mirror of
https://we.phorge.it/source/phorge.git
synced 2024-11-15 19:32:40 +01:00
5dccc14bbf
Summary: Ref T9346. This mostly allows us to give users additional advice based on which instance they are trying to log in to in the Phacility cluster. It's also slightly more flexible than `auth.login-message` was, and maybe we'll add some more hooks here eventually. This feels like it's a sidegrade in complexity rather than really an improvement, but not too terrible. Test Plan: - Wrote the custom handler in T9346 to replicate old config functionality. - Wrote a smart handler for Phacility that can provide context-sensitive messages based on which OAuth client you're trying to use. See new message box at top (implementation in next diff): {F780375} Reviewers: chad Reviewed By: chad Maniphest Tasks: T9346 Differential Revision: https://secure.phabricator.com/D14057
101 lines
4.1 KiB
PHP
101 lines
4.1 KiB
PHP
<?php
|
|
|
|
final class PhabricatorAuthenticationConfigOptions
|
|
extends PhabricatorApplicationConfigOptions {
|
|
|
|
public function getName() {
|
|
return pht('Authentication');
|
|
}
|
|
|
|
public function getDescription() {
|
|
return pht('Options relating to authentication.');
|
|
}
|
|
|
|
public function getFontIcon() {
|
|
return 'fa-key';
|
|
}
|
|
|
|
public function getGroup() {
|
|
return 'core';
|
|
}
|
|
|
|
public function getOptions() {
|
|
return array(
|
|
$this->newOption('auth.require-email-verification', 'bool', false)
|
|
->setBoolOptions(
|
|
array(
|
|
pht('Require email verification'),
|
|
pht("Don't require email verification"),
|
|
))
|
|
->setSummary(
|
|
pht('Require email verification before a user can log in.'))
|
|
->setDescription(
|
|
pht(
|
|
'If true, email addresses must be verified (by clicking a link '.
|
|
'in an email) before a user can login. By default, verification '.
|
|
'is optional unless {{auth.email-domains}} is nonempty.')),
|
|
$this->newOption('auth.require-approval', 'bool', true)
|
|
->setBoolOptions(
|
|
array(
|
|
pht('Require Administrators to Approve Accounts'),
|
|
pht("Don't Require Manual Approval"),
|
|
))
|
|
->setSummary(
|
|
pht('Require administrators to approve new accounts.'))
|
|
->setDescription(
|
|
pht(
|
|
"Newly registered Phabricator accounts can either be placed ".
|
|
"into a manual approval queue for administrative review, or ".
|
|
"automatically activated immediately. The approval queue is ".
|
|
"enabled by default because it gives you greater control over ".
|
|
"who can register an account and access Phabricator.\n\n".
|
|
"If your install is completely public, or on a VPN, or users can ".
|
|
"only register with a trusted provider like LDAP, or you've ".
|
|
"otherwise configured Phabricator to prevent unauthorized ".
|
|
"registration, you can disable the queue to reduce administrative ".
|
|
"overhead.\n\n".
|
|
"NOTE: Before you disable the queue, make sure ".
|
|
"{{auth.email-domains}} is configured correctly ".
|
|
"for your install!")),
|
|
$this->newOption('auth.email-domains', 'list<string>', array())
|
|
->setSummary(pht('Only allow registration from particular domains.'))
|
|
->setDescription(
|
|
pht(
|
|
"You can restrict allowed email addresses to certain domains ".
|
|
"(like `yourcompany.com`) by setting a list of allowed domains ".
|
|
"here.\n\nUsers will only be allowed to register using email ".
|
|
"addresses at one of the domains, and will only be able to add ".
|
|
"new email addresses for these domains. If you configure this, ".
|
|
"it implies {{auth.require-email-verification}}.\n\n".
|
|
"You should omit the `@` from domains. Note that the domain must ".
|
|
"match exactly. If you allow `yourcompany.com`, that permits ".
|
|
"`joe@yourcompany.com` but rejects `joe@mail.yourcompany.com`."))
|
|
->addExample(
|
|
"yourcompany.com\nmail.yourcompany.com",
|
|
pht('Valid Setting')),
|
|
$this->newOption('account.editable', 'bool', true)
|
|
->setBoolOptions(
|
|
array(
|
|
pht('Allow editing'),
|
|
pht('Prevent editing'),
|
|
))
|
|
->setSummary(
|
|
pht(
|
|
'Determines whether or not basic account information is editable.'))
|
|
->setDescription(
|
|
pht(
|
|
'Is basic account information (email, real name, profile '.
|
|
'picture) editable? If you set up Phabricator to automatically '.
|
|
'synchronize account information from some other authoritative '.
|
|
'system, you can disable this to ensure information remains '.
|
|
'consistent across both systems.')),
|
|
$this->newOption('account.minimum-password-length', 'int', 8)
|
|
->setSummary(pht('Minimum password length.'))
|
|
->setDescription(
|
|
pht(
|
|
'When users set or reset a password, it must have at least this '.
|
|
'many characters.')),
|
|
);
|
|
}
|
|
|
|
}
|