mirror of
https://we.phorge.it/source/phorge.git
synced 2024-12-11 16:16:14 +01:00
d22495a820
Summary: Depends on D20113. Ref T6703. Continue moving toward a future where multiple copies of a given type of provider may exist. Switch MFA from session-MFA at the start to one-shot MFA at the actual link action. Add one-shot MFA to the unlink action. This theoretically prevents an attacker from unlinking an account while you're getting coffee, registering `alIce` which they control, adding a copy of your profile picture, and then trying to trick you into writing a private note with your personal secrets or something. Test Plan: Linked and unlinked accounts. Refreshed account. Unlinked, then registered a new account. Unlinked, then relinked to my old account. Reviewers: amckinley Reviewed By: amckinley Maniphest Tasks: T6703 Differential Revision: https://secure.phabricator.com/D20117 |
||
|---|---|---|
| .. | ||
| PhabricatorAuthChallengeQuery.php | ||
| PhabricatorAuthContactNumberQuery.php | ||
| PhabricatorAuthContactNumberTransactionQuery.php | ||
| PhabricatorAuthFactorConfigQuery.php | ||
| PhabricatorAuthFactorProviderQuery.php | ||
| PhabricatorAuthFactorProviderTransactionQuery.php | ||
| PhabricatorAuthInviteQuery.php | ||
| PhabricatorAuthInviteSearchEngine.php | ||
| PhabricatorAuthMessageQuery.php | ||
| PhabricatorAuthMessageTransactionQuery.php | ||
| PhabricatorAuthPasswordQuery.php | ||
| PhabricatorAuthPasswordTransactionQuery.php | ||
| PhabricatorAuthProviderConfigQuery.php | ||
| PhabricatorAuthProviderConfigTransactionQuery.php | ||
| PhabricatorAuthSessionQuery.php | ||
| PhabricatorAuthSSHKeyQuery.php | ||
| PhabricatorAuthSSHKeySearchEngine.php | ||
| PhabricatorAuthSSHKeyTransactionQuery.php | ||
| PhabricatorAuthTemporaryTokenQuery.php | ||
| PhabricatorExternalAccountQuery.php | ||