using duo as remediation

okta · Nov 23, 2023 · e6063a9 · e6063a9
1 parent ec89516
commit e6063a9
Show file tree

Hide file tree

Showing 4 changed files with 24 additions and 4 deletions.
diff --git a/Sources/OktaIdx/Capabilities/IDXCapability.swift b/Sources/OktaIdx/Capabilities/IDXCapability.swift
@@ -96,4 +96,7 @@ extension Remediation: CapabilityCollection {
     ///
     /// This value will only be present for social IDP remediation options, and will otherwise be `nil`.
     public var socialIdp: Capability.SocialIDP? { capability(Capability.SocialIDP.self) }
+
+    /// This value will only be present for Duo MFA,  otherwise will be `nil`.
+    public var duo: Capability.Duo? { capability(Capability.Duo.self) }
 }
diff --git a/Sources/OktaIdx/Capabilities/IDXDuoCapability.swift b/Sources/OktaIdx/Capabilities/IDXDuoCapability.swift
@@ -9,9 +9,11 @@ import Foundation
 
 extension Capability {
     /// Capability to access data related to Duo
-    public struct Duo: AuthenticatorCapability {
+    public struct Duo: AuthenticatorCapability,RemediationCapability {
         public let host: String
         public let signedToken: String
         public let script: String
+
+        let answerField: Remediation.Form.Field?
     }
 }
diff --git a/Sources/OktaIdx/IDXForm.swift b/Sources/OktaIdx/IDXForm.swift
@@ -33,7 +33,7 @@ extension Remediation {
 
         /// The array of ordered user-visible fields within this form. Each field may also contain nested forms for collections of related fields.
         public let fields: [Field]
-        public let hiddenFields: [Field]
+        let hiddenFields: [Field]
         let allFields: [Field]
 
         init?(fields: [Field]?) {

diff --git a/...ktaIdx/Internal/Implementations/Version1/Responses/IDXClient+V1ResponseConstructors.swift b/...ktaIdx/Internal/Implementations/Version1/Responses/IDXClient+V1ResponseConstructors.swift
@@ -370,7 +370,21 @@ extension Capability.Duo {
         else {
             return nil
         }
-        self.init(host: host, signedToken: signedToken, script: script)
+        self.init(host: host, signedToken: signedToken, script: script, answerField: nil)
+    }
+
+    init?(form: Remediation.Form, object: IonForm) {
+        let type = Remediation.RemediationType(string: object.name)
+        guard type == .challengeAuthenticator else { // TODO: Find more ways to check this is Duo
+            return nil
+        }
+
+        let field = form.hiddenFields.first
+        self.init(host: "", signedToken: "", script: "", answerField: field)
+    }
+
+    func send(signature data:String) {
+        answerField?.value = data
     }
 }
 
@@ -472,7 +486,8 @@ extension Remediation {
 
         let capabilities: [RemediationCapability?] = createCapabilities ? [
             Capability.SocialIDP(flow: flow, ion: object),
-            Capability.Pollable(flow: flow, ion: object)
+            Capability.Pollable(flow: flow, ion: object),
+            Capability.Duo(form: form, object: object)
         ] : []
 
         return Remediation(flow: flow,