1
0
Fork 0
mirror of https://we.phorge.it/source/phorge.git synced 2025-02-08 12:58:31 +01:00
phorge-phorge/src/applications/auth/exception
epriestley c9ff6ce390 Add CSRF to SMS challenges, and pave the way for more MFA types (including Duo)
Summary:
Depends on D20026. Ref T13222. Ref T13231. The primary change here is that we'll no longer send you an SMS if you hit an MFA gate without CSRF tokens.

Then there's a lot of support for genralizing into Duo (and other push factors, potentially), I'll annotate things inline.

Test Plan: Implemented Duo, elsewhere.

Reviewers: amckinley

Reviewed By: amckinley

Maniphest Tasks: T13231, T13222

Differential Revision: https://secure.phabricator.com/D20028
2019-01-24 15:10:57 -08:00
..
PhabricatorAuthFactorResultException.php Add CSRF to SMS challenges, and pave the way for more MFA types (including Duo) 2019-01-24 15:10:57 -08:00
PhabricatorAuthHighSecurityRequiredException.php Improve UI messaging around "one-shot" vs "session upgrade" MFA 2018-12-28 00:11:36 -08:00
PhabricatorAuthInviteAccountException.php Add email invites to Phabricator (logic only) 2015-02-09 16:12:36 -08:00
PhabricatorAuthInviteDialogException.php Add email invites to Phabricator (logic only) 2015-02-09 16:12:36 -08:00
PhabricatorAuthInviteException.php Add email invites to Phabricator (logic only) 2015-02-09 16:12:36 -08:00
PhabricatorAuthInviteInvalidException.php Add email invites to Phabricator (logic only) 2015-02-09 16:12:36 -08:00
PhabricatorAuthInviteLoginException.php Add email invites to Phabricator (logic only) 2015-02-09 16:12:36 -08:00
PhabricatorAuthInviteRegisteredException.php Add email invites to Phabricator (logic only) 2015-02-09 16:12:36 -08:00
PhabricatorAuthInviteVerifyException.php Add email invites to Phabricator (logic only) 2015-02-09 16:12:36 -08:00