(Tcl) Duo Auth API - Preauth

See more Duo Auth MFA Examples

The /preauth endpoint determines whether a user is authorized to log in, and (if so) returns the user's available authentication factors.

Note: This example requires Chilkat v9.5.0.89 or greater.

For more information, see https://duo.com/docs/authapi#/preauth

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

# This example assumes the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

set integrationKey "DIMS3V5QDVG9J9ABRXC4"
set secretKey "HWVQ46nubLBxhnRlKddTltWIi3hL0fIQF2qTvLab"

set http [new_CkHttp]

CkHttp_put_Accept $http "application/json"

# Use your own hostname here:
set url "https://api-a03782e1.duosecurity.com/auth/v2/preauth"

# This example requires Chilkat v9.5.0.89 or greater because Chilkat will automatically
# generate and send the HMAC signature for the requires based on the integration key and secret key.
CkHttp_put_Login $http $integrationKey
CkHttp_put_Password $http $secretKey

set req [new_CkHttpRequest]

CkHttpRequest_AddParam $req "username" "matt"

# resp is a CkHttpResponse
set resp [CkHttp_PostUrlEncoded $http $url $req]
if {[CkHttp_get_LastMethodSuccess $http] == 0} then {
    puts [CkHttp_lastErrorText $http]
    delete_CkHttp $http
    delete_CkHttpRequest $req
    exit
}

puts "status code = [CkHttpResponse_get_StatusCode $resp]"

set json [new_CkJsonObject]

set success [CkJsonObject_Load $json [CkHttpResponse_bodyStr $resp]]
CkJsonObject_put_EmitCompact $json 0
puts [CkJsonObject_emit $json]

delete_CkHttpResponse $resp

# Sample successful output:

# status code = 200

# {
#   "response": {
#     "devices": [
#       {
#         "capabilities": [
#           "auto",
#           "push",
#           "sms",
#           "mobile_otp"
#         ],
#         "device": "DP6GYVTQ5NK82BMR851F",
#         "display_name": "iOS (XXX-XXX-1871)",
#         "name": "",
#         "number": "XXX-XXX-1871",
#         "type": "phone"
#       }
#     ],
#     "result": "auth",
#     "status_msg": "Account is active"
#   },
#   "stat": "OK"
# }

# Sample code to parse the above JSON response..

# Use this online tool to generate parsing code from sample JSON: 
# Generate Parsing Code from JSON

set responseResult [CkJsonObject_stringOf $json "response.result"]
set responseStatus_msg [CkJsonObject_stringOf $json "response.status_msg"]
set stat [CkJsonObject_stringOf $json "stat"]
set i 0
set count_i [CkJsonObject_SizeOfArray $json "response.devices"]
while {$i < $count_i} {
    CkJsonObject_put_I $json $i
    set device [CkJsonObject_stringOf $json "response.devices[i].device"]
    set display_name [CkJsonObject_stringOf $json "response.devices[i].display_name"]
    set name [CkJsonObject_stringOf $json "response.devices[i].name"]
    set number [CkJsonObject_stringOf $json "response.devices[i].number"]
    set v_type [CkJsonObject_stringOf $json "response.devices[i].type"]
    set j 0
    set count_j [CkJsonObject_SizeOfArray $json "response.devices[i].capabilities"]
    while {$j < $count_j} {
        CkJsonObject_put_J $json $j
        set strVal [CkJsonObject_stringOf $json "response.devices[i].capabilities[j]"]
        set j [expr $j + 1]
    }
    set i [expr $i + 1]
}

delete_CkHttp $http
delete_CkHttpRequest $req
delete_CkJsonObject $json