(Visual FoxPro) Duo Auth API - Async Auth

See more Duo Auth MFA Examples

If you enable async, then your application will be able to retrieve real-time status updates from the authentication process, rather than receiving no information until the process is complete.

Note: This example requires Chilkat v9.5.0.89 or greater.

For more information, see https://duo.com/docs/authapi#/auth_status

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

LOCAL lcIntegrationKey
LOCAL lcSecretKey
LOCAL loHttp
LOCAL lcUrl
LOCAL loReq
LOCAL loResp
LOCAL loJson
LOCAL lnSuccess
LOCAL lcTxid
LOCAL loSbUrl
LOCAL loSbResult
LOCAL lcResponseStatus
LOCAL lcResponseStatus_msg
LOCAL i
LOCAL lnMaxWaitIterations

* This example assumes the Chilkat API to have been previously unlocked.
* See Global Unlock Sample for sample code.

lcIntegrationKey = "DIMS3V5QDVG9J9ABRXC4"
lcSecretKey = "HWVQ46nubLBxhnRlKddTltWIi3hL0fIQF2qTvLab"

* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.Http')
loHttp = CreateObject('Chilkat.Http')

loHttp.Accept = "application/json"

* Use your own hostname here:
lcUrl = "https://api-a03782e1.duosecurity.com/auth/v2/auth"

* This example requires Chilkat v9.5.0.89 or greater because Chilkat will automatically
* generate and send the HMAC signature for the requires based on the integration key and secret key.
loHttp.Login = lcIntegrationKey
loHttp.Password = lcSecretKey

* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.HttpRequest')
loReq = CreateObject('Chilkat.HttpRequest')
loReq.AddParam("username","matt")
loReq.AddParam("factor","push")
* The device ID can be obtained from the preauth response.  See Duo Preauth Example
loReq.AddParam("device","DP6GYVTQ5NK82BMR851F")
* Add the async param to get an immediate response, then periodically check for updates to find out when the MFA authentication completes for fails.
loReq.AddParam("async","1")

loResp = loHttp.PostUrlEncoded(lcUrl,loReq)
IF (loHttp.LastMethodSuccess = 0) THEN
    ? loHttp.LastErrorText
    RELEASE loHttp
    RELEASE loReq
    CANCEL
ENDIF

? "status code = " + STR(loResp.StatusCode)

* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.JsonObject')
loJson = CreateObject('Chilkat.JsonObject')
lnSuccess = loJson.Load(loResp.BodyStr)
loJson.EmitCompact = 0
? loJson.Emit()

IF (loResp.StatusCode <> 200) THEN
    RELEASE loResp
    RELEASE loHttp
    RELEASE loReq
    RELEASE loJson
    CANCEL
ENDIF

* Sample successful output:

* status code = 200

* {
*   "stat": "OK",
*   "response": {
*     "txid": "45f7c92b-f45f-4862-8545-e0f58e78075a"
*   }
* }

lcTxid = loJson.StringOf("response.txid")
RELEASE loResp

* Use your own hostname here:
* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.StringBuilder')
loSbUrl = CreateObject('Chilkat.StringBuilder')
loSbUrl.Append("https://api-a03782e1.duosecurity.com/auth/v2/auth_status?txid=")
loSbUrl.Append(lcTxid)

? "Auth status URL: " + loSbUrl.GetAsString()

* For versions of Chilkat < 10.0.0, use CreateObject('Chilkat_9_5_0.StringBuilder')
loSbResult = CreateObject('Chilkat.StringBuilder')

* Wait for a response...
i = 0
lnMaxWaitIterations = 100
DO WHILE i < lnMaxWaitIterations
    * Wait 3 seconds.
    loHttp.SleepMs(3000)

    ? "Polling..."

    loResp = loHttp.QuickRequest("GET",loSbUrl.GetAsString())
    IF (loHttp.LastMethodSuccess = 0) THEN
        ? loHttp.LastErrorText
        RELEASE loHttp
        RELEASE loReq
        RELEASE loJson
        RELEASE loSbUrl
        RELEASE loSbResult
        CANCEL
    ENDIF

    IF (loResp.StatusCode <> 200) THEN
        ? "error status code = " + STR(loResp.StatusCode)
        ? loResp.BodyStr
        ? "Failed."
        RELEASE loResp
        RELEASE loHttp
        RELEASE loReq
        RELEASE loJson
        RELEASE loSbUrl
        RELEASE loSbResult
        CANCEL
    ENDIF

    * Sample response:

    * 	{
    * 	  "stat": "OK",
    * 	  "response": {
    * 	    "result": "waiting",
    * 	    "status": "pushed",
    * 	    "status_msg": "Pushed a login request to your phone..."
    * 	  }
    * 	}

    loJson.Load(loResp.BodyStr)

    * The responseResult can be "allow", "deny", or "waiting"
    loSbResult.Clear()
    loJson.StringOfSb("response.result",loSbResult)
    lcResponseStatus = loJson.StringOf("response.status")
    lcResponseStatus_msg = loJson.StringOf("response.status_msg")

    ? loSbResult.GetAsString()
    ? lcResponseStatus
    ? lcResponseStatus_msg
    ? ""

    RELEASE loResp

    IF (loSbResult.ContentsEqual("waiting",1) = 1) THEN
        i = i + 1
    ELSE
        * Force loop exit..
        i = lnMaxWaitIterations
    ENDIF

ENDDO

? "Finished."

RELEASE loHttp
RELEASE loReq
RELEASE loJson
RELEASE loSbUrl
RELEASE loSbResult