phorge-phorge/resources/sql/autopatches/20140430.auth.1.partial.sql at 58b622852f37de95b9e92d20775ed2757928afde - revi-archive/phorge-phorge - SiliconForest Atelier

revi-archive/phorge-phorge

mirror of https://we.phorge.it/source/phorge.git synced 2024-11-24 07:42:40 +01:00

epriestley 50376aad04 Require multiple auth factors to establish web sessions

Summary:
Ref T4398. This prompts users for multi-factor auth on login.

Roughly, this introduces the idea of "partial" sessions, which we haven't finished constructing yet. In practice, this means the session has made it through primary auth but not through multi-factor auth. Add a workflow for bringing a partial session up to a full one.

Test Plan:
  - Used Conduit.
  - Logged in as multi-factor user.
  - Logged in as no-factor user.
  - Tried to do non-login-things with a partial session.
  - Reviewed account activity logs.

{F149295}

Reviewers: btrahan

Reviewed By: btrahan

Subscribers: epriestley

Maniphest Tasks: T4398

Differential Revision: https://secure.phabricator.com/D8922

2014-05-01 10:23:02 -07:00

2 lines

91 B

SQL

Raw Blame History

	`ALTER TABLE {$NAMESPACE}_user.phabricator_session`
	`ADD isPartial BOOL NOT NULL DEFAULT 0;`