Comments (8)
Thanks for the quick reply! Just forwarded to [email protected] with the following message:
Forwarding as requested! We're heavy consumers of the Duo Auth API for out-of-band challenge workflows and it'd be great to support U2F mode on Yubikeys, etc. I assume it'd be kinda tricky given the browser but even some kind of API call to get a one-time redirect URL that handles token activation + redirect would be amazing.
Thanks for being awesome. Please don't stop working hard at Cisco.
from duo_client_python.
I modified viasat/alohomora to add support for U2F using the python-libu2f-host library. Perhaps my modifications can be a building block for this library? The auth API still needs to add support for the U2F challenge, but this does the response with a valid challenge.
from duo_client_python.
Hey Aaron,
Thanks for bringing this to our attention. We're tracking the issue internally now (and hopefully will put in changes soon). Alternatively, you could put in a PR and we'd be happy to take a look at it. :)
Thanks for using Duo!
from duo_client_python.
I'd love to file a PR but there's no public documentation of how to call the Duo API in a way supporting U2F. https://duo.com/docs/authapi
Publish that and I'll do it in a heartbeat! ;-D
from duo_client_python.
Ahh, you're right, my apologies. I've spoken with the rest of the team and it looks like this would be a larger undertaking than I originally thought it would be. It's not currently on our roadmap, but we're certainly open to the possibility of working on it- would you mind contacting us at [email protected] to provide us some more details on what your use case is?
Thanks!
from duo_client_python.
Wanted to follow-up here and see if there were any plans on exposing U2F through the auth API. It's kinda against the spirit of U2F so we'd need some kind of redirect, right?
from duo_client_python.
Hi @rmnoon!
There are sadly no new updates on exposing U2F through the auth API. If you haven't already, please reach out to our support team to add yourself onto the feature request for this. Doing that helps us gauge customer interest and allows us to prioritize new features like this better.
from duo_client_python.
Duo has no plans to add hardware token support to the Auth API at this time.
from duo_client_python.
Related Issues (20)
- Add Support Create Integration for SSO type HOT 5
- Update Admin cannot update the status HOT 1
- Deprecated SSL protocol in CertValidatingHTTPSConnection HOT 4
- Interators not working due to not having metadata populated HOT 5
- 403 Forbidden Access on all methods of Admin API HOT 6
- Duo: no library to generate passcodes HOT 4
- get_authentication_log - api:v2 param filter failing HOT 4
- metadata parse error in add_user_phone HOT 4
- Automatic proxy configuration HOT 2
- get_authentication_log clearing out Params HOT 3
- Add Get User by Email HOT 1
- 400 Bad Request response when trying to add a token for a yubikey HOT 1
- Duo client installed via pip is missing the get_users_by_names func HOT 3
- Getting "Received 429 Too Many Requests" for auth logs even if hitting the API in 6-7 minute intervals
- Getting 40103 on making GET REST API calls HOT 5
- Tests are failing because actual requests are being made HOT 1
- How to use duo_client_python to access an integrations secret key? HOT 2
- next_offset pagination in auth logs HOT 12
- add get auth summary endpoint to the admin object
- bad link in READ.me
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from duo_client_python.