Page MenuHomePhorge
Feed Advanced Search

Wed, May 21

jgrammen-agilitypr closed Q180: "Auth" - it is possible to have a provider (LDAP) configured via conf/custom as resolved.
Wed, May 21, 14:51 · Auth

Tue, May 6

jgrammen-agilitypr asked Q181: "Auth" - Multiple LDAP Servers.
Tue, May 6, 15:31 · Auth
jgrammen-agilitypr asked Q180: "Auth" - it is possible to have a provider (LDAP) configured via conf/custom.
Tue, May 6, 15:23 · Auth

Apr 19 2025

xtex updated the task description for T16038: Add an endpoint for plain-text ssh keys.
Apr 19 2025, 14:08 · Auth, Phorge
xtex updated the task description for T16038: Add an endpoint for plain-text ssh keys.
Apr 19 2025, 00:35 · Auth, Phorge
xtex created T16038: Add an endpoint for plain-text ssh keys.
Apr 19 2025, 00:32 · Auth, Phorge

Apr 8 2025

aklapper closed T15992: PHP 8.1 "strlen(null)" exception adding an MFA provider as Resolved by committing rPef3e0a75f62e: Fix PHP 8.1 "strlen(null)" exception in Feed setting up MFA.
Apr 8 2025, 08:59 · Auth, PHP 8 support

Mar 31 2025

Cigaryno closed T16018: Update TOTP suggestions to open-source applications as Resolved by committing rPf6639cc09c3d: Update TOTP suggestions to open-source applications.
Mar 31 2025, 13:54 · User-Cigaryno, Auth
Cigaryno closed D25934: Update TOTP suggestions to open-source applications.
Mar 31 2025, 13:54 · User-Cigaryno, Auth
aklapper accepted D25934: Update TOTP suggestions to open-source applications.

Looks good to me, thanks!

Mar 31 2025, 13:01 · User-Cigaryno, Auth

Mar 30 2025

Cigaryno updated the diff for D25934: Update TOTP suggestions to open-source applications.

Fix typos reported by @aklapper.

Mar 30 2025, 20:27 · User-Cigaryno, Auth
aklapper requested changes to D25934: Update TOTP suggestions to open-source applications.

Should be fine after these two changes :)

Mar 30 2025, 19:11 · User-Cigaryno, Auth
aklapper added inline comments to D25934: Update TOTP suggestions to open-source applications.
Mar 30 2025, 19:11 · User-Cigaryno, Auth
AndrewTavis added a comment to T16018: Update TOTP suggestions to open-source applications.

Thank you both for the conversation here and further thanks @Cigaryno for the patch! :)

Mar 30 2025, 09:57 · User-Cigaryno, Auth

Mar 29 2025

Cigaryno updated the diff for D25934: Update TOTP suggestions to open-source applications.

Mention closed-source apps in addition to open-source apps per @aklapper

Mar 29 2025, 14:28 · User-Cigaryno, Auth
Cigaryno planned changes to D25934: Update TOTP suggestions to open-source applications.

Per @aklapper, it's best to show both closed-source and open-source TOTP apps.

I'd personally not remove common proprietary software options (as it makes life of users potentially harder if they already have such an app installed) but list FOSS options first.

Some FoSS devs may not be familiar at all with open-source TOTP apps. I personally use Google Authenticator so I agree with you and also, I have my TOTP content on WinAuth too, which is unmaintained however I am not ready to switch TOTP app on my Windows PC (my revs from now on are created from an Ubuntu VM due to the arc troubles I am having on Windows).

Mar 29 2025, 14:24 · User-Cigaryno, Auth
Cigaryno added a comment to T16018: Update TOTP suggestions to open-source applications.

I'd personally not remove common proprietary software options (as it makes life of users potentially harder if they already have such an app installed) but list FOSS options first.

Mar 29 2025, 14:02 · User-Cigaryno, Auth
Cigaryno added a comment to D25934: Update TOTP suggestions to open-source applications.

I'd prefer not to remove common proprietary software options but list FOSS options first.

Mar 29 2025, 13:55 · User-Cigaryno, Auth
aklapper added a comment to T16018: Update TOTP suggestions to open-source applications.

I'd personally not remove common proprietary software options (as it makes life of users potentially harder if they already have such an app installed) but list FOSS options first.

Mar 29 2025, 13:43 · User-Cigaryno, Auth
aklapper added a comment to D25934: Update TOTP suggestions to open-source applications.

I'd prefer not to remove common proprietary software options but list FOSS options first.

Mar 29 2025, 13:43 · User-Cigaryno, Auth
Cigaryno requested review of D25934: Update TOTP suggestions to open-source applications.
Mar 29 2025, 13:21 · User-Cigaryno, Auth
Cigaryno added a revision to T16018: Update TOTP suggestions to open-source applications: D25934: Update TOTP suggestions to open-source applications.
Mar 29 2025, 13:21 · User-Cigaryno, Auth
Cigaryno claimed T16018: Update TOTP suggestions to open-source applications.

I will submit a patch shortly.

Mar 29 2025, 13:12 · User-Cigaryno, Auth

Feb 14 2025

valerio.bozzolan created T15995: User config change: add more useful title in feed (PhabricatorUserPreferencesTransaction).
Feb 14 2025, 09:03 · Bug Reports, Feed, Auth

Feb 11 2025

Cigaryno added a comment to T15992: PHP 8.1 "strlen(null)" exception adding an MFA provider.

I think you are right for unnecessary catetorization and sending notifications.

Feb 11 2025, 12:50 · Auth, PHP 8 support

Feb 10 2025

aklapper added a comment to T15992: PHP 8.1 "strlen(null)" exception adding an MFA provider.

Cigaryno moved this task from Backlog to PHP 8.1 on the PHP 8 support board.

Feb 10 2025, 19:15 · Auth, PHP 8 support
Cigaryno moved T15992: PHP 8.1 "strlen(null)" exception adding an MFA provider from Backlog to PHP 8.1 on the PHP 8 support board.
Feb 10 2025, 17:37 · Auth, PHP 8 support

Jan 24 2025

Cigaryno added a project to T15812: Double escaped text when adding an auth provider: Auth.
Jan 24 2025, 16:12 · Auth, Bug Reports

Jan 15 2025

Cigaryno moved T15504: If registration is disabled, show the button as disabled from Backlog to User Experience on the Good Starter Task board.
Jan 15 2025, 19:27 · Auth, Good Starter Task, UX

Jan 2 2025

Cigaryno added a project to T15504: If registration is disabled, show the button as disabled: Auth.
Jan 2 2025, 12:50 · Auth, Good Starter Task, UX

Dec 29 2024

Cigaryno added a project to D25513: Work in progress discord auth: Auth.
Dec 29 2024, 16:12 · Auth

Dec 28 2024

Cigaryno added a project to T15526: Diffusion: Description and tags are not shown: Auth.
Dec 28 2024, 11:59 · Diffusion, Good Starter Task, UX

Dec 25 2024

Cigaryno moved T15078: Support for hardware keys as second factor from Backlog to OAuth Client & Server on the Auth board.
Dec 25 2024, 10:19 · Auth
Cigaryno moved T15708: Discord as auth method from Backlog to OAuth Client & Server on the Auth board.
Dec 25 2024, 10:19 · Auth

Dec 21 2024

Cigaryno edited Description on Auth.
Dec 21 2024, 17:53

Dec 2 2024

aklapper closed T15963: LDAP over TLS is broken as Resolved by committing rP0bfdcaa005b1: Revert "Fix PHP 8.3 "Usage of ldap_connect with two arguments is deprecated"….
Dec 2 2024, 09:28 · Bug Reports, Auth
aklapper added a revision to T15963: LDAP over TLS is broken: D25842: Revert "Fix PHP 8.3 "Usage of ldap_connect with two arguments is deprecated" exception".
Dec 2 2024, 00:28 · Bug Reports, Auth

Dec 1 2024

taavi added a project to T15963: LDAP over TLS is broken: Bug Reports.
Dec 1 2024, 14:11 · Bug Reports, Auth
taavi created T15963: LDAP over TLS is broken.
Dec 1 2024, 14:08 · Bug Reports, Auth

Sep 16 2024

valerio.bozzolan created T15942: Native Keycloak auth integration.
Sep 16 2024, 15:00 · Auth
aklapper closed T15848: newOAuth1Future doesn't set a User-Agent as Resolved by committing rP39237c0854fe: Set base-uri as User-Agent for OAuth1 and Github authentication.
Sep 16 2024, 08:22 · Auth

Sep 6 2024

aklapper added a comment to T15848: newOAuth1Future doesn't set a User-Agent.

I would like to better understand the root problem.

Why changing the current user agent should improve the situation?

Sep 6 2024, 10:11 · Auth

Sep 5 2024

RhinosF1 added a comment to T15848: newOAuth1Future doesn't set a User-Agent.

@valerio.bozzolan: thats not what Andre says. He says another area of the code uses a terrible user agent and we should change that to a better one at the same time.

Sep 5 2024, 19:51 · Auth
valerio.bozzolan added a comment to T15848: newOAuth1Future doesn't set a User-Agent.

I would like to better understand the root problem. I see that Cloudflare was showing a captcha to Phorge (what Phorge?). It seems it was because an user agent was missing. But aklapper said that we are already setting an user agent.

Sep 5 2024, 19:24 · Auth

Aug 1 2024

aklapper added a revision to T15848: newOAuth1Future doesn't set a User-Agent: D25758: Set base-uri as User-Agent for OAuth1 and Github authentication.
Aug 1 2024, 14:30 · Auth

Jun 6 2024

RhinosF1 added a comment to T15848: newOAuth1Future doesn't set a User-Agent.

That would probably be a better User-Agent

Jun 6 2024, 15:00 · Auth
aklapper added a comment to T15849: Add a "description" or "label" field for Conduit API Tokens.

/settings/panel/multifactor/ requires users to add a custom Name so there is likely code to adapt/reuse for /settings/panel/apitokens/

Jun 6 2024, 11:08 · Feature Requests, Conduit, Auth
aklapper added a comment to T15848: newOAuth1Future doesn't set a User-Agent.

https://we.phorge.it/source/phorge/browse/master/src/applications/auth/adapter/PhutilGitHubAuthAdapter.php$57-58 uses a boring
$future->addHeader('User-Agent', __CLASS__); for this.

Jun 6 2024, 10:53 · Auth

Jun 5 2024

bd808 added a project to T15849: Add a "description" or "label" field for Conduit API Tokens: Feature Requests.
Jun 5 2024, 22:36 · Feature Requests, Conduit, Auth
bd808 created T15849: Add a "description" or "label" field for Conduit API Tokens.
Jun 5 2024, 22:33 · Feature Requests, Conduit, Auth
RhinosF1 created T15848: newOAuth1Future doesn't set a User-Agent.
Jun 5 2024, 20:54 · Auth

Apr 30 2024

valerio.bozzolan reassigned T15706: Phorge/auth/config/view/3/ Call to phutil_nonempty_string() expected null or a string, got: PhutilSafeHTML. from valerio.bozzolan to avivey.

Thanks again :) Giving right credits

Apr 30 2024, 09:53 · Auth, Bug Reports

Apr 15 2024

avivey added a comment to T15706: Phorge/auth/config/view/3/ Call to phutil_nonempty_string() expected null or a string, got: PhutilSafeHTML..

done...

Apr 15 2024, 16:36 · Auth, Bug Reports
avivey added a comment to T15706: Phorge/auth/config/view/3/ Call to phutil_nonempty_string() expected null or a string, got: PhutilSafeHTML..

Yeah, probably. I'll try to do it tonight.

Apr 15 2024, 08:31 · Auth, Bug Reports

Apr 14 2024

revi added a comment to T15706: Phorge/auth/config/view/3/ Call to phutil_nonempty_string() expected null or a string, got: PhutilSafeHTML..

Can this (I mean rPb445e1d80df9 )be backported into stable?

Apr 14 2024, 12:24 · Auth, Bug Reports

Feb 12 2024

valerio.bozzolan closed T15706: Phorge/auth/config/view/3/ Call to phutil_nonempty_string() expected null or a string, got: PhutilSafeHTML. as Resolved by committing rPb445e1d80df9: Fix config transaction rendering error on auth page by allowing PhutilSafeHTML.
Feb 12 2024, 10:52 · Auth, Bug Reports
sirocyl added a comment to T15706: Phorge/auth/config/view/3/ Call to phutil_nonempty_string() expected null or a string, got: PhutilSafeHTML..

Heck yeah, changing phutil_nonempty_string() to phutil_nonempty_stringlike() there fixed the issue I had mentioned in a comment in T15737: Include information for installing required PHP version in Diviner docs.

Feb 12 2024, 10:50 · Auth, Bug Reports

Jan 13 2024

aklapper closed T15511: Do not require the real name during registration as Invalid.

PHP 8.2.14, Phorge at cc964550f945b08c64970c01a34b55314e8ef0aa

  1. As an admin, check that /config/edit/user.require-real-name/ is set to Make real names optional
  2. Log out of Phorge
  3. Go to http://phorge.localhost/auth/register/
  4. See that the Real Name field does not state Required on the right
  5. Enter values into the fields Username, Password, Confirm Password, Email
  6. Click the Register Account button
Jan 13 2024, 11:46 · Auth
aklapper added a comment to T15511: Do not require the real name during registration.

Reference: rPdfcccd4cb882a171d10ba8a5c2763dcc73654256

Jan 13 2024, 10:55 · Auth

Jan 12 2024

valerio.bozzolan closed T15692: Allow to see your own public revoked key as Resolved by committing rP549a26d0879c: Auth SSH Details: show Public Key (not just Type).
Jan 12 2024, 21:34 · UX, User-valerio.bozzolan, Auth
doommius added a comment to T15708: Discord as auth method.

Sounds easy enough to implement.

Jan 12 2024, 18:44 · Auth
avivey added a comment to T15708: Discord as auth method.

Doc(s) on new extensions: I remember having a chapter under /book/contrib/, but I can't find it now. We should build a guide under T15030.
Short answer: create a new repo, make an src dir with all the code, and run arc liberate to create a "library" (including __phutil_library_init__.php and __phutil_library_map__.php), and then add the path of the extension to load-libraries in conf.json.

Jan 12 2024, 17:02 · Auth
doommius added a comment to T15708: Discord as auth method.

I'd like to see this as an Extension rather then go into the rP, just because we want to have more stuff as extensions; I think this area is abstracted enough so that it can easily be made that way.

That could be a good target as well for this, Is there docs on how extensions should be made?

Jan 12 2024, 14:21 · Auth
avivey added a comment to T15708: Discord as auth method.

I'd like to see this as an Extension rather then go into the rP, just because we want to have more stuff as extensions; I think this area is abstracted enough so that it can easily be made that way.

Jan 12 2024, 14:12 · Auth
doommius updated subscribers of T15708: Discord as auth method.

@valerio.bozzolan & @avivey What is the best practice for setting up the role/server check when new users attempt to auth via the oauth, you can't set limits on the oauth from discords side of view so you'd need to set them up on phorge, I've put down some ideas in the above comment.

Jan 12 2024, 13:33 · Auth
doommius added a comment to T15708: Discord as auth method.

How would i go about implementing it such that for a user to sign in with discord they need to have certain roles.

Jan 12 2024, 13:13 · Auth
doommius added a revision to T15708: Discord as auth method: D25513: Work in progress discord auth.
Jan 12 2024, 11:55 · Auth
doommius created T15708: Discord as auth method.
Jan 12 2024, 11:49 · Auth
doommius added a revision to T15706: Phorge/auth/config/view/3/ Call to phutil_nonempty_string() expected null or a string, got: PhutilSafeHTML.: D25512: Fix config transaction rendering error on auth page by allowing PhutilSafeHTML.
Jan 12 2024, 11:35 · Auth, Bug Reports
valerio.bozzolan added a comment to T15706: Phorge/auth/config/view/3/ Call to phutil_nonempty_string() expected null or a string, got: PhutilSafeHTML..

Can you try changing this line in your local install?

Jan 12 2024, 08:58 · Auth, Bug Reports

Jan 11 2024

doommius updated the task description for T15706: Phorge/auth/config/view/3/ Call to phutil_nonempty_string() expected null or a string, got: PhutilSafeHTML..
Jan 11 2024, 17:23 · Auth, Bug Reports
doommius updated the task description for T15706: Phorge/auth/config/view/3/ Call to phutil_nonempty_string() expected null or a string, got: PhutilSafeHTML..
Jan 11 2024, 17:17 · Auth, Bug Reports
doommius created T15706: Phorge/auth/config/view/3/ Call to phutil_nonempty_string() expected null or a string, got: PhutilSafeHTML..
Jan 11 2024, 17:15 · Auth, Bug Reports

Dec 27 2023

valerio.bozzolan added a comment to T15692: Allow to see your own public revoked key.

In addition, it seems only the owner can see their stuff here.

Dec 27 2023, 14:02 · UX, User-valerio.bozzolan, Auth

Dec 14 2023

valerio.bozzolan added a comment to T15692: Allow to see your own public revoked key.

I totally agree with these additional considerations. Thanks.

Dec 14 2023, 21:27 · UX, User-valerio.bozzolan, Auth
avivey added a comment to T15692: Allow to see your own public revoked key.

Since we already show the full (public) key when editing, then I don't see a reason not to show it after it's revoked.

Dec 14 2023, 09:03 · UX, User-valerio.bozzolan, Auth

Dec 13 2023

valerio.bozzolan added a revision to T15692: Allow to see your own public revoked key: D25495: Auth SSH Details: show Public Key (not just Type).
Dec 13 2023, 16:52 · UX, User-valerio.bozzolan, Auth
valerio.bozzolan triaged T15692: Allow to see your own public revoked key as Normal priority.
Dec 13 2023, 16:04 · UX, User-valerio.bozzolan, Auth

Jul 10 2023

Cigaryno added a project to T15078: Support for hardware keys as second factor: Auth.
Jul 10 2023, 14:00 · Auth

Jun 30 2023

avivey added a comment to T15511: Do not require the real name during registration.

It's enabled by default - https://we.phorge.it/source/phorge/browse/master/src/applications/people/config/PhabricatorUserConfigOptions.php$48

Jun 30 2023, 20:34 · Auth
Cigaryno created T15511: Do not require the real name during registration.
Jun 30 2023, 19:22 · Auth

Jun 29 2023

Cigaryno edited Description on Auth.
Jun 29 2023, 07:18
Cigaryno edited Description on Auth.
Jun 29 2023, 07:18

Jun 23 2023

Matthew created Auth.
Jun 23 2023, 16:34