(Delphi DLL) Duo Auth API - Async Auth

See more Duo Auth MFA Examples

If you enable async, then your application will be able to retrieve real-time status updates from the authentication process, rather than receiving no information until the process is complete.

Note: This example requires Chilkat v9.5.0.89 or greater.

For more information, see https://duo.com/docs/authapi#/auth_status

Chilkat for Delphi Downloads Chilkat non-ActiveX DLL for Delphi Chilkat ActiveX DLL for Delphi * The examples here use the non-ActiveX DLL.

uses
    Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics,
    Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, Http, HttpRequest, StringBuilder, HttpResponse, JsonObject;

...

procedure TForm1.Button1Click(Sender: TObject);
var
integrationKey: PWideChar;
secretKey: PWideChar;
http: HCkHttp;
url: PWideChar;
req: HCkHttpRequest;
resp: HCkHttpResponse;
json: HCkJsonObject;
success: Boolean;
txid: PWideChar;
sbUrl: HCkStringBuilder;
sbResult: HCkStringBuilder;
responseStatus: PWideChar;
responseStatus_msg: PWideChar;
i: Integer;
maxWaitIterations: Integer;

begin
// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

integrationKey := 'DIMS3V5QDVG9J9ABRXC4';
secretKey := 'HWVQ46nubLBxhnRlKddTltWIi3hL0fIQF2qTvLab';

http := CkHttp_Create();

CkHttp_putAccept(http,'application/json');

// Use your own hostname here:
url := 'https://api-a03782e1.duosecurity.com/auth/v2/auth';

// This example requires Chilkat v9.5.0.89 or greater because Chilkat will automatically
// generate and send the HMAC signature for the requires based on the integration key and secret key.
CkHttp_putLogin(http,integrationKey);
CkHttp_putPassword(http,secretKey);

req := CkHttpRequest_Create();
CkHttpRequest_AddParam(req,'username','matt');
CkHttpRequest_AddParam(req,'factor','push');
// The device ID can be obtained from the preauth response.  See Duo Preauth Example
CkHttpRequest_AddParam(req,'device','DP6GYVTQ5NK82BMR851F');
// Add the async param to get an immediate response, then periodically check for updates to find out when the MFA authentication completes for fails.
CkHttpRequest_AddParam(req,'async','1');

resp := CkHttp_PostUrlEncoded(http,url,req);
if (CkHttp_getLastMethodSuccess(http) = False) then
  begin
    Memo1.Lines.Add(CkHttp__lastErrorText(http));
    Exit;
  end;

Memo1.Lines.Add('status code = ' + IntToStr(CkHttpResponse_getStatusCode(resp)));

json := CkJsonObject_Create();
success := CkJsonObject_Load(json,CkHttpResponse__bodyStr(resp));
CkJsonObject_putEmitCompact(json,False);
Memo1.Lines.Add(CkJsonObject__emit(json));

if (CkHttpResponse_getStatusCode(resp) <> 200) then
  begin
    CkHttpResponse_Dispose(resp);
    Exit;
  end;

// Sample successful output:

// status code = 200

// {
//   "stat": "OK",
//   "response": {
//     "txid": "45f7c92b-f45f-4862-8545-e0f58e78075a"
//   }
// }

txid := CkJsonObject__stringOf(json,'response.txid');
CkHttpResponse_Dispose(resp);

// Use your own hostname here:
sbUrl := CkStringBuilder_Create();
CkStringBuilder_Append(sbUrl,'https://api-a03782e1.duosecurity.com/auth/v2/auth_status?txid=');
CkStringBuilder_Append(sbUrl,txid);

Memo1.Lines.Add('Auth status URL: ' + CkStringBuilder__getAsString(sbUrl));

sbResult := CkStringBuilder_Create();

// Wait for a response...
i := 0;
maxWaitIterations := 100;
while i < maxWaitIterations do
  begin
    // Wait 3 seconds.
    CkHttp_SleepMs(http,3000);

    Memo1.Lines.Add('Polling...');

    resp := CkHttp_QuickRequest(http,'GET',CkStringBuilder__getAsString(sbUrl));
    if (CkHttp_getLastMethodSuccess(http) = False) then
      begin
        Memo1.Lines.Add(CkHttp__lastErrorText(http));
        Exit;
      end;

    if (CkHttpResponse_getStatusCode(resp) <> 200) then
      begin
        Memo1.Lines.Add('error status code = ' + IntToStr(CkHttpResponse_getStatusCode(resp)));
        Memo1.Lines.Add(CkHttpResponse__bodyStr(resp));
        Memo1.Lines.Add('Failed.');
        CkHttpResponse_Dispose(resp);
        Exit;
      end;

    // Sample response:

    // 	{
    // 	  "stat": "OK",
    // 	  "response": {
    // 	    "result": "waiting",
    // 	    "status": "pushed",
    // 	    "status_msg": "Pushed a login request to your phone..."
    // 	  }
    // 	}

    CkJsonObject_Load(json,CkHttpResponse__bodyStr(resp));

    // The responseResult can be "allow", "deny", or "waiting"
    CkStringBuilder_Clear(sbResult);
    CkJsonObject_StringOfSb(json,'response.result',sbResult);
    responseStatus := CkJsonObject__stringOf(json,'response.status');
    responseStatus_msg := CkJsonObject__stringOf(json,'response.status_msg');

    Memo1.Lines.Add(CkStringBuilder__getAsString(sbResult));
    Memo1.Lines.Add(responseStatus);
    Memo1.Lines.Add(responseStatus_msg);
    Memo1.Lines.Add('');

    CkHttpResponse_Dispose(resp);

    if (CkStringBuilder_ContentsEqual(sbResult,'waiting',True) = True) then
      begin
        i := i + 1;
      end
    else
      begin
        // Force loop exit..
        i := maxWaitIterations;
      end;
  end;

Memo1.Lines.Add('Finished.');

CkHttp_Dispose(http);
CkHttpRequest_Dispose(req);
CkJsonObject_Dispose(json);
CkStringBuilder_Dispose(sbUrl);
CkStringBuilder_Dispose(sbResult);

end;