51 lines
1.9 KiB
ReStructuredText
51 lines
1.9 KiB
ReStructuredText
REST Second Factor
|
|
==================
|
|
|
|
This plugin can be used to append a second factor authentication device
|
|
like SMS or OTP. It uses an external web service to submit and validate
|
|
the second factor.
|
|
|
|
Configuration
|
|
~~~~~~~~~~~~~
|
|
|
|
All parameters are set in "General Parameters » Portal Parameters »
|
|
Second Factors » REST 2nd Factor".
|
|
|
|
- **Activation**
|
|
- **Init URL** *(optional)*: REST URL to initialize dialog *(send
|
|
OTP)*. Leave it blank if your API doesn't need any initialization
|
|
- **Init arguments**: list of arguments to send *(see below)*
|
|
- **Verify URL** *(required)*: REST URL to verify code
|
|
- **Verify arguments**: list of arguments to send *(see below)*
|
|
- **Authentication level** (Optional): if you want to overwrite the
|
|
value sent by your authentication module, you can define here the new
|
|
authentication level. Example: 5
|
|
- **Label** (Optional): label that should be displayed to the user on
|
|
the choice screen
|
|
- **Logo** (Optional): logo file *(in static/<skin> directory)*
|
|
|
|
Arguments
|
|
---------
|
|
|
|
Arguments are a list of key/value. Key is the name of JSON entry, value
|
|
is attribute or macro name.
|
|
|
|
|
|
.. attention::
|
|
|
|
For Verify URL, you should send ``$code`` at least
|
|
|
|
REST Dialog
|
|
-----------
|
|
|
|
REST web services have just to reply with a "result" key in a JSON file.
|
|
Auth/UserDB can add an "info" array. It will be stored in session data
|
|
(without reading "Exported variables").
|
|
|
|
========== ================================================ ====================================
|
|
URL Query Response
|
|
========== ================================================ ====================================
|
|
Init URL JSON file: ``{"user":$user,...}`` JSON file: ``{"result":true/false}``
|
|
Verify URL JSON file: ``{"user":$user,"code":"$code",...}`` JSON file: ``{"result":true/false}``
|
|
========== ================================================ ====================================
|