Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

MFA when using oauth/ro endpoint #628

Merged
merged 1 commit into from
Oct 17, 2016
Merged

Conversation

dafortune
Copy link
Contributor

@dafortune dafortune commented Sep 29, 2016

This enables lock to use MFA for ajax calls to the RO endpoint.
The basic configuration to support this use case is:

    const lock = new Auth0Lock(cid, domain, {
      auth: {
        redirect: false,
        sso: false
      }
    });
    lock.show();
    lock.on("authenticated", function(authResult) {
      lock.hide();
      alert(JSON.stringify(authResult, null, 2));
    });

The result is that in case of mfa required we will show a new screen:
screen shot 2016-09-29 at 12 29 28 am

@@ -14,6 +14,8 @@ export default {
"lock.network": "We could not reach the server. Please check your connection and try again.",
"lock.popup_closed": "Popup window closed. Try again.",
"lock.unauthorized": "Permissions were not granted. Try again.",
"lock.mfa_registration_required": "Multifactor authentication is required but your device is not enrolled. Please enroll it before moving on.",
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not sure what to say in this case; we don't support enrollment. "Enrollment not supported"?

@dafortune dafortune force-pushed the add-mfa-code-input branch 5 times, most recently from 6ccff4b to 69f3b65 Compare September 30, 2016 02:41
We will show MFA screen when mfa is required for an user
and the customer is using the /ro endpoint instead of
popup or redirect mode (push notifications not allowed).
@hzalaz hzalaz changed the title Feature: MFA in /ro endpoint MFA when using oauth/ro endpoint Oct 12, 2016
@hzalaz hzalaz modified the milestone: v10.5.0 Oct 12, 2016
@hzalaz hzalaz merged commit f82d025 into auth0:master Oct 17, 2016
@narwajea
Copy link

narwajea commented Nov 9, 2016

Why just update src/i18n/en.js & src/i18n/es.js ? I get many warnings in fr locale..

image

@glena
Copy link
Contributor

glena commented Nov 9, 2016

@narwajea you can add disableWarnings:true to disable them

@narwajea
Copy link

narwajea commented Nov 9, 2016

Thank you for the suggestion, but still why not updating all language files ?

@glena
Copy link
Contributor

glena commented Nov 9, 2016

Yes we are working on it, but there are a lot of languages and we are trying to avoid using google translate to assure the quality of the translation. If you are fluent in french and want to collaborate PRs are always welcome.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants