proxmox-mirrors/pve-access-control
1
0
Fork 0
mirror of https://git.proxmox.com/git/pve-access-control synced 2025-06-14 17:47:03 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

add /access/user/{id}/tfa api call to get tfa types

Browse Source 
this api call will be used to display the right kind of tfa for the gui

Signed-off-by: Dominik Csapak <d.csapak@proxmox.com>
This commit is contained in:
Dominik Csapak 2019-05-03 09:45:51 +02:00 committed by Thomas Lamprecht
parent 860ddcba6a
commit e51988b4cb
1 changed files with 59 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

59
PVE/API2/User.pm
View File

@ -369,4 +369,63 @@ __PACKAGE__->register_method ({
return undef;
}});
__PACKAGE__->register_method ({
name => 'read_user_tfa_type',
path => '{userid}/tfa',
method => 'GET',
protected => 1,
description => "Get user TFA types (Personal and Realm).",
permissions => {
check => [ 'or',
['userid-param', 'self'],
['userid-group', ['User.Modify', 'Sys.Audit']],
],
},
parameters => {
additionalProperties => 0,
properties => {
userid => get_standard_option('userid-completed'),
},
},
returns => {
additionalProperties => 0,
properties => {
realm => {
type => 'string',
enum => [qw(oath yubico)],
description => "The type of TFA the users realm has set, if any.",
optional => 1,
},
user => {
type => 'string',
enum => [qw(oath u2f)],
description => "The type of TFA the user has set, if any.",
optional => 1,
},
},
type => "object"
},
code => sub {
my ($param) = @_;
my ($username, undef, $realm) = PVE::AccessControl::verify_username($param->{userid});
my $domain_cfg = cfs_read_file('domains.cfg');
my $realm_cfg = $domain_cfg->{ids}->{$realm};
die "auth domain '$realm' does not exist\n" if !$realm_cfg;
my $realm_tfa = {};
$realm_tfa = PVE::Auth::Plugin::parse_tfa_config($realm_cfg->{tfa})
if $realm_cfg->{tfa};
my $tfa_cfg = cfs_read_file('priv/tfa.cfg');
my $tfa = $tfa_cfg->{users}->{$username};
my $res = {};
$res->{realm} = $realm_tfa->{type} if $realm_tfa->{type};
$res->{user} = $tfa->{type} if $tfa->{type};
return $res;
}});
1;