issue "anonymous" sessions for logged-out users | Jan 23 2014 | |||
072741802350 | epriestley | Consolidate use of magical cookie name strings | Jan 23 2014 | |||
02aa193cb05e | epriestley | Add a common password blacklist | Jan 23 2014 | |||
31a2bebf633b | Chad Little | Move PhabricatorTagView to PHUITagView | Jan 14 2014 | |||
d392a8f15700 | epriestley | Replace "web" and "conduit" magic session strings with constants | Jan 14 2014 |
c4science · Help