Delphi ActiveX Requires Chilkat v11.0.0+

Duo Auth API - Async Auth

See more Duo Auth MFA Examples

If you enable async, then your application will be able to retrieve real-time status updates from the authentication process, rather than receiving no information until the process is complete. Delphi ActiveX

var
success: Integer;
integrationKey: WideString;
secretKey: WideString;
http: TChilkatHttp;
url: WideString;
req: TChilkatHttpRequest;
resp: TChilkatHttpResponse;
json: TChilkatJsonObject;
txid: WideString;
sbUrl: TChilkatStringBuilder;
url: WideString;
sbResult: TChilkatStringBuilder;
responseStatus: WideString;
responseStatus_msg: WideString;
i: Integer;
maxWaitIterations: Integer;

begin
success := 0;

//  This example assumes the Chilkat API to have been previously unlocked.
//  See Global Unlock Sample for sample code.

integrationKey := 'DIMS3V5QDVG9J9ABRXC4';
secretKey := 'HWVQ46nubLBxhnRlKddTltWIi3hL0fIQF2qTvLab';

http := TChilkatHttp.Create(Self);

http.Accept := 'application/json';

//  Use your own hostname here:
url := 'https://api-a03782e1.duosecurity.com/auth/v2/auth';

//  This example requires Chilkat v9.5.0.89 or greater because Chilkat will automatically
//  generate and send the HMAC signature for the requires based on the integration key and secret key.
http.Login := integrationKey;
http.Password := secretKey;

req := TChilkatHttpRequest.Create(Self);
req.AddParam('username','matt');
req.AddParam('factor','push');
//  The device ID can be obtained from the preauth response.  See Duo Preauth Example
req.AddParam('device','DP6GYVTQ5NK82BMR851F');
//  Add the async param to get an immediate response, then periodically check for updates to find out when the MFA authentication completes for fails.
req.AddParam('async','1');

req.HttpVerb := 'POST';
req.ContentType := 'application/x-www-form-urlencoded';

resp := TChilkatHttpResponse.Create(Self);
success := http.HttpReq(url,req.ControlInterface,resp.ControlInterface);
if (success = 0) then
  begin
    Memo1.Lines.Add(http.LastErrorText);
    Exit;
  end;

Memo1.Lines.Add('status code = ' + IntToStr(resp.StatusCode));

json := TChilkatJsonObject.Create(Self);
success := json.Load(resp.BodyStr);
json.EmitCompact := 0;
Memo1.Lines.Add(json.Emit());

if (resp.StatusCode <> 200) then
  begin
    Exit;
  end;

//  Sample successful output:

//  status code = 200

//  {
//    "stat": "OK",
//    "response": {
//      "txid": "45f7c92b-f45f-4862-8545-e0f58e78075a"
//    }
//  }

txid := json.StringOf('response.txid');

//  Use your own hostname here:
sbUrl := TChilkatStringBuilder.Create(Self);
sbUrl.Append('https://api-a03782e1.duosecurity.com/auth/v2/auth_status?txid=');
sbUrl.Append(txid);
url := sbUrl.GetAsString();

Memo1.Lines.Add('Auth status URL: ' + url);

sbResult := TChilkatStringBuilder.Create(Self);

//  Wait for a response...
i := 0;
maxWaitIterations := 100;
while i < maxWaitIterations do
  begin
    //  Wait 3 seconds.
    http.SleepMs(3000);

    Memo1.Lines.Add('Polling...');

    success := http.HttpNoBody('GET',url,resp.ControlInterface);
    if (success = 0) then
      begin
        Memo1.Lines.Add(http.LastErrorText);
        Exit;
      end;

    if (resp.StatusCode <> 200) then
      begin
        Memo1.Lines.Add('error status code = ' + IntToStr(resp.StatusCode));
        Memo1.Lines.Add(resp.BodyStr);
        Memo1.Lines.Add('Failed.');
        Exit;
      end;

    //  Sample response:

    //  	{
    //  	  "stat": "OK",
    //  	  "response": {
    //  	    "result": "waiting",
    //  	    "status": "pushed",
    //  	    "status_msg": "Pushed a login request to your phone..."
    //  	  }
    //  	}

    json.Load(resp.BodyStr);

    //  The responseResult can be "allow", "deny", or "waiting"
    sbResult.Clear();
    json.StringOfSb('response.result',sbResult.ControlInterface);
    responseStatus := json.StringOf('response.status');
    responseStatus_msg := json.StringOf('response.status_msg');

    Memo1.Lines.Add(sbResult.GetAsString());
    Memo1.Lines.Add(responseStatus);
    Memo1.Lines.Add(responseStatus_msg);
    Memo1.Lines.Add('');

    if (sbResult.ContentsEqual('waiting',1) = 1) then
      begin
        i := i + 1;
      end
    else
      begin
        //  Force loop exit..
        i := maxWaitIterations;
      end;
  end;

Memo1.Lines.Add('Finished.');