(DataFlex) Duo Auth API - Async Auth

See more Duo Auth MFA Examples

If you enable async, then your application will be able to retrieve real-time status updates from the authentication process, rather than receiving no information until the process is complete.

Note: This example requires Chilkat v9.5.0.89 or greater.

For more information, see https://duo.com/docs/authapi#/auth_status

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

Use ChilkatAx-win32.pkg

Procedure Test
    String sIntegrationKey
    String sSecretKey
    Handle hoHttp
    String sUrl
    Variant vReq
    Handle hoReq
    Variant vResp
    Handle hoResp
    Handle hoJson
    Boolean iSuccess
    String sTxid
    Handle hoSbUrl
    Variant vSbResult
    Handle hoSbResult
    String sResponseStatus
    String sResponseStatus_msg
    Integer i
    Integer iMaxWaitIterations
    String sTemp1
    Integer iTemp1
    Boolean bTemp1

    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    Move "DIMS3V5QDVG9J9ABRXC4" To sIntegrationKey
    Move "HWVQ46nubLBxhnRlKddTltWIi3hL0fIQF2qTvLab" To sSecretKey

    Get Create (RefClass(cComChilkatHttp)) To hoHttp
    If (Not(IsComObjectCreated(hoHttp))) Begin
        Send CreateComObject of hoHttp
    End

    Set ComAccept Of hoHttp To "application/json"

    // Use your own hostname here:
    Move "https://api-a03782e1.duosecurity.com/auth/v2/auth" To sUrl

    // This example requires Chilkat v9.5.0.89 or greater because Chilkat will automatically
    // generate and send the HMAC signature for the requires based on the integration key and secret key.
    Set ComLogin Of hoHttp To sIntegrationKey
    Set ComPassword Of hoHttp To sSecretKey

    Get Create (RefClass(cComChilkatHttpRequest)) To hoReq
    If (Not(IsComObjectCreated(hoReq))) Begin
        Send CreateComObject of hoReq
    End
    Send ComAddParam To hoReq "username" "matt"
    Send ComAddParam To hoReq "factor" "push"
    // The device ID can be obtained from the preauth response.  See Duo Preauth Example
    Send ComAddParam To hoReq "device" "DP6GYVTQ5NK82BMR851F"
    // Add the async param to get an immediate response, then periodically check for updates to find out when the MFA authentication completes for fails.
    Send ComAddParam To hoReq "async" "1"

    Get pvComObject of hoReq to vReq
    Get ComPostUrlEncoded Of hoHttp sUrl vReq To vResp
    If (IsComObject(vResp)) Begin
        Get Create (RefClass(cComChilkatHttpResponse)) To hoResp
        Set pvComObject Of hoResp To vResp
    End
    Get ComLastMethodSuccess Of hoHttp To bTemp1
    If (bTemp1 = False) Begin
        Get ComLastErrorText Of hoHttp To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    Get ComStatusCode Of hoResp To iTemp1
    Showln "status code = " iTemp1

    Get Create (RefClass(cComChilkatJsonObject)) To hoJson
    If (Not(IsComObjectCreated(hoJson))) Begin
        Send CreateComObject of hoJson
    End
    Get ComBodyStr Of hoResp To sTemp1
    Get ComLoad Of hoJson sTemp1 To iSuccess
    Set ComEmitCompact Of hoJson To False
    Get ComEmit Of hoJson To sTemp1
    Showln sTemp1

    Get ComStatusCode Of hoResp To iTemp1
    If (iTemp1 <> 200) Begin
        Send Destroy of hoResp
        Procedure_Return
    End

    // Sample successful output:

    // status code = 200

    // {
    //   "stat": "OK",
    //   "response": {
    //     "txid": "45f7c92b-f45f-4862-8545-e0f58e78075a"
    //   }
    // }

    Get ComStringOf Of hoJson "response.txid" To sTxid
    Send Destroy of hoResp

    // Use your own hostname here:
    Get Create (RefClass(cComChilkatStringBuilder)) To hoSbUrl
    If (Not(IsComObjectCreated(hoSbUrl))) Begin
        Send CreateComObject of hoSbUrl
    End
    Get ComAppend Of hoSbUrl "https://api-a03782e1.duosecurity.com/auth/v2/auth_status?txid=" To iSuccess
    Get ComAppend Of hoSbUrl sTxid To iSuccess

    Get ComGetAsString Of hoSbUrl To sTemp1
    Showln "Auth status URL: " sTemp1

    Get Create (RefClass(cComChilkatStringBuilder)) To hoSbResult
    If (Not(IsComObjectCreated(hoSbResult))) Begin
        Send CreateComObject of hoSbResult
    End

    // Wait for a response...
    Move 0 To i
    Move 100 To iMaxWaitIterations
    While (i < iMaxWaitIterations)
        // Wait 3 seconds.
        Send ComSleepMs To hoHttp 3000

        Showln "Polling..."

        Get ComGetAsString Of hoSbUrl To sTemp1
        Get ComQuickRequest Of hoHttp "GET" sTemp1 To vResp
        If (IsComObject(vResp)) Begin
            Get Create (RefClass(cComChilkatHttpResponse)) To hoResp
            Set pvComObject Of hoResp To vResp
        End
        Get ComLastMethodSuccess Of hoHttp To bTemp1
        If (bTemp1 = False) Begin
            Get ComLastErrorText Of hoHttp To sTemp1
            Showln sTemp1
            Procedure_Return
        End

        Get ComStatusCode Of hoResp To iTemp1
        If (iTemp1 <> 200) Begin
            Get ComStatusCode Of hoResp To iTemp1
            Showln "error status code = " iTemp1
            Get ComBodyStr Of hoResp To sTemp1
            Showln sTemp1
            Showln "Failed."
            Send Destroy of hoResp
            Procedure_Return
        End

        // Sample response:

        // 	{
        // 	  "stat": "OK",
        // 	  "response": {
        // 	    "result": "waiting",
        // 	    "status": "pushed",
        // 	    "status_msg": "Pushed a login request to your phone..."
        // 	  }
        // 	}

        Get ComBodyStr Of hoResp To sTemp1
        Get ComLoad Of hoJson sTemp1 To iSuccess

        // The responseResult can be "allow", "deny", or "waiting"
        Send ComClear To hoSbResult
        Get pvComObject of hoSbResult to vSbResult
        Get ComStringOfSb Of hoJson "response.result" vSbResult To iSuccess
        Get ComStringOf Of hoJson "response.status" To sResponseStatus
        Get ComStringOf Of hoJson "response.status_msg" To sResponseStatus_msg

        Get ComGetAsString Of hoSbResult To sTemp1
        Showln sTemp1
        Showln sResponseStatus
        Showln sResponseStatus_msg
        Showln ""

        Send Destroy of hoResp

        Get ComContentsEqual Of hoSbResult "waiting" True To bTemp1
        If (bTemp1 = True) Begin
            Move (i + 1) To i
        End
        Else Begin
            // Force loop exit..
            Move iMaxWaitIterations To i
        End

    Loop

    Showln "Finished."


End_Procedure