epriestley d8d4efe89e Require MFA to edit MFA providers ... Summary: Depends on D20037. Ref T13222. Ref T7667. Although administrators can now disable MFA from the web UI, at least require that they survive MFA gates to do so. T7667 (`bin/auth lock`) should provide a sturdier approach here in the long term. Test Plan: Created and edited MFA providers, was prompted for MFA. Reviewers: amckinley Reviewed By: amckinley Maniphest Tasks: T13222, T7667 Differential Revision: https://secure.phabricator.com/D20038		2019-01-28 09:44:39 -08:00
..
PhabricatorAuthContactNumberMFAEngine.php	Always require MFA to edit contact numbers	2019-01-23 14:19:56 -08:00
PhabricatorAuthCSRFEngine.php	Remove "phabricator.csrf-key" and upgrade CSRF hashing to SHA256	2019-01-04 13:49:47 -08:00
PhabricatorAuthFactorProviderMFAEngine.php	Require MFA to edit MFA providers	2019-01-28 09:44:39 -08:00
PhabricatorAuthInviteEngine.php	Use PhutilInvalidStateException	2015-06-18 07:09:02 +10:00
PhabricatorAuthPasswordEngine.php	Prevent users from selecting excessively bad passwords based on their username or email address	2018-11-06 12:44:07 -08:00
PhabricatorAuthSessionEngine.php	Get rid of "throwResult()" for control flow in MFA factors	2019-01-28 09:40:28 -08:00
PhabricatorAuthSessionEngineExtension.php	Add session and request hooks to PhabricatorAuthSessionEngine	2016-11-17 13:09:29 -08:00
PhabricatorAuthSessionEngineExtensionModule.php	Redesign Config Application	2016-08-29 15:49:49 -07:00