Diffusion Phabricator (stable) History

auth
stable95eeffff7e5d9b4a946a33f…

Aug 4 2014

Terminate other sessions on credential changes
95eeffff7e5d
·epriestley on Aug 4 2014, 21:04.
Invalidate outstanding password reset links when users adjust email addresses
e56dc8f29986
·epriestley on Aug 4 2014, 21:04.
Add an explicit temporary token management page to Settings
30f6405a8654
·epriestley on Aug 4 2014, 21:04.

Aug 2 2014

Use standard infrastructure for Feed in Audit
49bd5721c5a7
·epriestley on Aug 2 2014, 09:06.

Jul 24 2014

Rename `PHIDType` classes
97a8700e4589
·Joshua Spence on Jul 24 2014, 00:05.

Jul 23 2014

Implement the `getName` method in `PhabricatorApplication` subclasses
0c8f487b0fa7
·Joshua Spence on Jul 23 2014, 15:52.
Rename `PhabricatorApplication` subclasses
86c399b65783
·Joshua Spence on Jul 23 2014, 02:03.

Jul 22 2014

Fix broken references to auth adapters
f4b05312cdf5
·Joshua Spence on Jul 22 2014, 13:20.
Rename auth classes for consistency
701bb2ac6ec9
·Joshua Spence on Jul 22 2014, 13:04.

Jul 21 2014

Utilize `PhutilMethodNotImplementedException`
8999a1c1ea55
·Joshua Spence on Jul 21 2014, 17:47.
Simplify the implementation of `PhabricatorPHIDType` subclasses
254542237a66
·Joshua Spence on Jul 21 2014, 16:38.

Jul 15 2014

Recover from a broken external OAuth2 account
7ac5abb97934
·Evan Priestley on Jul 15 2014, 22:39.

Jul 10 2014

Introduce CAN_EDIT for ExternalAccount, and make CAN_VIEW more liberal
e46826ad364d
·epriestley on Jul 10 2014, 19:18.

Jun 28 2014

Support Bitbucket as an auth provider in Phabricator
0398559c8e25
·epriestley on Jun 28 2014, 14:01.
Manage OAuth1 request token secrets in core OAuth1 workflow
2d36afeaab7c
·epriestley on Jun 28 2014, 14:00.

Jun 24 2014

Remove all `device = true` from page construction
46d9bebc8430
·epriestley on Jun 24 2014, 00:18.

Jun 10 2014

Applied various linter fixes.
d0128afa2908
·Joshua Spence / epriestley on Jun 10 2014, 01:04.

Jun 9 2014

Change double quotes to single quotes.
0a62f13464b8
·Joshua Spence / epriestley on Jun 9 2014, 20:36.

Jun 4 2014

Allow installs to require multi-factor authentication for all users
99c72a32d041
·epriestley on Jun 4 2014, 01:50.
Move email verification into PhabricatorUserEditor
83112cc2e8c7
·epriestley on Jun 4 2014, 01:45.
(Redesign) Clean up older "Tile" code
6df1a024137c
·epriestley on Jun 4 2014, 00:47.

May 29 2014

Make default view of "Applications" app a full-page launcher
81d95cf682a5
·epriestley on May 29 2014, 21:17.

May 22 2014

Make password reset emails use one-time tokens
f1534e6feb6a
·epriestley on May 22 2014, 19:41.

May 20 2014

Add "temporary tokens" to auth, for SMS codes, TOTP codes, reset codes, etc
cac61980f904
·epriestley on May 20 2014, 20:43.

May 16 2014

can now tell phabricator you trust an auth provider's emails (useful for Google…
43d45c49568a
·Tal Shiri / epriestley on May 16 2014, 23:14.

May 13 2014

Found some missing icons
0120388a7516
·Chad Little on May 13 2014, 16:45.

May 12 2014

Replace Sprite-Icons with FontAwesome
b2f3001ec4be
·Chad Little on May 12 2014, 19:08.
Add config to require real name, respect config when creating new users, drop…
dfcccd4cb882
·lkassianik / epriestley on May 12 2014, 18:51.

May 8 2014

WordPress.com OAuth2 plugin
0da22abdb5f8
·Ashish SHUKLA / epriestley on May 8 2014, 23:23.

May 1 2014

Minor cleanup of some session code
a04e138ae247
·epriestley on May 1 2014, 19:23.
Generate QR codes for TOTP tokens
e14695821758
·epriestley on May 1 2014, 19:23.
Require multiple auth factors to establish web sessions
50376aad04d2
·epriestley on May 1 2014, 19:23.
Add support for aural-only and visual-only elements
e8cebb7da5a4
·epriestley on May 1 2014, 16:18.
Make many actions require high security
3fde02004968
·epriestley on May 1 2014, 02:44.

Apr 30 2014

Rate limit multi-factor actions
23e654ec2bc8
·epriestley on Apr 30 2014, 23:30.
Add `bin/auth list-factors` and `bin/auth strip` to remove multi-factor auth
535cfa3ebebe
·epriestley on Apr 30 2014, 23:30.

Apr 28 2014

Make two-factor auth actually work
a017a8e02b51
·epriestley on Apr 28 2014, 19:20.
Add multi-factor auth and TOTP support
17709bc1674e
·epriestley on Apr 28 2014, 18:27.
Let users review their own account activity logs
3f5a55fa6e5a
·epriestley on Apr 28 2014, 02:32.
Add "High Security" mode to support multi-factor auth
f42ec84d0c6b
·epriestley on Apr 28 2014, 02:31.

Apr 22 2014

Move Timeline icons to Fonts
11fd6afeb10e
·Chad Little on Apr 22 2014, 17:25.

Apr 11 2014

Minor, fix the scoping of a static variable
499f66963d2b
·epriestley on Apr 11 2014, 13:24.

Apr 9 2014

OAuth - add a little notes section for admins to remember details about…
2d43cf12964d
·Bob Trahan on Apr 9 2014, 20:09.

Apr 8 2014

Add a checkbox to the LDAP auth configuration UI to "Always Search"
582ec5446532
·epriestley on Apr 8 2014, 20:36.

Mar 25 2014

Update Google auth documentation to discuss "Google+ API" and new console URI
750c872839e7
·epriestley on Mar 25 2014, 21:36.

Mar 21 2014

Make dialogs a little easier to use
d8713f6f0b8c
·epriestley on Mar 21 2014, 22:40.

Mar 17 2014

Support multiple LDAP filters in the Phabricator UI
ba8925a531c7
·epriestley on Mar 17 2014, 23:08.
Allow users to terminate login sessions
aea624118b70
·epriestley on Mar 17 2014, 23:02.

Mar 14 2014

Tune cookie behaviors for 'phcid', 'phreg', etc
559c0fe88663
·epriestley on Mar 14 2014, 22:33.
Fix two registration errors for unusual provider emails
f7b1ed722164
·epriestley on Mar 14 2014, 03:03.

Mar 13 2014

Modernize Facebook OAuth instructions
a9f38e55e5e4
·epriestley on Mar 13 2014, 21:00.
Use "\z" instead of "$" to anchor validating regular expressions
969d0c3e8de2
·epriestley on Mar 13 2014, 20:42.

Mar 12 2014

Whitelist controllers which can receive a 'code' parameter
7176240717f2
·epriestley on Mar 12 2014, 19:30.

Feb 28 2014

Automatically verify the setup account's email address
e62c7321c28b
·epriestley on Feb 28 2014, 00:16.

Feb 26 2014

Various linter fixes.
627011476733
·Joshua Spence / epriestley on Feb 26 2014, 21:44.
Require CSRF submission to verify email addresses
bcf255e9c96b
·epriestley on Feb 26 2014, 20:17.

Feb 24 2014

Fix an incorrectly spelled call on the registration error pathway
14627ad65b89
·epriestley on Feb 24 2014, 20:45.
Require a CSRF code for Twitter and JIRA (OAuth 1) logins
a566ae373015
·epriestley on Feb 24 2014, 01:39.

Feb 23 2014

Disallow email addresses which will overflow MySQL storage
7cf0358dda11
·epriestley on Feb 23 2014, 19:19.

Feb 18 2014

Implement bcrypt hasher, transparent login upgrade, and explicit upgrade for…
580bcd0d2be4
·epriestley on Feb 18 2014, 23:09.
Make password hashing modular
3c9153079f13
·epriestley on Feb 18 2014, 23:09.

Jan 31 2014

Miniturize the nav buttons
4743ad96497b
·Chad Little on Jan 31 2014, 18:10.

Jan 29 2014

Add very basic "quick create" menu
049fb2018bde
·epriestley on Jan 29 2014, 05:18.

Jan 28 2014

Fix some security issues with email password resets
152f05aebed0
·epriestley on Jan 28 2014, 01:53.

Jan 23 2014

Actually check CSRF on Password and LDAP forms
febc494737be
·epriestley on Jan 23 2014, 23:18.
After writing "next_uri", don't write it again for a while
5b1d9c935a90
·epriestley on Jan 23 2014, 23:16.
Support CSRF for logged-out users
f9ac534f255d
·epriestley on Jan 23 2014, 23:03.
Straighten out absolute/relative URIs in login providers
24544b1a2f24
·epriestley on Jan 23 2014, 23:03.
Issue "anonymous" sessions for logged-out users
69ddb0ced631
·epriestley on Jan 23 2014, 23:03.
Consolidate use of magical cookie name strings
072741802350
·epriestley on Jan 23 2014, 23:01.
Add a common password blacklist
02aa193cb05e
·epriestley on Jan 23 2014, 23:01.

Jan 16 2014

Remove session limits and sequencing
2ec45d42a689
·epriestley on Jan 16 2014, 02:27.

Jan 15 2014

Expire and garbage collect unused sessions
acb141cf52c1
·epriestley on Jan 15 2014, 22:56.
Give the session table a normal `id` column as a primary key
a64228b03fbc
·epriestley on Jan 15 2014, 22:55.
Legalpad - make it work for not logged in users
41d2a0953604
·Bob Trahan on Jan 15 2014, 02:17.

Jan 14 2014

Move PhabricatorTagView to PHUITagView
31a2bebf633b
·Chad Little on Jan 14 2014, 23:09.
Replace "web" and "conduit" magic session strings with constants
d392a8f15700
·epriestley on Jan 14 2014, 22:22.
Separate session management from PhabricatorUser
eef314b70149
·epriestley on Jan 14 2014, 22:22.
Add an "active login sessions" table to Settings
3d9e328fb388
·epriestley on Jan 14 2014, 20:05.
Allow PhabricatorUserLog to store non-user PHIDs
220d680f3769
·epriestley on Jan 14 2014, 20:05.

Jan 10 2014

Simplify PHUIObjectBoxViews handling of Save and Error states
b74c7a3d371a
·Chad Little on Jan 10 2014, 18:17.

Jan 8 2014

Fix rendering issue for LDAP configuration provider transactions
324ee4e4d539
·epriestley on Jan 8 2014, 22:27.
Add warnings to JIRA auth provider that we only support JIRA 6
3524ba3fb56a
·epriestley on Jan 8 2014, 18:43.

Dec 27 2013

Extend all "ManagementWorkflow" classes from a base class
e397103bf211
·epriestley on Dec 27 2013, 22:15.

Dec 19 2013

Provide convenience method addTextCrumb() to PhabricatorCrumbsView
a5dc9067af0c
·epriestley on Dec 19 2013, 02:47.

Nov 25 2013

Provide an LDAPS example in LDAP auth
e4920cdf8668
·epriestley on Nov 25 2013, 23:55.

Nov 21 2013

Recover more flexibly from an already-verified email
3a035c02e7b9
·epriestley on Nov 21 2013, 23:41.
Slightly improve behavior for unverified + unapproved users
a518626a8574
·epriestley on Nov 21 2013, 21:58.

Nov 20 2013

Allow "bin/auth recover" to succeed before phabricator.base-uri is set
6eb02af314a4
·epriestley on Nov 20 2013, 19:36.

Nov 14 2013

Land to GitHub + support stuff
dcf909ba56bf
·Aviv Eyal / epriestley on Nov 14 2013, 02:25.

Nov 13 2013

Fix new logged-out "Login" button URI and workflowiness
87a655e8c53c
·epriestley on Nov 13 2013, 20:48.
Respect "can edit username" in registration UI
fb6e38548b0c
·epriestley on Nov 13 2013, 20:25.
Implement an approval queue
c0e1a63a63ae
·epriestley on Nov 13 2013, 20:24.
Show an "approval queue" item on the home page for admins, and sort out menu…
0fa411083f72
·epriestley on Nov 13 2013, 20:24.
Implement most of the administrative UI for approval queues
c8320923c405
·epriestley on Nov 13 2013, 20:24.

Nov 12 2013

Improve handling of email verification and "activated" accounts
7f11e8d7401e
·epriestley on Nov 12 2013, 23:37.
Roadblock users trying to register with external accounts that have invalid…
cd73fe78db36
·epriestley on Nov 12 2013, 23:36.
Clarify registration rules more aggressively when configuring auth
30a51dac3686
·epriestley on Nov 12 2013, 19:56.

Nov 11 2013

Replace some hsprintf() by phutil_tag()
a29b5b070f5a
·Jakub Vrana on Nov 11 2013, 18:23.

Oct 31 2013

Allow null for token expiration date
2250ee6aa6b8
·Aviv Eyal / epriestley on Oct 31 2013, 01:19.

phab/src/applications/authstable95eeffff7e5d9b4a946a33f…

Aug 4 2014

Aug 2 2014

Jul 24 2014

Jul 23 2014

Jul 22 2014

Jul 21 2014

Jul 15 2014

Jul 10 2014

Jun 28 2014

Jun 24 2014

Jun 10 2014

Jun 9 2014

Jun 4 2014

May 29 2014

May 22 2014

May 20 2014

May 16 2014

May 13 2014

May 12 2014

May 8 2014

May 1 2014

Apr 30 2014

Apr 28 2014

Apr 22 2014

Apr 11 2014

Apr 9 2014

Apr 8 2014

Mar 25 2014

Mar 21 2014

Mar 17 2014

Mar 14 2014

Mar 13 2014

Mar 12 2014

Feb 28 2014

Feb 26 2014

Feb 24 2014

Feb 23 2014

Feb 18 2014

Jan 31 2014

Jan 29 2014

Jan 28 2014

Jan 23 2014

Jan 16 2014

Jan 15 2014

Jan 14 2014

Jan 10 2014

Jan 8 2014

Dec 27 2013

Dec 19 2013

Nov 25 2013

Nov 21 2013

Nov 20 2013

Nov 14 2013

Nov 13 2013

Nov 12 2013

Nov 11 2013

Oct 31 2013

phab/src/applications/auth
stable95eeffff7e5d9b4a946a33f…