B4X Requires Chilkat v11.0.0+

Duo Auth API - Async Auth

See more Duo Auth MFA Examples

If you enable async, then your application will be able to retrieve real-time status updates from the authentication process, rather than receiving no information until the process is complete. B4X

Dim success As Boolean = False

'  This example assumes the Chilkat API to have been previously unlocked.
'  See Global Unlock Sample for sample code.

Dim integrationKey As String = "DIMS3V5QDVG9J9ABRXC4"
Dim secretKey As String = "HWVQ46nubLBxhnRlKddTltWIi3hL0fIQF2qTvLab"

Dim http As ChilkatHttp
http.Initialize("http")

http.Accept = "application/json"

'  Use your own hostname here:
Dim url As String = "https://api-a03782e1.duosecurity.com/auth/v2/auth"

'  This example requires Chilkat v9.5.0.89 or greater because Chilkat will automatically
'  generate and send the HMAC signature for the requires based on the integration key and secret key.
http.Login = integrationKey
http.Password = secretKey

Dim req As ChilkatHttpRequest
req.Initialize
req.AddParam("username", "matt")
req.AddParam("factor", "push")
'  The device ID can be obtained from the preauth response.  See Duo Preauth Example
req.AddParam("device", "DP6GYVTQ5NK82BMR851F")
'  Add the async param to get an immediate response, then periodically check for updates to find out when the MFA authentication completes for fails.
req.AddParam("async", "1")

req.HttpVerb = "POST"
req.ContentType = "application/x-www-form-urlencoded"

Dim resp As ChilkatHttpResponse
resp.Initialize
success = http.HttpReq(url, req, resp)
If success = False Then
    Log(http.LastErrorText)
    Return
End If


Log("status code = " & resp.StatusCode)

Dim json As ChilkatJsonObject
json.Initialize
success = json.Load(resp.BodyStr)
json.EmitCompact = False
Log(json.Emit)

If resp.StatusCode <> 200 Then
    Return
End If


'  Sample successful output:

'  status code = 200

'  {
'    "stat": "OK",
'    "response": {
'      "txid": "45f7c92b-f45f-4862-8545-e0f58e78075a"
'    }
'  }

Dim txid As String = json.StringOf("response.txid")

'  Use your own hostname here:
Dim sbUrl As ChilkatStringBuilder
sbUrl.Initialize
sbUrl.Append("https://api-a03782e1.duosecurity.com/auth/v2/auth_status?txid=")
sbUrl.Append(txid)
Dim url As String = sbUrl.GetAsString

Log("Auth status URL: " & url)

Dim sbResult As ChilkatStringBuilder
sbResult.Initialize
Dim responseStatus As String
Dim responseStatus_msg As String

'  Wait for a response...
Dim i As Int = 0
Dim maxWaitIterations As Int = 100
Do While i < maxWaitIterations
    '  Wait 3 seconds.
    http.SleepMs(3000)

    Log("Polling...")

    success = http.HttpNoBody("GET", url, resp)
    If success = False Then
        Log(http.LastErrorText)
        Return
    End If


    If resp.StatusCode <> 200 Then
        Log("error status code = " & resp.StatusCode)
        Log(resp.BodyStr)
        Log("Failed.")
        Return
    End If


    '  Sample response:

    '  	{
    '  	  "stat": "OK",
    '  	  "response": {
    '  	    "result": "waiting",
    '  	    "status": "pushed",
    '  	    "status_msg": "Pushed a login request to your phone..."
    '  	  }
    '  	}

    json.Load(resp.BodyStr)

    '  The responseResult can be "allow", "deny", or "waiting"
    sbResult.Clear
    json.StringOfSb("response.result", sbResult)
    responseStatus = json.StringOf("response.status")
    responseStatus_msg = json.StringOf("response.status_msg")

    Log(sbResult.GetAsString)
    Log(responseStatus)
    Log(responseStatus_msg)
    Log("")


    If sbResult.ContentsEqual("waiting", True) = True Then
        i = i + 1
    Else
        '  Force loop exit..
        i = maxWaitIterations
    End If

Loop

Log("Finished.")