(Delphi DLL) Duo Auth API - Auth

See more Duo Auth MFA Examples

The /auth endpoint performs second-factor authentication for a user by sending a push notification to the user's smartphone app, verifying a passcode, or placing a phone call. It is also used to send the user a new batch of passcodes via SMS.

Note: This example requires Chilkat v9.5.0.89 or greater.

For more information, see https://duo.com/docs/authapi#/auth

Chilkat for Delphi Downloads Chilkat non-ActiveX DLL for Delphi Chilkat ActiveX DLL for Delphi * The examples here use the non-ActiveX DLL.

uses
    Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics,
    Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, Http, HttpRequest, HttpResponse, JsonObject;

...

procedure TForm1.Button1Click(Sender: TObject);
var
integrationKey: PWideChar;
secretKey: PWideChar;
http: HCkHttp;
url: PWideChar;
req: HCkHttpRequest;
resp: HCkHttpResponse;
json: HCkJsonObject;
success: Boolean;
responseResult: PWideChar;
responseStatus: PWideChar;
responseStatus_msg: PWideChar;
stat: PWideChar;

begin
// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

integrationKey := 'DIMS3V5QDVG9J9ABRXC4';
secretKey := 'HWVQ46nubLBxhnRlKddTltWIi3hL0fIQF2qTvLab';

http := CkHttp_Create();

CkHttp_putAccept(http,'application/json');

// Use your own hostname here:
url := 'https://api-a03782e1.duosecurity.com/auth/v2/auth';

// This example requires Chilkat v9.5.0.89 or greater because Chilkat will automatically
// generate and send the HMAC signature for the requires based on the integration key and secret key.
CkHttp_putLogin(http,integrationKey);
CkHttp_putPassword(http,secretKey);

req := CkHttpRequest_Create();
CkHttpRequest_AddParam(req,'username','matt');
CkHttpRequest_AddParam(req,'factor','push');
// The device ID can be obtained from the preauth response.  See Duo Preauth Example
CkHttpRequest_AddParam(req,'device','DP6GYVTQ5NK82BMR851F');

resp := CkHttp_PostUrlEncoded(http,url,req);
if (CkHttp_getLastMethodSuccess(http) = False) then
  begin
    Memo1.Lines.Add(CkHttp__lastErrorText(http));
    Exit;
  end;

Memo1.Lines.Add('status code = ' + IntToStr(CkHttpResponse_getStatusCode(resp)));

json := CkJsonObject_Create();
success := CkJsonObject_Load(json,CkHttpResponse__bodyStr(resp));
CkJsonObject_putEmitCompact(json,False);
Memo1.Lines.Add(CkJsonObject__emit(json));

CkHttpResponse_Dispose(resp);

// Sample successful output:

// status code = 200

// {
//   "response": {
//     "result": "allow",
//     "status": "allow",
//     "status_msg": "Success. Logging you in..."
//   },
//   "stat": "OK"
// }

// Sample code to parse the above JSON response..

// Use this online tool to generate parsing code from sample JSON: 
// Generate Parsing Code from JSON

responseResult := CkJsonObject__stringOf(json,'response.result');
responseStatus := CkJsonObject__stringOf(json,'response.status');
responseStatus_msg := CkJsonObject__stringOf(json,'response.status_msg');
stat := CkJsonObject__stringOf(json,'stat');

CkHttp_Dispose(http);
CkHttpRequest_Dispose(req);
CkJsonObject_Dispose(json);

end;