Skip to content

Instantly share code, notes, and snippets.

@robwilkerson
Created April 10, 2017 18:31
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save robwilkerson/e3dd94bf336fe588ab9585e2ef7ee0db to your computer and use it in GitHub Desktop.
Save robwilkerson/e3dd94bf336fe588ab9585e2ef7ee0db to your computer and use it in GitHub Desktop.
The stages of what I'm seeing
// response body from calling /login
{
"message":"Credentials verified. Please send MFA request.",
"data":{
"factors":{
"1f7973e8-0f06-417a-b040-2ad0c863d20c":{
"id":"1f7973e8-0f06-417a-b040-2ad0c863d20c","type":"call","profile":{"phoneNumber":"+1 XXX-XXX-1069"}
},
"b43ac673-464a-4f07-9e2a-024351e247f9":{
"id":"b43ac673-464a-4f07-9e2a-024351e247f9","type":"sms","profile":{"phoneNumber":"+1 XXX-XXX-1069"}
}
}
},
"auth":{
"type":"Bearer-Interim",
"token":"2d5b5229-3637-4f7e-958a-0900b872d0d3",
"text":"Bearer-Interim 2d5b5229-3637-4f7e-958a-0900b872d0d3"
},
"loginStatus":"MFA_REQUIRED"
}
// request.oktaState when calling /mfa-request
// notice that the internal factor ids align with the response from /login above.
OktaState {
factorResult: undefined,
factorType: undefined,
fullResponse:
{ stateToken: '00hHCRMaqU-MwINTH3g3iDkZhQq7lay9Z5klI0_E7M',
expiresAt: '2017-04-10T18:26:15.000Z',
status: 'MFA_REQUIRED',
_embedded: [Object],
_links: [Object] },
userId: undefined,
loginStatus: 'MFA_REQUIRED',
oktaStateToken: '00hHCRMaqU-MwINTH3g3iDkZhQq7lay9Z5klI0_E7M',
oktaSessionToken: undefined,
recoveryType: undefined,
relayState: undefined,
user:
{ id: '00u6t5xm3eAXN9xOO296',
passwordChanged: '2017-03-20T18:32:06.000Z',
profile: [Object] },
profile:
{ login: 'rob@adhocteam.us',
firstName: 'Rob',
lastName: 'Wilkerson',
locale: 'en',
timeZone: 'America/Los_Angeles' },
factors: [ [Object], [Object] ],
externalFactorTable:
{ '1f7973e8-0f06-417a-b040-2ad0c863d20c': [Object],
'b43ac673-464a-4f07-9e2a-024351e247f9': [Object] },
factorTable:
{ '1f7973e8-0f06-417a-b040-2ad0c863d20c': [Object],
'b43ac673-464a-4f07-9e2a-024351e247f9': [Object] },
reverseFactorLookupTable:
{ clf80pjnfReWBKVfj296: '1f7973e8-0f06-417a-b040-2ad0c863d20c',
sms80gqqvKicHagkE296: 'b43ac673-464a-4f07-9e2a-024351e247f9' } },
factor:
{ id: 'sms80gqqvKicHagkE296',
factorType: 'sms',
provider: 'OKTA',
vendorName: 'OKTA',
profile: { phoneNumber: '+1 XXX-XXX-1069' },
_links: { verify: [Object] } } }
// During that request, when the actual Okta request is made,
// this is the okta state upon return
OktaState {
factorResult: undefined,
factorType: undefined,
fullResponse:
{ stateToken: '00hHCRMaqU-MwINTH3g3iDkZhQq7lay9Z5klI0_E7M',
expiresAt: '2017-04-10T18:26:31.000Z',
status: 'MFA_CHALLENGE',
_embedded: { user: [Object], factor: [Object], policy: [Object] },
_links:
{ next: [Object],
cancel: [Object],
prev: [Object],
resend: [Object] } },
userId: undefined,
loginStatus: 'MFA_CHALLENGE',
oktaStateToken: '00hHCRMaqU-MwINTH3g3iDkZhQq7lay9Z5klI0_E7M',
oktaSessionToken: undefined,
recoveryType: undefined,
relayState: undefined,
user:
{ id: '00u6t5xm3eAXN9xOO296',
passwordChanged: '2017-03-20T18:32:06.000Z',
profile:
{ login: 'rob@adhocteam.us',
firstName: 'Rob',
lastName: 'Wilkerson',
locale: 'en',
timeZone: 'America/Los_Angeles' } },
profile:
{ login: 'rob@adhocteam.us',
firstName: 'Rob',
lastName: 'Wilkerson',
locale: 'en',
timeZone: 'America/Los_Angeles' },
factors: undefined,
externalFactorTable:
{ 'e45f4a17-7f37-4ccb-8b1e-e491a101153c':
{ id: 'e45f4a17-7f37-4ccb-8b1e-e491a101153c',
type: 'sms',
profile: [Object] } },
factorTable:
{ 'e45f4a17-7f37-4ccb-8b1e-e491a101153c':
{ id: 'sms80gqqvKicHagkE296',
factorType: 'sms',
provider: 'OKTA',
vendorName: 'OKTA',
profile: [Object] } },
reverseFactorLookupTable: { sms80gqqvKicHagkE296: 'e45f4a17-7f37-4ccb-8b1e-e491a101153c' },
_activeFactor:
{ id: 'sms80gqqvKicHagkE296',
factorType: 'sms',
provider: 'OKTA',
vendorName: 'OKTA',
profile: { phoneNumber: '+1 XXX-XXX-1069' } } }
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment