topic Re: Bug on duo auth endpoint in APIs

Bug on duo auth endpoint

Tinchito — Thu, 28 Oct 2021 20:16:08 GMT

When I send a request with the following;

POST /auth/v2/auth

async, 0
factor, passcode,
passcode, invalidPasscodeHere
userId, validUserId

it returns => stat: OK instead of stat: FAIL

Re: Bug on duo auth endpoint

DuoKristina — Thu, 28 Oct 2021 21:06:15 GMT

This isn’t a bug! The request didn’t fail. You sent invalid information (a bad passcode) in an API request that succeeded. The information sent with the API response indicates that the passcode validation failed.

{
    "response": {
        "result": "deny",
        "status": "deny",
        "status_msg": "Incorrect passcode. Please try again."
    },
    "stat": "OK"
}

Re: Bug on duo auth endpoint

Tinchito — Thu, 28 Oct 2021 21:31:46 GMT

DuoKristina:

This isn’t a bug! The request didn’t fail. You sent invalid information (a bad passcode) in an API request that succeeded. The information sent with the API response indicates that the passcode validation failed.

Sorry, I should have written: validPasscode.

Re: Bug on duo auth endpoint

DuoKristina — Fri, 29 Oct 2021 12:27:25 GMT

Hmm, why would you expect a POST to auth with a valid passcode to fail?

Either way, a correctly constructed request will return 200 and a result.

Note that userID isn’t a valid parameter, but user_id is. If you are truly sending userID then that is expected to return stat: FAIL telling you there’s a missing request parameter.