mfa

Documentation

Index

• Constants
• type DUODevice
  • func (d *DUODevice) Supports(factorType, factorProvider string) bool
  • func (d *DUODevice) Verify(authResp marshal.UserAuthn) (string, interface{}, error)
• type ErrUnknownStatus
  • func (e *ErrUnknownStatus) Error() string
• type FIDODevice
  • func (d *FIDODevice) Supports(factorType string, factorProvider string) bool
  • func (d *FIDODevice) Verify(authResp marshal.UserAuthn) (string, interface{}, error)
• type FidoClient
  • func NewFidoClient(challengeNonce, appId, version, keyHandle, stateToken string) (FidoClient, error)
  • func (d *FidoClient) ChallengeU2f() (*SignedAssertion, error)
• type Input
• type Payload
• type SMSDevice
  • func (d *SMSDevice) Support(factorType string, factorProvider string) bool
  • func (d *SMSDevice) Verify(authResp marshal.UserAuthn) (string, interface{}, error)
• type SignedAssertion
• type TOTPDevice
  • func (d *TOTPDevice) Supports(factorType string, factorProvider string) bool
  • func (d *TOTPDevice) Verify(authResp marshal.UserAuthn) (string, interface{}, error)

Constants

const (
	MaxOpenRetries = 10
	RetryDelayMS   = 200 * time.Millisecond
)

const (
	ActionVerify = "verify"
)

Types

type DUODevice

type DUODevice struct {
	DeviceName string
	// contains filtered or unexported fields
}

DUODevice is implementation of MFADevice for SMS

func (*DUODevice) Supports

func (d *DUODevice) Supports(factorType, factorProvider string) bool

Supported will check if the mfa config can be used by this device

func (*DUODevice) Verify

func (d *DUODevice) Verify(authResp marshal.UserAuthn) (string, interface{}, error)

Verify is called to get generate the payload that will be sent to Okta.

We will call this twice, once to tell Okta to send the code then
Once to prompt the user using `CodeSupplier` for the code.

type ErrUnknownStatus

type ErrUnknownStatus struct {
	Status string
}

func (*ErrUnknownStatus) Error

func (e *ErrUnknownStatus) Error() string

type FIDODevice

type FIDODevice struct {
}

FIDODevice is implementation of MFADevice for SMS

func (*FIDODevice) Supports

func (d *FIDODevice) Supports(factorType string, factorProvider string) bool

func (*FIDODevice) Verify

func (d *FIDODevice) Verify(authResp marshal.UserAuthn) (string, interface{}, error)

payload may be a Payload, or a SignedAssertion

type FidoClient

type FidoClient struct {
	ChallengeNonce string
	AppId          string
	Version        string
	Device         u2fhost.Device
	KeyHandle      string
	StateToken     string
}

func NewFidoClient

func NewFidoClient(challengeNonce, appId, version, keyHandle, stateToken string) (FidoClient, error)

func (*FidoClient) ChallengeU2f

func (d *FidoClient) ChallengeU2f() (*SignedAssertion, error)

type Input

type Input interface {
	CodeSupplier(factorType string) (string, error)
}

Input is provided to get input from the user.

type Payload

type Payload struct {
	StateToken string `json:"stateToken"`
	PassCode   string `json:"passCode,omitempty"`
}

Payload is a common request body that is sent as part of mfa validation

type SMSDevice

type SMSDevice struct {
	// contains filtered or unexported fields
}

SMSDevice is implementation of MFADevice for SMS

func (*SMSDevice) Support

func (d *SMSDevice) Support(factorType string, factorProvider string) bool

Supported will check if the mfa config can be used by this device

func (*SMSDevice) Verify

func (d *SMSDevice) Verify(authResp marshal.UserAuthn) (string, interface{}, error)

Verify is called to get generate the payload that will be sent to Okta.

We will call this twice, once to tell Okta to send the code then
Once to prompt the user using `CodeSupplier` for the code.

type SignedAssertion

type SignedAssertion struct {
	StateToken    string `json:"stateToken"`
	ClientData    string `json:"clientData"`
	SignatureData string `json:"signatureData"`
}

type TOTPDevice

type TOTPDevice struct {
	// contains filtered or unexported fields
}

TOTPDevice is the implementation of MFADevice

func (*TOTPDevice) Supports

func (d *TOTPDevice) Supports(factorType string, factorProvider string) bool

func (*TOTPDevice) Verify

func (d *TOTPDevice) Verify(authResp marshal.UserAuthn) (string, interface{}, error)

Verify will prompt the user for a code then return the payload for verification