Skip to content

Verifying an Okta Verify Challenge using TOTP using VerifyAuthenticatorOptions sets wrong value #338

@bdemers

Description

@bdemers

Calling IDXAuthetnicationWrapper.verifyAuthenticator(ProceedContext proceedContext, VerifyAuthenticatorOptions verifyAuthenticatorOptions) always sets the credential passcode.

This doesn't match the patterns use else were in the SDK where the current transaction context is used to set the correct value.

For example in the case of credentials.setTotp() should be called instead.

Current work around is to use: IdxAuthenticationWrapper.verifyAuthenticator(proceedContext, new VerifyChannelDataOptions("totp", code)); instead.
But the caller doesn't have any context available in the AuthenticationResponse to know if this is a totp code or not.
(and requires a magic string

Metadata

Metadata

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions