-
Notifications
You must be signed in to change notification settings - Fork 1.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[v17] Add SSO MFA prompt for WebUI MFA flows #50529
Conversation
This pull request is automatically being deployed by Amplify Hosting (learn more). |
@@ -22,7 +22,7 @@ import { useParams } from 'react-router'; | |||
import useAttempt from 'shared/hooks/useAttemptNext'; | |||
|
|||
import { ButtonState } from 'teleport/lib/tdp'; | |||
import { useMfa } from 'teleport/lib/useMfa'; | |||
import { useMfaTty } from 'teleport/lib/useMfa'; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pretty sure this breaks per-session MFA for desktops: see #50557
Requesting changes and adding a do-not-merge label to prevent this from getting in a release.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I've added the fix #50793 into this backport
b9adc43
to
5ec8278
Compare
8acdf41
to
6799f94
Compare
@zmb3 The Desktop Access regression has been fixed and backported here, can you take another look? |
e3a2c31
to
5676dfb
Compare
* Include sso channel ID in web mfa challenges. * Handle SSO MFA challenges. * Handle sso response in backend. * Handle non-webauthn mfa response for file transfer, admin actions, and app session. * Simplify useMfa with new helpers. * Fix lint. * Use AuthnDialog for file transfers; Fix json backend logic for file transfers. * Make useMfa and AuthnDialog more reusable and error proof. * Use AuthnDialog for App sessions. * Resolve comments. * Fix broken app launcher; improve mfaRequired logic in useMfa. * Fix AuthnDialog test. * Fix merge conflict with Db web access. * fix stories. * Refactor mfa required logic. * Address bl-nero's comments. * Address Ryan's comments. * Add useMfa unit test. * Fix story lint. * Replace Promise.withResolvers for compatiblity with older browers; Fix bug where MFA couldn't be retried after a failed attempt; Add extra tests.
* Add sendChallengeResponse implementation for desktop sessions. * Rename useMfaTty to useMfaEmitter.
5676dfb
to
f5f100b
Compare
Changelog: Add full SSO MFA support for the WebUI.
Backport #4979, #50793, and #50844 to branch/v17