1
0
Fork 0
mirror of https://we.phorge.it/source/phorge.git synced 2024-11-16 03:42:41 +01:00
phorge-phorge/src/applications/conduit
epriestley 50376aad04 Require multiple auth factors to establish web sessions
Summary:
Ref T4398. This prompts users for multi-factor auth on login.

Roughly, this introduces the idea of "partial" sessions, which we haven't finished constructing yet. In practice, this means the session has made it through primary auth but not through multi-factor auth. Add a workflow for bringing a partial session up to a full one.

Test Plan:
  - Used Conduit.
  - Logged in as multi-factor user.
  - Logged in as no-factor user.
  - Tried to do non-login-things with a partial session.
  - Reviewed account activity logs.

{F149295}

Reviewers: btrahan

Reviewed By: btrahan

Subscribers: epriestley

Maniphest Tasks: T4398

Differential Revision: https://secure.phabricator.com/D8922
2014-05-01 10:23:02 -07:00
..
application Modernize documentation links 2014-03-17 15:01:31 -07:00
call Added some additional assertion methods. 2014-03-08 19:16:21 -08:00
config Route internal conduit calls if other hosts available 2013-05-19 04:16:10 -07:00
controller Make many actions require high security 2014-04-30 17:44:59 -07:00
garbagecollector Complete modularization of the GC daemon 2014-01-15 10:02:31 -08:00
method Require multiple auth factors to establish web sessions 2014-05-01 10:23:02 -07:00
protocol Delete license headers from files 2012-11-05 11:16:51 -08:00
query Replace some hsprintf() by phutil_tag() 2013-11-11 09:23:23 -08:00
ssh Prepare to route VCS connections through SSH 2013-10-29 15:32:40 -07:00
storage Explain policy exception rules to users 2013-09-27 08:43:41 -07:00