Diffusion Phabricator (stable) History

phab/src/applications/auth/engine
stable33c0b9423fa5bf198683566…

Aug 4 2014

Make the current session key a component of the CSRF token
42cf7f6faa10
·epriestley on Aug 4 2014, 21:04.
Terminate other sessions on credential changes
95eeffff7e5d
·epriestley on Aug 4 2014, 21:04.

May 22 2014

Make password reset emails use one-time tokens
f1534e6feb6a
·epriestley on May 22 2014, 19:41.

May 1 2014

Minor cleanup of some session code
a04e138ae247
·epriestley on May 1 2014, 19:23.
Require multiple auth factors to establish web sessions
50376aad04d2
·epriestley on May 1 2014, 19:23.

Apr 30 2014

Rate limit multi-factor actions
23e654ec2bc8
·epriestley on Apr 30 2014, 23:30.

Apr 28 2014

Make two-factor auth actually work
a017a8e02b51
·epriestley on Apr 28 2014, 19:20.
Let users review their own account activity logs
3f5a55fa6e5a
·epriestley on Apr 28 2014, 02:32.
Add "High Security" mode to support multi-factor auth
f42ec84d0c6b
·epriestley on Apr 28 2014, 02:31.

Jan 23 2014

Issue "anonymous" sessions for logged-out users
69ddb0ced631
·epriestley on Jan 23 2014, 23:03.

Jan 16 2014

Remove session limits and sequencing
2ec45d42a689
·epriestley on Jan 16 2014, 02:27.

Jan 15 2014

Expire and garbage collect unused sessions
acb141cf52c1
·epriestley on Jan 15 2014, 22:56.

Jan 14 2014

Replace "web" and "conduit" magic session strings with constants
d392a8f15700
·epriestley on Jan 14 2014, 22:22.
Separate session management from PhabricatorUser
eef314b70149
·epriestley on Jan 14 2014, 22:22.