Java Requires Chilkat v11.0.0+

Duo Auth API - Async Auth

See more Duo Auth MFA Examples

If you enable async, then your application will be able to retrieve real-time status updates from the authentication process, rather than receiving no information until the process is complete. Chilkat2 Java

import com.chilkatsoft.chilkat2.ChilkatException;
import com.chilkatsoft.chilkat2.Http;
import com.chilkatsoft.chilkat2.HttpRequest;
import com.chilkatsoft.chilkat2.HttpResponse;
import com.chilkatsoft.chilkat2.JsonObject;
import com.chilkatsoft.chilkat2.StringBuilder;

public class ChilkatExample {

    public static void main(String[] args) {
        // This example assumes the Chilkat API to have been previously unlocked.
        // See Global Unlock Sample for sample code.

        String integrationKey = "DIMS3V5QDVG9J9ABRXC4";
        String secretKey = "HWVQ46nubLBxhnRlKddTltWIi3hL0fIQF2qTvLab";

        Http http = new Http();

        http.setAccept("application/json");

        // Use your own hostname here:
        String url = "https://api-a03782e1.duosecurity.com/auth/v2/auth";

        // This example requires Chilkat v9.5.0.89 or greater because Chilkat will automatically
        // generate and send the HMAC signature for the requires based on the integration key and secret key.
        http.setLogin(integrationKey);
        http.setPassword(secretKey);

        HttpRequest req = new HttpRequest();
        req.addParam("username", "matt");
        req.addParam("factor", "push");
        // The device ID can be obtained from the preauth response.  See Duo Preauth Example
        req.addParam("device", "DP6GYVTQ5NK82BMR851F");
        // Add the async param to get an immediate response, then periodically check for updates to find out when the MFA authentication completes for fails.
        req.addParam("async", "1");

        req.setHttpVerb("POST");
        req.setContentType("application/x-www-form-urlencoded");

        HttpResponse resp = new HttpResponse();
        try {
            http.httpReq(url, req, resp);
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        System.out.println("status code = " + resp.getStatusCode());

        JsonObject json = new JsonObject();
        json.load(resp.getBodyStr());
        json.setEmitCompact(false);
        System.out.println(json.emit());

        if (resp.getStatusCode() != 200) {
            return;
        }

        // Sample successful output:

        // status code = 200

        // {
        //   "stat": "OK",
        //   "response": {
        //     "txid": "45f7c92b-f45f-4862-8545-e0f58e78075a"
        //   }
        // }

        String txid = json.stringOf("response.txid");

        // Use your own hostname here:
        StringBuilder sbUrl = new StringBuilder();
        sbUrl.append("https://api-a03782e1.duosecurity.com/auth/v2/auth_status?txid=");
        sbUrl.append(txid);
        url = sbUrl.getAsString();

        System.out.println("Auth status URL: " + url);

        StringBuilder sbResult = new StringBuilder();
        String responseStatus = "";
        String responseStatus_msg = "";

        // Wait for a response...
        int i = 0;
        int maxWaitIterations = 100;
        while (i < maxWaitIterations) {
            // Wait 3 seconds.
            http.sleepMs(3000);

            System.out.println("Polling...");

            try {
                http.httpNoBody("GET", url, resp);
            } catch (ChilkatException e) {
                System.out.println(e.getLastErrorText());
                return;
            }

            if (resp.getStatusCode() != 200) {
                System.out.println("error status code = " + resp.getStatusCode());
                System.out.println(resp.getBodyStr());
                System.out.println("Failed.");
                return;
            }

            // Sample response:

            //     {
            //       "stat": "OK",
            //       "response": {
            //         "result": "waiting",
            //         "status": "pushed",
            //         "status_msg": "Pushed a login request to your phone..."
            //       }
            //     }

            json.load(resp.getBodyStr());

            // The responseResult can be "allow", "deny", or "waiting"
            sbResult.clear();
            json.stringOfSb("response.result", sbResult);
            responseStatus = json.stringOf("response.status");
            responseStatus_msg = json.stringOf("response.status_msg");

            System.out.println(sbResult.getAsString());
            System.out.println(responseStatus);
            System.out.println(responseStatus_msg);
            System.out.println("");

            if (sbResult.contentsEqual("waiting", true)) {
                i = i + 1;
            } else {
                // Force loop exit..
                i = maxWaitIterations;
            }
        }

        System.out.println("Finished.");
    }
}