1
0
Fork 0
mirror of https://we.phorge.it/source/phorge.git synced 2024-09-22 10:18:48 +02:00
phorge-phorge/src/applications/auth
epriestley 50376aad04 Require multiple auth factors to establish web sessions
Summary:
Ref T4398. This prompts users for multi-factor auth on login.

Roughly, this introduces the idea of "partial" sessions, which we haven't finished constructing yet. In practice, this means the session has made it through primary auth but not through multi-factor auth. Add a workflow for bringing a partial session up to a full one.

Test Plan:
  - Used Conduit.
  - Logged in as multi-factor user.
  - Logged in as no-factor user.
  - Tried to do non-login-things with a partial session.
  - Reviewed account activity logs.

{F149295}

Reviewers: btrahan

Reviewed By: btrahan

Subscribers: epriestley

Maniphest Tasks: T4398

Differential Revision: https://secure.phabricator.com/D8922
2014-05-01 10:23:02 -07:00
..
action Rate limit multi-factor actions 2014-04-30 14:30:31 -07:00
application Require multiple auth factors to establish web sessions 2014-05-01 10:23:02 -07:00
constants Tune cookie behaviors for 'phcid', 'phreg', etc 2014-03-14 14:33:31 -07:00
controller Require multiple auth factors to establish web sessions 2014-05-01 10:23:02 -07:00
data Add "High Security" mode to support multi-factor auth 2014-04-27 17:31:11 -07:00
editor Allow authentication providers to store and customize additional configuration 2013-06-18 10:02:34 -07:00
engine Require multiple auth factors to establish web sessions 2014-05-01 10:23:02 -07:00
exception Make two-factor auth actually work 2014-04-28 10:20:54 -07:00
factor Make two-factor auth actually work 2014-04-28 10:20:54 -07:00
garbagecollector Expire and garbage collect unused sessions 2014-01-15 13:56:16 -08:00
management Add bin/auth list-factors and bin/auth strip to remove multi-factor auth 2014-04-30 14:30:00 -07:00
phid Add multi-factor auth and TOTP support 2014-04-28 09:27:11 -07:00
provider Minor, fix the scoping of a static variable 2014-04-11 04:24:58 -07:00
query Allow users to terminate login sessions 2014-03-17 15:02:01 -07:00
storage Require multiple auth factors to establish web sessions 2014-05-01 10:23:02 -07:00
view Send old login code to the bottom of the sea 2013-06-19 01:33:27 -07:00