Diffusion Phabricator (stable) History

auth
stableb85283105ecee83220e2b72…

Nov 11 2014

Allow Almanac devices to have SSH keys
af6ffd8c7b34
·epriestley on Nov 11 2014, 17:20.
Separate SSH key management from the settings panel
32cdc23efc52
·Evan Priestley on Nov 11 2014, 17:18.

Nov 8 2014

Standardize SSH key storage
bf17b12daf43
·epriestley on Nov 8 2014, 00:34.

Nov 7 2014

Linkify Registration Email
4307d6816d30
·Chad Little on Nov 7 2014, 23:16.

Nov 6 2014

Move SSHKey table to Auth database
e29955b48d64
·epriestley on Nov 6 2014, 21:37.
Add a query/policy layer on top of SSH keys for Almanac
6f0d3b07962a
·epriestley on Nov 6 2014, 21:37.

Oct 7 2014

Minor formatting changes
3cf9a5820fc9
·Joshua Spence on Oct 7 2014, 23:39.

Oct 2 2014

Automatically build all Lisk schemata
8fa8415c07d2
·epriestley on Oct 2 2014, 18:51.

Oct 1 2014

Fix almost all remaining schemata issues
4fcc634a99dc
·epriestley on Oct 1 2014, 17:18.
Add missing expected keys and uniqueness
943c62d1e9f6
·epriestley on Oct 1 2014, 16:53.
Generate expected schemata for User/People tables
098d0d93d60c
·epriestley on Oct 1 2014, 16:36.

Sep 27 2014

Update AphrontRequestFailure to common display libs
f74082aecd06
·Chad Little on Sep 27 2014, 02:40.

Sep 18 2014

Generate expected schemata for Doorkeeper, Draft, Drydock, Feed
67fbfe6ccc9f
·epriestley on Sep 18 2014, 20:15.
Generate reasonable expected schemata for Audit and Auth
0f73b15a704d
·epriestley on Sep 18 2014, 17:32.

Sep 9 2014

Apply some autofix linter rules
0151c38b107f
·Joshua Spence on Sep 9 2014, 22:55.

Aug 22 2014

Allow passwords to be edited even if `account.editable` is `false`
4a566f9e5d8d
·epriestley on Aug 22 2014, 00:35.

Aug 18 2014

Be more strict about "Location:" redirects
df361470c1d9
·epriestley on Aug 18 2014, 23:11.

Aug 14 2014

Surface a better warning when the LDAP extension is not installed
ef0460c1ffee
·epriestley on Aug 14 2014, 00:37.

Aug 13 2014

Add autocomplete=off to all non-login password forms
bcdadf5947b3
·epriestley on Aug 13 2014, 19:06.

Aug 12 2014

Modularize mail tags
f6f9d78f3a07
·epriestley on Aug 12 2014, 21:28.
Add a setting to disable all notification email
d011f8fdc6c4
·epriestley on Aug 12 2014, 21:28.

Aug 11 2014

Don't send reset links to unverified addresses on accounts with verified…
6232e9676cd4
·epriestley on Aug 11 2014, 21:13.

Aug 8 2014

Add a CanCDN flag to uploaded files
12aaa942acc5
·Mukunda Modell / epriestley on Aug 8 2014, 03:56.

Aug 5 2014

Rename `AphrontQueryException` subclasses
8fd098329ba2
·Joshua Spence on Aug 5 2014, 23:51.

Aug 4 2014

Make the current session key a component of the CSRF token
42cf7f6faa10
·epriestley on Aug 4 2014, 21:04.
Terminate other sessions on credential changes
95eeffff7e5d
·epriestley on Aug 4 2014, 21:04.
Invalidate outstanding password reset links when users adjust email addresses
e56dc8f29986
·epriestley on Aug 4 2014, 21:04.
Add an explicit temporary token management page to Settings
30f6405a8654
·epriestley on Aug 4 2014, 21:04.

Aug 2 2014

Use standard infrastructure for Feed in Audit
49bd5721c5a7
·epriestley on Aug 2 2014, 09:06.

Jul 24 2014

Rename `PHIDType` classes
97a8700e4589
·Joshua Spence on Jul 24 2014, 00:05.

Jul 23 2014

Implement the `getName` method in `PhabricatorApplication` subclasses
0c8f487b0fa7
·Joshua Spence on Jul 23 2014, 15:52.
Rename `PhabricatorApplication` subclasses
86c399b65783
·Joshua Spence on Jul 23 2014, 02:03.

Jul 22 2014

Fix broken references to auth adapters
f4b05312cdf5
·Joshua Spence on Jul 22 2014, 13:20.
Rename auth classes for consistency
701bb2ac6ec9
·Joshua Spence on Jul 22 2014, 13:04.

Jul 21 2014

Utilize `PhutilMethodNotImplementedException`
8999a1c1ea55
·Joshua Spence on Jul 21 2014, 17:47.
Simplify the implementation of `PhabricatorPHIDType` subclasses
254542237a66
·Joshua Spence on Jul 21 2014, 16:38.

Jul 15 2014

Recover from a broken external OAuth2 account
7ac5abb97934
·Evan Priestley on Jul 15 2014, 22:39.

Jul 10 2014

Introduce CAN_EDIT for ExternalAccount, and make CAN_VIEW more liberal
e46826ad364d
·epriestley on Jul 10 2014, 19:18.

Jun 28 2014

Support Bitbucket as an auth provider in Phabricator
0398559c8e25
·epriestley on Jun 28 2014, 14:01.
Manage OAuth1 request token secrets in core OAuth1 workflow
2d36afeaab7c
·epriestley on Jun 28 2014, 14:00.

Jun 24 2014

Remove all `device = true` from page construction
46d9bebc8430
·epriestley on Jun 24 2014, 00:18.

Jun 10 2014

Applied various linter fixes.
d0128afa2908
·Joshua Spence / epriestley on Jun 10 2014, 01:04.

Jun 9 2014

Change double quotes to single quotes.
0a62f13464b8
·Joshua Spence / epriestley on Jun 9 2014, 20:36.

Jun 4 2014

Allow installs to require multi-factor authentication for all users
99c72a32d041
·epriestley on Jun 4 2014, 01:50.
Move email verification into PhabricatorUserEditor
83112cc2e8c7
·epriestley on Jun 4 2014, 01:45.
(Redesign) Clean up older "Tile" code
6df1a024137c
·epriestley on Jun 4 2014, 00:47.

May 29 2014

Make default view of "Applications" app a full-page launcher
81d95cf682a5
·epriestley on May 29 2014, 21:17.

May 22 2014

Make password reset emails use one-time tokens
f1534e6feb6a
·epriestley on May 22 2014, 19:41.

May 20 2014

Add "temporary tokens" to auth, for SMS codes, TOTP codes, reset codes, etc
cac61980f904
·epriestley on May 20 2014, 20:43.

May 16 2014

can now tell phabricator you trust an auth provider's emails (useful for Google…
43d45c49568a
·Tal Shiri / epriestley on May 16 2014, 23:14.

May 13 2014

Found some missing icons
0120388a7516
·Chad Little on May 13 2014, 16:45.

May 12 2014

Replace Sprite-Icons with FontAwesome
b2f3001ec4be
·Chad Little on May 12 2014, 19:08.
Add config to require real name, respect config when creating new users, drop…
dfcccd4cb882
·lkassianik / epriestley on May 12 2014, 18:51.

May 8 2014

WordPress.com OAuth2 plugin
0da22abdb5f8
·Ashish SHUKLA / epriestley on May 8 2014, 23:23.

May 1 2014

Minor cleanup of some session code
a04e138ae247
·epriestley on May 1 2014, 19:23.
Generate QR codes for TOTP tokens
e14695821758
·epriestley on May 1 2014, 19:23.
Require multiple auth factors to establish web sessions
50376aad04d2
·epriestley on May 1 2014, 19:23.
Add support for aural-only and visual-only elements
e8cebb7da5a4
·epriestley on May 1 2014, 16:18.
Make many actions require high security
3fde02004968
·epriestley on May 1 2014, 02:44.

Apr 30 2014

Rate limit multi-factor actions
23e654ec2bc8
·epriestley on Apr 30 2014, 23:30.
Add `bin/auth list-factors` and `bin/auth strip` to remove multi-factor auth
535cfa3ebebe
·epriestley on Apr 30 2014, 23:30.

Apr 28 2014

Make two-factor auth actually work
a017a8e02b51
·epriestley on Apr 28 2014, 19:20.
Add multi-factor auth and TOTP support
17709bc1674e
·epriestley on Apr 28 2014, 18:27.
Let users review their own account activity logs
3f5a55fa6e5a
·epriestley on Apr 28 2014, 02:32.
Add "High Security" mode to support multi-factor auth
f42ec84d0c6b
·epriestley on Apr 28 2014, 02:31.

Apr 22 2014

Move Timeline icons to Fonts
11fd6afeb10e
·Chad Little on Apr 22 2014, 17:25.

Apr 11 2014

Minor, fix the scoping of a static variable
499f66963d2b
·epriestley on Apr 11 2014, 13:24.

Apr 9 2014

OAuth - add a little notes section for admins to remember details about…
2d43cf12964d
·Bob Trahan on Apr 9 2014, 20:09.

Apr 8 2014

Add a checkbox to the LDAP auth configuration UI to "Always Search"
582ec5446532
·epriestley on Apr 8 2014, 20:36.

Mar 25 2014

Update Google auth documentation to discuss "Google+ API" and new console URI
750c872839e7
·epriestley on Mar 25 2014, 21:36.

Mar 21 2014

Make dialogs a little easier to use
d8713f6f0b8c
·epriestley on Mar 21 2014, 22:40.

Mar 17 2014

Support multiple LDAP filters in the Phabricator UI
ba8925a531c7
·epriestley on Mar 17 2014, 23:08.
Allow users to terminate login sessions
aea624118b70
·epriestley on Mar 17 2014, 23:02.

Mar 14 2014

Tune cookie behaviors for 'phcid', 'phreg', etc
559c0fe88663
·epriestley on Mar 14 2014, 22:33.
Fix two registration errors for unusual provider emails
f7b1ed722164
·epriestley on Mar 14 2014, 03:03.

Mar 13 2014

Modernize Facebook OAuth instructions
a9f38e55e5e4
·epriestley on Mar 13 2014, 21:00.
Use "\z" instead of "$" to anchor validating regular expressions
969d0c3e8de2
·epriestley on Mar 13 2014, 20:42.

Mar 12 2014

Whitelist controllers which can receive a 'code' parameter
7176240717f2
·epriestley on Mar 12 2014, 19:30.

Feb 28 2014

Automatically verify the setup account's email address
e62c7321c28b
·epriestley on Feb 28 2014, 00:16.

Feb 26 2014

Various linter fixes.
627011476733
·Joshua Spence / epriestley on Feb 26 2014, 21:44.
Require CSRF submission to verify email addresses
bcf255e9c96b
·epriestley on Feb 26 2014, 20:17.

Feb 24 2014

Fix an incorrectly spelled call on the registration error pathway
14627ad65b89
·epriestley on Feb 24 2014, 20:45.
Require a CSRF code for Twitter and JIRA (OAuth 1) logins
a566ae373015
·epriestley on Feb 24 2014, 01:39.

Feb 23 2014

Disallow email addresses which will overflow MySQL storage
7cf0358dda11
·epriestley on Feb 23 2014, 19:19.

Feb 18 2014

Implement bcrypt hasher, transparent login upgrade, and explicit upgrade for…
580bcd0d2be4
·epriestley on Feb 18 2014, 23:09.
Make password hashing modular
3c9153079f13
·epriestley on Feb 18 2014, 23:09.

Jan 31 2014

Miniturize the nav buttons
4743ad96497b
·Chad Little on Jan 31 2014, 18:10.

Jan 29 2014

Add very basic "quick create" menu
049fb2018bde
·epriestley on Jan 29 2014, 05:18.

Jan 28 2014

Fix some security issues with email password resets
152f05aebed0
·epriestley on Jan 28 2014, 01:53.

Jan 23 2014

Actually check CSRF on Password and LDAP forms
febc494737be
·epriestley on Jan 23 2014, 23:18.
After writing "next_uri", don't write it again for a while
5b1d9c935a90
·epriestley on Jan 23 2014, 23:16.
Support CSRF for logged-out users
f9ac534f255d
·epriestley on Jan 23 2014, 23:03.
Straighten out absolute/relative URIs in login providers
24544b1a2f24
·epriestley on Jan 23 2014, 23:03.
Issue "anonymous" sessions for logged-out users
69ddb0ced631
·epriestley on Jan 23 2014, 23:03.
Consolidate use of magical cookie name strings
072741802350
·epriestley on Jan 23 2014, 23:01.
Add a common password blacklist
02aa193cb05e
·epriestley on Jan 23 2014, 23:01.

Jan 16 2014

Remove session limits and sequencing
2ec45d42a689
·epriestley on Jan 16 2014, 02:27.

Jan 15 2014

Expire and garbage collect unused sessions
acb141cf52c1
·epriestley on Jan 15 2014, 22:56.
Give the session table a normal `id` column as a primary key
a64228b03fbc
·epriestley on Jan 15 2014, 22:55.
Legalpad - make it work for not logged in users
41d2a0953604
·Bob Trahan on Jan 15 2014, 02:17.

phab/src/applications/authstableb85283105ecee83220e2b72…

Nov 11 2014

Nov 8 2014

Nov 7 2014

Nov 6 2014

Oct 7 2014

Oct 2 2014

Oct 1 2014

Sep 27 2014

Sep 18 2014

Sep 9 2014

Aug 22 2014

Aug 18 2014

Aug 14 2014

Aug 13 2014

Aug 12 2014

Aug 11 2014

Aug 8 2014

Aug 5 2014

Aug 4 2014

Aug 2 2014

Jul 24 2014

Jul 23 2014

Jul 22 2014

Jul 21 2014

Jul 15 2014

Jul 10 2014

Jun 28 2014

Jun 24 2014

Jun 10 2014

Jun 9 2014

Jun 4 2014

May 29 2014

May 22 2014

May 20 2014

May 16 2014

May 13 2014

May 12 2014

May 8 2014

May 1 2014

Apr 30 2014

Apr 28 2014

Apr 22 2014

Apr 11 2014

Apr 9 2014

Apr 8 2014

Mar 25 2014

Mar 21 2014

Mar 17 2014

Mar 14 2014

Mar 13 2014

Mar 12 2014

Feb 28 2014

Feb 26 2014

Feb 24 2014

Feb 23 2014

Feb 18 2014

Jan 31 2014

Jan 29 2014

Jan 28 2014

Jan 23 2014

Jan 16 2014

Jan 15 2014

phab/src/applications/auth
stableb85283105ecee83220e2b72…