Enable Duo MFA login

nulib · Jun 21, 2024 · bfee886 · bfee886
1 parent 70bb617
commit bfee886
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/lib/ueberauth/strategy/nusso/api.ex b/lib/ueberauth/strategy/nusso/api.ex
@@ -8,14 +8,14 @@ defmodule Ueberauth.Strategy.NuSSO.API do
 
   @doc "Returns the URL to the NuSSO server's login page"
   def login_url(callback) do
-    with {:ok, response} <- get("get-ldap-redirect-url", goto: callback) do
+    with {:ok, response} <- get("get-ldap-duo-redirect-url", goto: callback) do
       response |> Map.get(:redirecturl)
     end
   end
 
   @doc "Redeem an NuSSO SSO Token for the user attributes"
   def redeem_token(token) do
-    case get("validateWebSSOToken", webssotoken: token) do
+    case get("validateWebSSOToken", webssotoken: token, requiresMFA: true) do
       {:ok, %{netid: netid}} ->
         if settings(:include_attributes, false),
           do: get_directory_attributes(token, %{uid: netid}),

diff --git a/test/support/mock_endpoint.ex b/test/support/mock_endpoint.ex
@@ -13,7 +13,7 @@ defmodule Ueberauth.NuSSO.MockEndpoint do
   """
   @redirecturl "https://test-nusso.example.edu/nusso/XUI/?#login&realm=test&authIndexType=service&service=ldap-registry"
 
-  def get("#{@base_url}/get-ldap-redirect-url", headers) do
+  def get("#{@base_url}/get-ldap-duo-redirect-url", headers) do
     with goto <- headers |> Enum.into(%{}) |> Map.get("goto"),
          url <- [@redirecturl, "goto=#{goto}"] |> Enum.join("&") do
       send_headers(headers)