(PHP Extension) Duo Auth API - Async Auth

See more Duo Auth MFA Examples

If you enable async, then your application will be able to retrieve real-time status updates from the authentication process, rather than receiving no information until the process is complete.

Note: This example requires Chilkat v9.5.0.89 or greater.

For more information, see https://duo.com/docs/authapi#/auth_status

Chilkat PHP Downloads PHP Extension for Windows, Linux, MacOS, Alpine Linux, Solaris

<?php

// The version number (9_5_0) should match version of the Chilkat extension used, omitting the micro-version number.
// For example, if using Chilkat v9.5.0.48, then include as shown here:
include("chilkat_9_5_0.php");

// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

$integrationKey = 'DIMS3V5QDVG9J9ABRXC4';
$secretKey = 'HWVQ46nubLBxhnRlKddTltWIi3hL0fIQF2qTvLab';

$http = new CkHttp();

$http->put_Accept('application/json');

// Use your own hostname here:
$url = 'https://api-a03782e1.duosecurity.com/auth/v2/auth';

// This example requires Chilkat v9.5.0.89 or greater because Chilkat will automatically
// generate and send the HMAC signature for the requires based on the integration key and secret key.
$http->put_Login($integrationKey);
$http->put_Password($secretKey);

$req = new CkHttpRequest();
$req->AddParam('username','matt');
$req->AddParam('factor','push');
// The device ID can be obtained from the preauth response.  See Duo Preauth Example
$req->AddParam('device','DP6GYVTQ5NK82BMR851F');
// Add the async param to get an immediate response, then periodically check for updates to find out when the MFA authentication completes for fails.
$req->AddParam('async','1');

// resp is a CkHttpResponse
$resp = $http->PostUrlEncoded($url,$req);
if ($http->get_LastMethodSuccess() == false) {
    print $http->lastErrorText() . "\n";
    exit;
}

print 'status code = ' . $resp->get_StatusCode() . "\n";

$json = new CkJsonObject();
$success = $json->Load($resp->bodyStr());
$json->put_EmitCompact(false);
print $json->emit() . "\n";

if ($resp->get_StatusCode() != 200) {

    exit;
}

// Sample successful output:

// status code = 200

// {
//   "stat": "OK",
//   "response": {
//     "txid": "45f7c92b-f45f-4862-8545-e0f58e78075a"
//   }
// }

$txid = $json->stringOf('response.txid');

// Use your own hostname here:
$sbUrl = new CkStringBuilder();
$sbUrl->Append('https://api-a03782e1.duosecurity.com/auth/v2/auth_status?txid=');
$sbUrl->Append($txid);

print 'Auth status URL: ' . $sbUrl->getAsString() . "\n";

$sbResult = new CkStringBuilder();

// Wait for a response...
$i = 0;
$maxWaitIterations = 100;
while ($i < $maxWaitIterations) {
    // Wait 3 seconds.
    $http->SleepMs(3000);

    print 'Polling...' . "\n";

    // resp is a CkHttpResponse
    $resp = $http->QuickRequest('GET',$sbUrl->getAsString());
    if ($http->get_LastMethodSuccess() == false) {
        print $http->lastErrorText() . "\n";
        exit;
    }

    if ($resp->get_StatusCode() != 200) {
        print 'error status code = ' . $resp->get_StatusCode() . "\n";
        print $resp->bodyStr() . "\n";
        print 'Failed.' . "\n";

        exit;
    }

    // Sample response:

    // 	{
    // 	  "stat": "OK",
    // 	  "response": {
    // 	    "result": "waiting",
    // 	    "status": "pushed",
    // 	    "status_msg": "Pushed a login request to your phone..."
    // 	  }
    // 	}

    $json->Load($resp->bodyStr());

    // The responseResult can be "allow", "deny", or "waiting"
    $sbResult->Clear();
    $json->StringOfSb('response.result',$sbResult);
    $responseStatus = $json->stringOf('response.status');
    $responseStatus_msg = $json->stringOf('response.status_msg');

    print $sbResult->getAsString() . "\n";
    print $responseStatus . "\n";
    print $responseStatus_msg . "\n";
    print '' . "\n";

    if ($sbResult->ContentsEqual('waiting',true) == true) {
        $i = $i + 1;
    }
    else {
        // Force loop exit..
        $i = $maxWaitIterations;
    }

}

print 'Finished.' . "\n";

?>