DataFlex

Duo Auth API - Async Auth

See more Duo Auth MFA Examples

If you enable async, then your application will be able to retrieve real-time status updates from the authentication process, rather than receiving no information until the process is complete. DataFlex

Use ChilkatAx-win32.pkg

Procedure Test
    Boolean iSuccess
    String sIntegrationKey
    String sSecretKey
    Handle hoHttp
    String sUrl
    Variant vReq
    Handle hoReq
    Variant vResp
    Handle hoResp
    Handle hoJson
    String sTxid
    Handle hoSbUrl
    String sUrl
    Variant vSbResult
    Handle hoSbResult
    String sResponseStatus
    String sResponseStatus_msg
    Integer i
    Integer iMaxWaitIterations
    String sTemp1
    Integer iTemp1
    Boolean bTemp1

    Move False To iSuccess

    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    Move "DIMS3V5QDVG9J9ABRXC4" To sIntegrationKey
    Move "HWVQ46nubLBxhnRlKddTltWIi3hL0fIQF2qTvLab" To sSecretKey

    Get Create (RefClass(cComChilkatHttp)) To hoHttp
    If (Not(IsComObjectCreated(hoHttp))) Begin
        Send CreateComObject of hoHttp
    End

    Set ComAccept Of hoHttp To "application/json"

    // Use your own hostname here:
    Move "https://api-a03782e1.duosecurity.com/auth/v2/auth" To sUrl

    // This example requires Chilkat v9.5.0.89 or greater because Chilkat will automatically
    // generate and send the HMAC signature for the requires based on the integration key and secret key.
    Set ComLogin Of hoHttp To sIntegrationKey
    Set ComPassword Of hoHttp To sSecretKey

    Get Create (RefClass(cComChilkatHttpRequest)) To hoReq
    If (Not(IsComObjectCreated(hoReq))) Begin
        Send CreateComObject of hoReq
    End
    Send ComAddParam To hoReq "username" "matt"
    Send ComAddParam To hoReq "factor" "push"
    // The device ID can be obtained from the preauth response.  See Duo Preauth Example
    Send ComAddParam To hoReq "device" "DP6GYVTQ5NK82BMR851F"
    // Add the async param to get an immediate response, then periodically check for updates to find out when the MFA authentication completes for fails.
    Send ComAddParam To hoReq "async" "1"

    Set ComHttpVerb Of hoReq To "POST"
    Set ComContentType Of hoReq To "application/x-www-form-urlencoded"

    Get Create (RefClass(cComChilkatHttpResponse)) To hoResp
    If (Not(IsComObjectCreated(hoResp))) Begin
        Send CreateComObject of hoResp
    End
    Get pvComObject of hoReq to vReq
    Get pvComObject of hoResp to vResp
    Get ComHttpReq Of hoHttp sUrl vReq vResp To iSuccess
    If (iSuccess = False) Begin
        Get ComLastErrorText Of hoHttp To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    Get ComStatusCode Of hoResp To iTemp1
    Showln "status code = " iTemp1

    Get Create (RefClass(cComChilkatJsonObject)) To hoJson
    If (Not(IsComObjectCreated(hoJson))) Begin
        Send CreateComObject of hoJson
    End
    Get ComBodyStr Of hoResp To sTemp1
    Get ComLoad Of hoJson sTemp1 To iSuccess
    Set ComEmitCompact Of hoJson To False
    Get ComEmit Of hoJson To sTemp1
    Showln sTemp1

    Get ComStatusCode Of hoResp To iTemp1
    If (iTemp1 <> 200) Begin
        Procedure_Return
    End

    // Sample successful output:

    // status code = 200

    // {
    //   "stat": "OK",
    //   "response": {
    //     "txid": "45f7c92b-f45f-4862-8545-e0f58e78075a"
    //   }
    // }

    Get ComStringOf Of hoJson "response.txid" To sTxid

    // Use your own hostname here:
    Get Create (RefClass(cComChilkatStringBuilder)) To hoSbUrl
    If (Not(IsComObjectCreated(hoSbUrl))) Begin
        Send CreateComObject of hoSbUrl
    End
    Get ComAppend Of hoSbUrl "https://api-a03782e1.duosecurity.com/auth/v2/auth_status?txid=" To iSuccess
    Get ComAppend Of hoSbUrl sTxid To iSuccess
    Get ComGetAsString Of hoSbUrl To sUrl

    Showln "Auth status URL: " sUrl

    Get Create (RefClass(cComChilkatStringBuilder)) To hoSbResult
    If (Not(IsComObjectCreated(hoSbResult))) Begin
        Send CreateComObject of hoSbResult
    End

    // Wait for a response...
    Move 0 To i
    Move 100 To iMaxWaitIterations
    While (i < iMaxWaitIterations)
        // Wait 3 seconds.
        Send ComSleepMs To hoHttp 3000

        Showln "Polling..."

        Get pvComObject of hoResp to vResp
        Get ComHttpNoBody Of hoHttp "GET" sUrl vResp To iSuccess
        If (iSuccess = False) Begin
            Get ComLastErrorText Of hoHttp To sTemp1
            Showln sTemp1
            Procedure_Return
        End

        Get ComStatusCode Of hoResp To iTemp1
        If (iTemp1 <> 200) Begin
            Get ComStatusCode Of hoResp To iTemp1
            Showln "error status code = " iTemp1
            Get ComBodyStr Of hoResp To sTemp1
            Showln sTemp1
            Showln "Failed."
            Procedure_Return
        End

        // Sample response:

        // 	{
        // 	  "stat": "OK",
        // 	  "response": {
        // 	    "result": "waiting",
        // 	    "status": "pushed",
        // 	    "status_msg": "Pushed a login request to your phone..."
        // 	  }
        // 	}

        Get ComBodyStr Of hoResp To sTemp1
        Get ComLoad Of hoJson sTemp1 To iSuccess

        // The responseResult can be "allow", "deny", or "waiting"
        Send ComClear To hoSbResult
        Get pvComObject of hoSbResult to vSbResult
        Get ComStringOfSb Of hoJson "response.result" vSbResult To iSuccess
        Get ComStringOf Of hoJson "response.status" To sResponseStatus
        Get ComStringOf Of hoJson "response.status_msg" To sResponseStatus_msg

        Get ComGetAsString Of hoSbResult To sTemp1
        Showln sTemp1
        Showln sResponseStatus
        Showln sResponseStatus_msg
        Showln ""

        Get ComContentsEqual Of hoSbResult "waiting" True To bTemp1
        If (bTemp1 = True) Begin
            Move (i + 1) To i
        End
        Else Begin
            // Force loop exit..
            Move iMaxWaitIterations To i
        End

    Loop

    Showln "Finished."


End_Procedure